This commit modifies the following files:
- pkg/apis/core/types.go
- staging/src/k8s.io/api/core/v1/types.go
Other changes were auto-generated by running `make update`.
This commit only adds the field definition.
The implementation will be provided in a follow-up commit.
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
- Add webhook configs as valid types
- Begin wiring up authz for the tests
- Wire up private claims and webhook configuration bound objects
- Add authz checks
- Wire up bound object name/uid to tokenreview
- Protobuf generation for v1 type
- Plumb attestations through to UserInfo.Extra
- Add integration tests
- Add attestation validations
- Add audience logic and tests
- Add wh check
- Add unit tests
- Remove attestations from SAR UserInfo
- Check for kube-apiserver audiences and deny if there
- Add unit tests for TokenREST.Create
- Check webhook configuration deletion timestamp
- Enforce ten minute limit on admission review webhook token requests
Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>
Regenerated protobuf, OpenAPI (v2 swagger + v3), swagger docs, client-go
applyconfigurations, and the golangci-lint config after enabling the
commentstart rule for the policy API group.
The v1.VolumeMount.MountPath doc claims the path must not contain
':', but the validator does not enforce this. The internal type in
pkg/apis/core/types.go carries no such constraint, and existing
TestValidateVolumeMounts success cases use mountPath values like "d:",
"F:", and "G:\mount".
This is a doc-only change. The validator is unchanged; the public doc
now matches what the validator actually accepts. Regenerated proto and
openapi snapshots to propagate the doc update.
Signed-off-by: Kimon N. <nkimon00@gmail.com>
It's GA now. To regenerate the files I did:
make WHAT=cmd/kube-apiserver
make update
While we are there, remove the reference that the field is alpha.
Signed-off-by: Rodrigo Campos <rodrigo@amutable.com>
* Drop WorkloadRef field and introduce SchedulingGroup field in Pod API
* Introduce v1alpha2 Workload and PodGroup APIs, drop v1alpha1 Workload API
Co-authored-by: yongruilin <yongrlin@outlook.com>
* Run hack/update-codegen.sh
* Adjust kube-scheduler code and integration tests to v1alpha2 API
* Drop v1alpha1 scheduling API group and run make update
---------
Co-authored-by: yongruilin <yongrlin@outlook.com>
Add missing +optional and +required markers to authentication API types
across v1, v1beta1, and v1alpha1 versions, and remove authentication
from the linter exception lists.
Part of kubernetes/kubernetes#134671
