Jordan Liggitt
92eb072989
Propagate context to Authorize() calls
2019-09-24 11:14:54 -04:00
Jordan Liggitt
61774cd717
Plumb context to admission Admit/Validate
2019-08-20 11:11:00 -04:00
Mehdy Bohlool
d08bc3774d
Mechanical changes due to signature change for Admit and Validate functions
2019-02-16 13:28:47 -08:00
Chao Xu
db3c84a97c
make gc admission set attribute namespace correctly for owners
2018-10-29 15:00:11 -07:00
David Eads
1f4f22f72d
don't block creation on lack of delete powers
2018-05-03 12:04:04 -04:00
David Eads
9a48066749
update restmapping to indicate fully qualified resource
2018-05-01 16:34:49 -04:00
hzxuzhonghu
7c5f9e0bba
refactor admission flag: add two admission flags and make plugins auto in recommended order
2018-01-19 13:16:36 +08:00
Mike Danese
12125455d8
move authorizers over to new interface
2017-11-03 13:46:28 -07:00
David Eads
75c448dbc7
make easy validation admission plugins into validators
2017-11-03 07:54:39 -04:00
Dr. Stefan Schimanski
aedcf681b3
admission: rename Validate{ -> Initialization}, Validat{ingAdmit -> e}
2017-11-02 09:29:55 +01:00
David Eads
6d040812f0
check block owner ref on finalizers subresource
2017-09-05 11:29:52 -04:00
p0lyn0mial
c5019bf696
remove init blocks from all admission plugins
2017-05-23 22:00:32 +02:00
p0lyn0mial
3f8d6e9210
Change all the existing admission init blocks to call a Register function
...
this is a two stage refactor when done there will be no init block in admission plugins.
Instead all plugins expose Register function which accept admission.Plugins instance.
The registration to global plugin registry happens inside Register func.
2017-05-18 22:25:01 +02:00
Derek Carr
c20a33c5bd
OwnerReferencesPermissionEnforcement ignores pods/status
2017-05-15 12:21:23 -04:00
Chao Xu
9d7a8df5ee
add gc admission plugin that prevents user who doesn't have delete permission of the owner from setting blockOwnerDeletion
2017-04-13 11:55:22 -07:00
Dr. Stefan Schimanski
63f547e1b1
pkg/admission: make plugin registry non-global
2017-04-12 11:37:25 +02:00
Dr. Stefan Schimanski
79adb99a13
pkg/api: move Semantic equality to k8s.io/apimachinery/pkg/api/equality
2017-01-29 21:41:45 +01:00
deads2k
01b3b2b461
move admission to genericapiserver
2017-01-18 08:15:19 -05:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
deads2k
4d7fcae85a
mechanicals
2017-01-05 11:14:27 -05:00
deads2k
2861509b6d
refactored admission to avoid internal client references
2017-01-03 15:50:12 -05:00
deads2k
14c164a328
add ownerref permission checks
2016-10-17 09:38:05 -04:00
