Maksim Fedotov
b28b98a7bc
feat: namespace labeling for tenant owners. fix linting issues
2021-09-23 14:10:24 +02:00
Maksim Fedotov
a14c7609df
feat: namespace labeling for tenant owners
2021-09-23 14:10:24 +02:00
alegrey91
196e3c910d
feat: add deny-wildcard annotation
2021-09-21 19:14:49 +02:00
Dario Tranchitella
26965a5ea2
fix: skipping indexer if error is a NoKindMatch
2021-09-17 15:43:42 +02:00
Maksim Fedotov
422b6598ba
fix: check if user is a member of capsuleUserGroup instead of tenantOwner when cordoning a tenant
2021-09-15 11:14:39 +02:00
Dario Tranchitella
94c6a64fcb
fix: validating Tenant owner name when is a ServiceAccount
2021-09-04 14:17:06 +02:00
Dario Tranchitella
60ab33337d
feat: enforcement of LoadBalancer service kind
2021-08-17 17:21:59 +02:00
Dario Tranchitella
a2fda44110
fix: NewIngressHostnameCollision is returning pointer for error parsing
2021-08-12 19:30:27 +02:00
Dario Tranchitella
df08c9e63e
refactor: hostname collision is now managed at Tenant level
2021-08-12 19:30:27 +02:00
Dario Tranchitella
09277e9f3d
feat: Ingress hostname collision scope at Tenant level
2021-08-12 19:30:27 +02:00
Dario Tranchitella
e24394f329
refactor: avoiding init functions for direct registration
2021-08-12 19:30:27 +02:00
Dario Tranchitella
01053d5deb
refactor: renaming struct field names for allowed hostnames and classes
2021-08-12 19:30:27 +02:00
Dario Tranchitella
b749e34547
refactor: grouping Ingress options into defined struct
2021-08-12 19:30:27 +02:00
Dario Tranchitella
57bf3d1c1b
feat: skipping Ingress indexer setup for deprecated APIs
...
Starting from Kubernetes v1.22+, networking.k8s.io/v1beta1 and
extensions/v1beta1 are no more supported and indexers must not be
started, otherwise the manager would panic.
2021-08-10 15:39:43 +02:00
Dario Tranchitella
18912a002b
feat: allowed external IPs is grouped in ServiceOptions
2021-07-23 08:28:20 +02:00
Dario Tranchitella
0e55823a0c
feat: toggling ExternalName service
2021-07-21 14:34:56 +02:00
Maksim Fedotov
ba690480a7
refactor: use OwnerListSpec to store tenant owners information
2021-07-20 11:21:40 +02:00
Dario Tranchitella
d64dcb5a44
fix: preserving v1alpha1 enable node ports false value avoiding CRD default
2021-07-19 08:15:24 +02:00
Maksim Fedotov
a6408f26b0
feat: support multiple tenant owners(add applications to act as tenant owners)
2021-07-12 11:27:13 +02:00
Maksim Fedotov
b58ca3a7d7
chore: v1beta1 goimports and formatting
2021-07-02 10:14:06 +02:00
Maksim Fedotov
e6b433dcd7
feat(v1beta1): update code to use v1beta1 version
2021-07-02 10:14:06 +02:00
Dario Tranchitella
3e0882dbc8
refactor: domains is now API utils
2021-07-02 10:14:06 +02:00
Dario Tranchitella
ba07f99c6e
refactor!: using multiple handers per route
2021-06-27 22:36:55 +02:00
Dario Tranchitella
7574335a8a
refactor: using separated webhooks for Namespace handling
2021-06-24 13:47:43 +02:00
Dario Tranchitella
72e97b9960
feat: providing utility for webhook auth identification
2021-06-24 13:47:43 +02:00
Dario Tranchitella
b3c6082a1e
feat: providing event for Tenant cordoning
2021-06-24 13:47:43 +02:00
Dario Tranchitella
8804496bb2
feat: cordoning Tenant webhook
2021-06-24 13:47:43 +02:00
Dario Tranchitella
5de0a6d712
# This is a combination of 2 commits.
...
# This is the 1st commit message:
feat: cordoning Tenant webhook
# The commit message #2 will be skipped:
# 5cc
2021-06-24 13:47:43 +02:00
Dario Tranchitella
531cc4cf14
refactor: renaming Tenant webhook handler
2021-06-24 13:47:43 +02:00
Dario Tranchitella
34583352e5
refactor: meaningful error for complete block of Service external IPs
2021-06-21 12:12:04 +02:00
Dario Tranchitella
5681228789
fix: blocking non valid external IP
2021-06-21 12:12:04 +02:00
Dario Tranchitella
7237972b80
fix: using /32 in case of bare IPs
2021-06-21 12:12:04 +02:00
bsctl
44acfaed86
feat: fix typo in event message
2021-06-15 21:42:39 +02:00
bsctl
7ca087cac5
feat: update event messages
2021-06-15 21:42:39 +02:00
Dario Tranchitella
accd9ca038
feat: emitting events for policies violations
2021-06-15 21:42:39 +02:00
Dario Tranchitella
630e802708
feat: image PullPolicy webhook enforcer
2021-06-14 10:53:55 +02:00
Dario Tranchitella
9c8b0377dc
feat: emitting events for Tenant operations
2021-06-06 22:18:51 +02:00
Dario Tranchitella
7c1592e739
chore(license): switching over SPDX license header ( #280 )
2021-06-03 19:46:20 +02:00
Dario Tranchitella
3570b02427
feat!: using CapsuleConfiguration CRD with reload at runtime
2021-05-31 16:15:44 +02:00
Dario Tranchitella
0481822555
feat: enforcing Pod Priority Class
2021-05-29 00:31:17 +02:00
Maksim Fedotov
ef6eea62dc
fix: wrong order of checks in validating-external-service-ips webhook
2021-05-27 19:27:43 +02:00
Maksim Fedotov
3c9895e498
feat: use multiple groups as capsule-user-group
2021-05-25 14:46:05 +02:00
Maksim Fedotov
e6da507d10
feat: block use of NodePort Services
2021-05-19 16:44:08 +02:00
Dario Tranchitella
c22cb6cc88
refactor: moving to admission/v1 for Kubernetes +1.16
2021-05-14 13:55:51 +02:00
Ludovico Russo
c2cede6287
refactor: better name variables in pkg/webhook/utils
2021-05-04 17:49:13 +02:00
Ludovico Russo
36c90d485e
refactor: better name variables in pkg/webhook/tenantprefix
2021-05-04 17:49:13 +02:00
Ludovico Russo
34c958371b
refactor: better name variables in pkg/webhook/tenant
2021-05-04 17:49:13 +02:00
Ludovico Russo
e5f17d1e0d
refactor: better name variables in pkg/webhook/services
2021-05-04 17:49:13 +02:00
Ludovico Russo
e1b203727d
refactor: better name variables in pkg/webhook/registry
2021-05-04 17:49:13 +02:00
Ludovico Russo
cec8cc0573
refactor: better name variables in pkg/webhook/pvc
2021-05-04 17:49:13 +02:00
