mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-02-28 20:50:36 -05:00
2eef3b1a14
Automatic merge from submit-queue (batch tested with PRs 41814, 41922, 41957, 41406, 41077) Use consistent helper for getting secret names from pod Kubelet secret-manager and mirror-pod admission both need to know what secrets a pod spec references. Eventually, a node authorizer will also need to know the list of secrets. This creates a single (well, double, because api versions) helper that can be used to traverse the secret names referenced from a pod, optionally short-circuiting (for places that are just looking to see if any secrets are referenced, like admission, or are looking for a particular secret ref, like authorization) Fixes: * secret manager not handling secrets used by env/envFrom in initcontainers * admission allowing mirror pods with secret references @smarterclayton @wojtek-t |
||
|---|---|---|
| .. | ||
| admit | ||
| alwayspullimages | ||
| antiaffinity | ||
| defaulttolerationseconds | ||
| deny | ||
| exec | ||
| gc | ||
| imagepolicy | ||
| initialresources | ||
| limitranger | ||
| namespace | ||
| persistentvolume/label | ||
| podnodeselector | ||
| resourcequota | ||
| security | ||
| securitycontext/scdeny | ||
| serviceaccount | ||
| storageclass/default | ||
| OWNERS | ||