Kubernetes Submit Queue 2eef3b1a14 Merge pull request #41957 from liggitt/mirror-pod-secrets ...

Automatic merge from submit-queue (batch tested with PRs 41814, 41922, 41957, 41406, 41077)

Use consistent helper for getting secret names from pod

Kubelet secret-manager and mirror-pod admission both need to know what secrets a pod spec references. Eventually, a node authorizer will also need to know the list of secrets.

This creates a single (well, double, because api versions) helper that can be used to traverse the secret names referenced from a pod, optionally short-circuiting (for places that are just looking to see if any secrets are referenced, like admission, or are looking for a particular secret ref, like authorization)

Fixes:
* secret manager not handling secrets used by env/envFrom in initcontainers
* admission allowing mirror pods with secret references

@smarterclayton @wojtek-t

2017-02-26 10:22:51 -08:00

..

admit

move admission to genericapiserver

2017-01-18 08:15:19 -05:00

alwayspullimages

move admission to genericapiserver

2017-01-18 08:15:19 -05:00

antiaffinity

move admission to genericapiserver

2017-01-18 08:15:19 -05:00

defaulttolerationseconds

Merge pull request #41815 from kevin-wangzefeng/enable-defaulttolerationseconds-admission-controller

2017-02-26 08:09:58 -08:00

deny

Improve the code coverage of /plugin/pkg/admission/deny

2017-02-02 11:44:57 +08:00

exec

Update generated files

2017-02-03 08:15:46 +01:00

gc

Update generated files

2017-01-29 21:41:45 +01:00

imagepolicy

fix typo in /pkg/admission/imagepolicy/config.go

2017-02-12 21:59:36 +08:00

initialresources

Update to use proxy subresource consistently

2017-02-13 22:05:00 -05:00

limitranger

Switch admission to use shared informers

2017-02-23 11:16:09 -05:00

namespace

Switch admission to use shared informers

2017-02-23 11:16:09 -05:00

persistentvolume/label

move admission to genericapiserver

2017-01-18 08:15:19 -05:00

podnodeselector

Switch admission to use shared informers

2017-02-23 11:16:09 -05:00

resourcequota

Switch admission to use shared informers

2017-02-23 11:16:09 -05:00

security

Switch admission to use shared informers

2017-02-23 11:16:09 -05:00

securitycontext/scdeny

move admission to genericapiserver

2017-01-18 08:15:19 -05:00

serviceaccount

Merge pull request #41957 from liggitt/mirror-pod-secrets

2017-02-26 10:22:51 -08:00

storageclass/default

Switch admission to use shared informers

2017-02-23 11:16:09 -05:00

OWNERS

OWNERS: Update latest OWNERS files

2017-01-23 10:05:48 -08:00