David Eads
a59b92e8c0
reduce API surface area of whether a resource is enabled
2022-02-23 13:36:33 -05:00
David Eads
132fbf4192
convert rest storage to per-resource
2022-02-16 14:19:29 -05:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2021-12-09 21:31:26 -05:00
Jordan Liggitt
b1d344db44
Drop legacy validation logic for certificates API
2021-08-09 12:37:34 -04:00
Jordan Liggitt
39a1293cbc
Drop beta REST APIs removed in 1.22
2021-08-09 11:10:16 -04:00
Monis Khan
cd91e59f7c
csr: add expirationSeconds field to control cert lifetime
...
This change updates the CSR API to add a new, optional field called
expirationSeconds. This field is a request to the signer for the
maximum duration the client wishes the cert to have. The signer is
free to ignore this request based on its own internal policy. The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration. The minimum allowed
value for this field is 600 seconds (ten minutes).
This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.
Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.
Signed-off-by: Monis Khan <mok@vmware.com >
2021-07-01 23:38:15 -04:00
Jordan Liggitt
8c8a4cf3e4
Add WarningsOnCreate,WarningsOnUpdate
2021-05-18 10:42:36 -04:00
Kevin Delgado
a1fac8cbd9
Server-Side Apply: Status Wiping/Reset Fields
...
Adds and implements ResetFieldsProvder interface in order to ensure that
the fieldmanager no longer owns fields that get reset before the object
is persisted.
Co-authored-by: Kevin Wiesmueller <kwiesmul@redhat.com >
Co-authored-by: Kevin Delgado <kevindelgado@google.com >
2021-03-10 01:02:18 +00:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
David Eads
37cc89ed8d
finish removal of exportoptions
2021-01-22 13:47:31 -05:00
phillc
adbc7c2172
find . -type f \( -name "*.go" -or -name "*.md" \) -print0 | xargs -0 gsed -i 's/the the /the /g'
2020-09-21 16:37:12 -04:00
Jordan Liggitt
a504445086
Generated files
...
Change-Id: I598d686849f4b97846757b227f5191bac031798b
2020-06-05 04:58:14 +00:00
Jordan Liggitt
e0f5cca410
Copy CSR v1beta1 to v1
...
* Remove prerelease tags
* Update copyright, package, imports to v1
* Remove signerName, usages, and condition status defaulting
2020-06-05 00:47:24 -04:00
Kubernetes Prow Robot
84861d2102
Merge pull request #91558 from liggitt/csr-e2e
...
Add e2e coverage for the CertificateSigningRequest API, enable patch support for approval subresource
2020-06-02 06:28:15 -07:00
Jordan Liggitt
e11404ac1f
Add patch support for certificatesigningrequests/approval
2020-05-29 11:50:44 -04:00
Jordan Liggitt
7049149181
Generated files
2020-05-28 16:53:23 -04:00
Jordan Liggitt
aed0621f2e
Plumb version info to validation, separate main/status/approval validation
2020-05-28 12:20:40 -04:00
James Munnelly
a983356caa
Add signerName field to CSR resource spec
...
Signed-off-by: James Munnelly <james.munnelly@jetstack.io >
2020-02-27 10:17:55 +00:00
Roy Hvaara
cfc34712c2
Fix golint issues in pkg/registry/.../storage
2019-11-10 00:22:51 +01:00
Ted Yu
87b2a3129b
Propagate error from NewREST
2019-08-12 13:55:35 -07:00
Sean Sullivan
abfc5bbbf7
Rename TablePrinter interface to TableGenerator
2019-04-16 12:55:30 -07:00
Kubernetes Prow Robot
a887ae8344
Merge pull request #74208 from lrx0014/unittest
...
fixes: some wrong comments
2019-02-18 22:45:49 -08:00
renxiang
8c8a9f850b
fixes: some wrong comments
2019-02-18 19:02:28 +08:00
Kubernetes Prow Robot
808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable
...
Remove executable file permission from OWNERS files
2019-02-14 23:55:45 -08:00
Roy Lenferink
b43c04452f
Updated OWNERS files to include link to docs
2019-02-04 22:33:12 +01:00
Justin SB
dd19b923b7
Remove executable file permission from OWNERS files
2019-01-11 16:42:59 -08:00
Jordan Liggitt
4ebe084376
certificates subproject approvers/reviewers
2018-11-06 00:57:38 -05:00
Jordan Liggitt
652e2dc025
generated
2018-07-13 11:41:09 -04:00
Jordan Liggitt
617078d220
Remove hand-written typed registries
2018-07-13 11:40:52 -04:00
Antoine Pelisse
03b1e14101
dry-run: Create new options for Update/Create and pass it along
2018-07-12 07:18:37 -07:00
jennybuckley
c60fe4fb76
Propagate forceAllowCreate as false to all subresources
2018-06-29 11:28:19 -07:00
jennybuckley
d10e08fc89
Allow override AllowCreateOnUpdate with new argument to Update
2018-06-28 14:24:51 -07:00
Jeff Grafton
23ceebac22
Run hack/update-bazel.sh
2018-06-22 16:22:57 -07:00
Haowei Cai
4e114fd65b
generated
2018-05-18 18:42:39 -07:00
Haowei Cai
cd13c41dde
Add GET PATCH support for two /status:
...
apiservices/status under apiregistration.k8s.io
certificatesigningrequests/status under certificates.k8s.io
2018-05-18 18:31:27 -07:00
David Eads
c5445d3c56
simplify api registration
2018-05-08 18:33:50 -04:00
David Eads
a89291a5de
stop duplicating preferred version order
2018-04-26 10:03:36 -04:00
Mike Danese
54fd2aaefd
replace request.Context with context.Context
2018-04-24 08:59:00 -07:00
Maciej Szulik
5630d29552
Add missing table converters for server side printing
2018-02-28 17:27:45 +01:00
Jeff Grafton
ef56a8d6bb
Autogenerated: hack/update-bazel.sh
2018-02-16 13:43:01 -08:00
hzxuzhonghu
d0d1e1dcc4
refactor resource_config.go thoroughly and remove useless code in registry
2018-01-27 16:10:58 +08:00
Jeff Grafton
efee0704c6
Autogenerate BUILD files
2017-12-23 13:12:11 -08:00
Dr. Stefan Schimanski
2452afffe0
admission: wire create+update validation func into kube registries
2017-11-02 09:29:16 +01:00
Dr. Stefan Schimanski
cad0364e73
Update bazel
2017-10-18 17:24:04 +02:00
Dr. Stefan Schimanski
7773a30f67
pkg/api/legacyscheme: fixup imports
2017-10-18 17:23:55 +02:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
Kubernetes Submit Queue
ea5cd00958
Merge pull request #51840 from jcbsmpsn/cleanup-csrs
...
Automatic merge from submit-queue (batch tested with PRs 51840, 53542, 53857, 53831, 53702). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md ">here</a>.
New controller to GC CSRs.
Fixes https://github.com/kubernetes/kubernetes/issues/51550
```release-note
Adds a new controller which automatically cleans up Certificate Signing Requests that are
Approved and Issued, or Denied.
```
2017-10-13 12:44:47 -07:00
Dr. Stefan Schimanski
ecb65a6a71
Update generated files
2017-10-07 11:28:47 +02:00
Dr. Stefan Schimanski
509df603b1
apimachinery: mechanical removal of ObjectCopier plumbing
2017-10-06 19:21:03 +02:00
Jacob Simpson
2a6099b8f9
New controller to GC CSRs.
2017-10-04 14:45:32 -07:00
