kubernetes/pkg
Kubernetes Submit Queue b256b07007 Merge pull request #32407 from deads2k/authz-01-lsar
Automatic merge from submit-queue

add local subject access review API

Adds a local subject access review endpoint to allow a project-admin (someone with full rights within a namespace) the power to inspect whether a person can perform an action in his namespace.  This is a separate resource be factoring like this ensures that it is impossible for him to look outside his namespace and makes it possible to create authorization rules that can restrict this power to a project-admin in his own namespace.  Other factorings require introspection of objects.

@kubernetes/sig-auth
2016-09-13 22:09:35 -07:00
..
admission Fix usage of shared informer in namespace admission controllers 2016-08-01 13:40:34 -04:00
api Revert "Allow webhook authenticator to use TokenReviewsInterface" 2016-09-13 11:48:43 -07:00
apimachinery filter enabled versions by enablement 2016-09-09 13:51:21 -04:00
apis Merge pull request #32407 from deads2k/authz-01-lsar 2016-09-13 22:09:35 -07:00
apiserver Improvements on OpenAPI spec generation: 2016-09-12 18:47:03 -07:00
auth Merge pull request #30369 from lixiaobing10051267/masterQuote 2016-08-23 00:19:25 -07:00
capabilities Use Go canonical import paths 2016-07-16 13:48:21 -04:00
client generated client 2016-09-13 08:54:23 -04:00
cloudprovider Merge pull request #32265 from lojies/errmodify 2016-09-13 01:16:03 -07:00
controller add localSAR 2016-09-13 08:54:23 -04:00
conversion Introduce GroupVersioner for capturing desired target version 2016-08-18 14:45:00 -04:00
credentialprovider Wrong path for log_handler.go 2016-07-27 16:04:20 +08:00
dns add err to glog 2016-09-09 17:03:27 +08:00
fieldpath Fix default resource limits (node capacities) for downward api volumes 2016-08-16 14:41:17 -04:00
fields make labels, fields expose selectable requirements 2016-08-20 10:10:51 -07:00
genericapiserver Merge pull request #32582 from jlowdermilk/api-all 2016-09-13 20:27:34 -07:00
healthz fixes the wrong doc in package healthz 2016-07-18 22:46:09 +08:00
httplog Log useful information on 500's 2016-08-31 13:46:40 -07:00
hyperkube Use Go canonical import paths 2016-07-16 13:48:21 -04:00
kubectl Merge pull request #32274 from ping035627/ping035627-patch-0908 2016-09-13 01:15:52 -07:00
kubelet Merge pull request #31576 from feiskyer/kuberuntime-filter 2016-09-13 16:42:13 -07:00
kubemark Kubelet Refactoring 2016-08-25 10:57:31 -07:00
labels Don't validate selector that is already validated 2016-08-22 09:39:32 +02:00
master add localSAR 2016-09-13 08:54:23 -04:00
metrics Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
probe Merge pull request #27562 from 7ing/ipt 2016-08-02 08:02:32 -07:00
proxy Fix kube-proxy logic to change iptables chains when ESIPP is turned on or off 2016-09-06 11:04:36 -07:00
quota Fix quota constraints func for pvc 2016-08-22 14:18:15 -04:00
registry add localSAR 2016-09-13 08:54:23 -04:00
runtime Update generated proto and swagger docs 2016-09-12 18:47:03 -07:00
security Fix PSP volumes error message 2016-09-01 15:55:34 -07:00
securitycontext Remove pod mutation for PVs with supplemental GIDs 2016-07-22 17:41:44 -04:00
selection make labels, fields expose selectable requirements 2016-08-20 10:10:51 -07:00
serviceaccount Check for valid serviceaccount JWT token before inspecting claims 2016-07-06 14:25:15 -04:00
ssh Revert "Add a customized ssh dialer that will timeout" 2016-07-14 08:48:24 +02:00
storage Extend logging for performance debuggin 2016-09-12 12:46:19 +02:00
types Add Federated Ingress Controller. 2016-08-22 12:59:54 -07:00
ui Use Go canonical import paths 2016-07-16 13:48:21 -04:00
util Merge pull request #32244 from tksm/fix-cache-race 2016-09-13 14:36:26 -07:00
version Add +k8s:openapi-gen tag to API types 2016-09-12 18:47:03 -07:00
volume Merge pull request #32242 from jingxu97/bug-wrongvolume-9-2 2016-09-12 15:29:38 -07:00
watch Federated Ingress: unify UID's across Cluster Ingress Controllers 2016-09-13 08:29:33 -07:00
OWNERS Remove bgrant from pkg/OWNERS and pkg/kubectl/OWNERS since he has plenty to do. 2016-06-16 08:21:27 -07:00