Kubernetes Submit Queue a9fbeef694 Merge pull request #45929 from liggitt/node-admission ...

Automatic merge from submit-queue (batch tested with PRs 41535, 45985, 45929, 45948, 46056)

NodeRestriction admission plugin

Adds an optional `NodeRestriction` admission plugin that limits identifiable kubelets to mutating their own Node object, and Pod objects bound to their node.

This is the admission portion of https://github.com/kubernetes/community/blob/master/contributors/design-proposals/kubelet-authorizer.md and kubernetes/features#279

```release-note
The `NodeRestriction` admission plugin limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin, kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:<nodeName>`. Such kubelets will only be allowed to modify their own `Node` API object, and only modify `Pod` API objects that are bound to their node.
```

2017-05-18 19:58:13 -07:00

..

endpoints

autogenerated

2017-04-14 10:40:57 -07:00

errors

…

events

autogenerated

2017-04-14 10:40:57 -07:00

helper

autogenerated

2017-04-14 10:40:57 -07:00

install

autogenerated

2017-04-14 10:40:57 -07:00

meta

…

pod

Add pod util for extracting referenced configmaps

2017-05-18 15:38:29 -04:00

ref

autogenerated

2017-04-14 10:40:57 -07:00

resource

move pkg/api/v1/ref.go and pkg/api/v1/resource.go to subpackages. move some functions in resource.go to pkg/api/v1/node and pkg/api/v1/pod

2017-04-17 11:38:11 -07:00

service

Move defaulting logic for ExternalTrafficPolicy into defaults.go

2017-05-17 12:47:01 -07:00

testapi

Used Pods interface for binding.

2017-04-19 21:32:38 +08:00

testing

Move defaulting logic for ExternalTrafficPolicy into defaults.go

2017-05-17 12:47:01 -07:00

unversioned

Update 'More info' links on API types and fields

2017-05-15 13:32:25 -07:00

util

…

v1

Merge pull request #45929 from liggitt/node-admission

2017-05-18 19:58:13 -07:00

validation

Autogenerated files

2017-05-16 21:55:51 -07:00

annotation_key_constants.go

Move API annotations into annotation_key_constants and remove api/annotations package

2017-05-16 21:55:23 -07:00

BUILD

Autogenerated files

2017-05-16 21:55:51 -07:00

conversion_test.go

…

copy_test.go

make round trip testing generic

2017-02-09 11:42:22 -05:00

deep_copy_test.go

…

defaulting_test.go

Remove vestiges of defaulting from conversion path, switch to top-level default registration only

2017-04-12 13:36:15 -04:00

doc.go

…

field_constants.go

…

json.go

Change taint/toleration annotations to api fields.

2017-02-22 09:27:42 -05:00

meta_test.go

API

2017-02-28 23:05:40 -08:00

node_example.json

…

objectreference.go

move ref.go to its own subpackage

2017-04-13 10:02:43 -07:00

OWNERS

…

register.go

Remove vestiges of defaulting from conversion path, switch to top-level default registration only

2017-04-12 13:36:15 -04:00

replication_controller_example.json

…

resource.go

move resource_helpers.go to a subpackage

2017-04-13 12:03:42 -07:00

serialization_proto_test.go

Add a test that verifies all structs have protobuf tags

2017-03-17 00:29:14 -04:00

serialization_test.go

apimachinery: handle duplicated and conflicting type registration

2017-02-27 21:58:21 +01:00

taint_test.go

move ref.go to its own subpackage

2017-04-13 10:02:43 -07:00

taint.go

move ref.go to its own subpackage

2017-04-13 10:02:43 -07:00

toleration.go

move ref.go to its own subpackage

2017-04-13 10:02:43 -07:00

types.go

Add initializers and includeUninitialized to the API

2017-05-18 10:07:45 -04:00

unstructured_test.go

Unified unstructured converter interface and setup

2017-02-17 21:07:04 +01:00

zz_generated.deepcopy.go

generated: api changes

2017-05-18 10:07:47 -04:00