authorizer/webhook: make webhook authorizer cluster aware#43

Open

s-urbaniak wants to merge 89 commits intokcp-dev:feature-logical-clusters-1.23from

s-urbaniak:delegating-authorizer

Commits on Feb 3, 2022

DUPLICATE: Bootsptrap the generic control plane

smarterclayton
authored and
ncdc
committed
NEW: Generic control plane based of the upstream kube-apiserver

smarterclayton
authored and
ncdc
committed
DUPLICATE: Bootstrap the creation of a minimal kcp config

davidfestal
authored and
ncdc
committed
NEW: Minimal kcp config, stripped down from kube-apiserver

smarterclayton
authored and
ncdc
committed
NEW: Turn on authorization in the config

smarterclayton
authored and
ncdc
committed
DUPLICATE: Bootstrap the addition of a genericcontrolplane core group

davidfestal
authored and
ncdc
committed
NEW: Add a controlplane core group that drops the legacy group ""

smarterclayton
authored and
ncdc
committed
DUPLICATE: Prepare changes on storage factory

davidfestal
authored and
ncdc
committed
NEW: Allow the storage factory to have no opinions about resource storage

smarterclayton
authored and
ncdc
committed
HACK: Inject an arbitrary key segment from "cluster" to etcd

smarterclayton
authored and
ncdc
committed
HACK: Move cluster context into a spot where we can change etcd keys

smarterclayton
authored and
ncdc
committed
HACK: Allow wildcard watch across clusters

smarterclayton
authored and
ncdc
committed
HACK: Add consistent support of clusterName in all etcd store actions

davidfestal
authored and
ncdc
committed
HACK: Enable adding legacy scheme resources as CRDs...

davidfestal
authored and
ncdc
committed
HACK: Use the dedicated table converter for legacy scheme CRDs (#6)

davidfestal
authored and
ncdc
committed
KUBEFIX: Add strategic merge patch support to CRDs ...

davidfestal
authored and
ncdc
committed
WORKAROUND: Allow core Kube generated openapi to be available

smarterclayton
authored and
ncdc
committed
HACK: Add CRD tenancy...

davidfestal
authored and
ncdc
committed
HACK: Better support client-go scheme CRDs

davidfestal
authored and
ncdc
committed
MD file about KCP changes ...

davidfestal
authored and
ncdc
committed
HACK: Make the Namespace admission multi-cluster-aware

davidfestal
authored and
ncdc
committed
HACK: Make the namepsace controller multi-cluster-aware

davidfestal
authored and
ncdc
committed
HACK: fix klog import
ncdc
committed
HACK: fix hot-looping in naming controller
ncdc
committed
HACK: Search for the right CRD cluster when watching...

davidfestal
authored and
ncdc
committed
HACK: allow configuring the handler chain from options

stevekuznetsov
authored and
ncdc
committed
HACK: opt kcp controllers out of multi-cluster

stevekuznetsov
authored and
ncdc
committed
HACK: export continue token impl

stevekuznetsov
authored and
ncdc
committed
HACK: expose unstructured creator and helpers

stevekuznetsov
authored and
ncdc
committed
HACK: rest: request: allow debugging incoming and outgoing requests

stevekuznetsov
authored and
ncdc
committed
HACK: tablewriter: allow a default type-less handler

stevekuznetsov
authored and
ncdc
committed
HACK: make e2e pass against kcp

stevekuznetsov
authored and
ncdc
committed
HACK: prefix cluster names with external host

stevekuznetsov
authored and
ncdc
committed
server: move kcp-specific cluster handler to kcp

stevekuznetsov
authored and
ncdc
committed
horrible hack: why?

stevekuznetsov
authored and
ncdc
committed
HACK: add generated bits for go 1.17

stevekuznetsov
authored and
ncdc
committed
client-go, client-gen: support cluster explicitly

stevekuznetsov
authored and
ncdc
committed
clients: regenerate

stevekuznetsov
authored and
ncdc
committed
e2e: add a kcp suite

stevekuznetsov
authored and
ncdc
committed
HACK: disable service and enpoint informers

stevekuznetsov
authored and
ncdc
committed
HACK: etcd3: silence spam

stevekuznetsov
authored and
ncdc
committed
HACK: remove more spam

stevekuznetsov
authored and
ncdc
committed
HACK: fix etcd lib compilation

stevekuznetsov
authored and
ncdc
committed
HACK: negotiation: tell the user what they did wrong

stevekuznetsov
authored and
ncdc
committed
Additional checks to avoid panic due to a non-existant CRD.

jmprusi
authored and
ncdc
committed
HACK: scope dynamic and discovery clients by cluster

stevekuznetsov
authored and
ncdc
committed
HACK: chore: re-generate clientsets with clustered discovery

stevekuznetsov
authored and
ncdc
committed
HACK: hard-code the number of servers again

stevekuznetsov
authored and
ncdc
committed
HACK: add Cluster() to generated client Watch()
ncdc
committed
Regenerate clients
ncdc
committed
HACK: Make discovery client logical-cluster aware
ncdc
committed
Add context to generated lister funcs
ncdc
committed
Regenerate listers
ncdc
committed
Print old & new stacks for same path registrations
ncdc
committed
Add cluster name support to meta accessor
ncdc
committed
HACK: let user set cert, key, token for loopback
ncdc
committed
HACK: fix crd openapi bug
ncdc
committed
HACK: discovery.GroupManager: expose Groups()
ncdc
committed
Overridable client/informers for CRD apiserver
ncdc
committed
HACK: make CRDs more extensible
ncdc
committed
HACK: mini aggregator
ncdc
committed
UNDO: contributed resources version hack
ncdc
committed
HACK: CRD discovery fixes
ncdc
committed
HACK: fix conversionLister
ncdc
committed
UNDO: lcluster support for crdRegistrationController
ncdc
committed
REACT(1.23): correct import for clock
ncdc
committed
REACT(1.23): update apiextensions-apiserver delegate
ncdc
committed
REACT(1.23): update flow control API version
ncdc
committed
REACT(1.23): s.Logs.Apply update
ncdc
committed
REACT(1.23): revert any disabled OpenAPI features
ncdc
committed
FIXUP: regen clients to add missing cluster method to watch calls
ncdc
committed
FIXUP: regen listers to add missing WithContext methods
ncdc
committed
Regenerate openapi
ncdc
committed
REACT(1.23): enable flowcontrol v1b2
ncdc
committed
UNDO: most kube-aggregator hacks
ncdc
committed
revert logical cluster prefixing code

stevekuznetsov
authored and
ncdc
committed
genericcontrolplane: make config plumbing composable

sttts
authored and
ncdc
committed
Revert "HACK: let user set cert, key, token for loopback"
ncdc
committed
enable multicluster for rbac resources

s-urbaniak
authored and
ncdc
committed
add patch to multiclusterconfig
ncdc
committed
mccrt: match 1.22 change
ncdc
committed
Add the clusterName to the PATCH object

davidfestal
authored and
ncdc
committed
Now use cluster-aware clientset interface

davidfestal
authored and
ncdc
committed

Commits on Feb 10, 2022

Merge pull request #40 from sttts/sttts-split-generic-kube-apiserver-config-23
sttts
authored

Commits on Feb 17, 2022

authorizer/webhook: make webhook authorizer cluster aware
s-urbaniak
committed