mirror of
https://github.com/optim-enterprises-bv/kubernetes.git
synced 2025-11-01 18:58:18 +00:00
d2e4f54791
Automatic merge from submit-queue (batch tested with PRs 43870, 30302, 42722, 43736)
Admission plugin to merge pod and namespace tolerations for restricting pod placement on nodes
```release-note
This admission plugin checks for tolerations on the pod being admitted and its namespace, and verifies if there is any conflict. If there is no conflict, then it merges the pod's namespace tolerations with the the pod's tolerations and it verifies them against its namespace' whitelist of tolerations and returns. If a namespace does not have its default or whitelist tolerations specified, then cluster level default and whitelist is used. An example of its versioned config:
apiVersion: apiserver.k8s.io/v1alpha1
kind: AdmissionConfiguration
plugins:
- name: "PodTolerationRestriction"
configuration:
apiVersion: podtolerationrestriction.admission.k8s.io/v1alpha1
kind: Configuration
default:
- Key: key1
Value: value1
- Key: key2
Value: value2
whitelist:
- Key: key1
Value: value1
- Key: key2
Value: value2
```
421 lines
16 KiB
Plaintext
421 lines
16 KiB
Plaintext
cluster/addons/fluentd-elasticsearch/es-image
|
|
cluster/gce/gci/mounter
|
|
cluster/images/etcd/attachlease
|
|
cluster/images/etcd/rollback
|
|
cmd/clicheck
|
|
cmd/cloud-controller-manager
|
|
cmd/gendocs
|
|
cmd/genkubedocs
|
|
cmd/genman
|
|
cmd/genswaggertypedocs
|
|
cmd/genyaml
|
|
cmd/gke-certificates-controller
|
|
cmd/kube-apiserver
|
|
cmd/kube-apiserver/app
|
|
cmd/kube-apiserver/app/options
|
|
cmd/kube-controller-manager
|
|
cmd/kube-controller-manager/app/options
|
|
cmd/kube-proxy
|
|
cmd/kubeadm
|
|
cmd/kubeadm/app/apis/kubeadm/install
|
|
cmd/kubeadm/app/discovery/https
|
|
cmd/kubeadm/app/phases/apiconfig
|
|
cmd/kubeadm/app/phases/certs
|
|
cmd/kubeadm/app/phases/kubeconfig
|
|
cmd/kubectl
|
|
cmd/kubelet
|
|
cmd/libs/go2idl/client-gen
|
|
cmd/libs/go2idl/client-gen/generators
|
|
cmd/libs/go2idl/client-gen/test_apis/testgroup/install
|
|
cmd/libs/go2idl/conversion-gen
|
|
cmd/libs/go2idl/deepcopy-gen
|
|
cmd/libs/go2idl/defaulter-gen
|
|
cmd/libs/go2idl/go-to-protobuf
|
|
cmd/libs/go2idl/go-to-protobuf/protoc-gen-gogo
|
|
cmd/libs/go2idl/import-boss
|
|
cmd/libs/go2idl/informer-gen
|
|
cmd/libs/go2idl/lister-gen
|
|
cmd/libs/go2idl/openapi-gen
|
|
cmd/libs/go2idl/set-gen
|
|
cmd/linkcheck
|
|
examples
|
|
examples/explorer
|
|
examples/https-nginx
|
|
examples/sharing-clusters
|
|
federation/apis/core/install
|
|
federation/apis/federation/install
|
|
federation/cmd/federation-apiserver
|
|
federation/cmd/federation-controller-manager
|
|
federation/cmd/genfeddocs
|
|
federation/cmd/kubefed
|
|
hack
|
|
hack/boilerplate/test
|
|
hack/cmd/teststale
|
|
pkg/api
|
|
pkg/api/annotations
|
|
pkg/api/errors
|
|
pkg/api/events
|
|
pkg/api/install
|
|
pkg/api/meta
|
|
pkg/api/pod
|
|
pkg/api/resource
|
|
pkg/api/service
|
|
pkg/api/v1
|
|
pkg/api/v1/service
|
|
pkg/apis/abac/v0
|
|
pkg/apis/abac/v1beta1
|
|
pkg/apis/apps/install
|
|
pkg/apis/apps/v1beta1
|
|
pkg/apis/authentication/install
|
|
pkg/apis/authorization/install
|
|
pkg/apis/autoscaling/install
|
|
pkg/apis/autoscaling/v1
|
|
pkg/apis/batch/install
|
|
pkg/apis/batch/v1
|
|
pkg/apis/batch/v2alpha1
|
|
pkg/apis/certificates/install
|
|
pkg/apis/componentconfig/install
|
|
pkg/apis/extensions/install
|
|
pkg/apis/extensions/v1beta1
|
|
pkg/apis/imagepolicy/install
|
|
pkg/apis/policy/install
|
|
pkg/apis/rbac/install
|
|
pkg/apis/rbac/v1alpha1
|
|
pkg/apis/settings/install
|
|
pkg/apis/settings/validation
|
|
pkg/apis/storage/install
|
|
pkg/apis/storage/validation
|
|
pkg/bootstrap/api
|
|
pkg/client/conditions
|
|
pkg/client/informers/informers_generated/externalversions
|
|
pkg/client/informers/informers_generated/externalversions/apps
|
|
pkg/client/informers/informers_generated/externalversions/apps/v1beta1
|
|
pkg/client/informers/informers_generated/externalversions/autoscaling
|
|
pkg/client/informers/informers_generated/externalversions/autoscaling/v1
|
|
pkg/client/informers/informers_generated/externalversions/autoscaling/v2alpha1
|
|
pkg/client/informers/informers_generated/externalversions/batch
|
|
pkg/client/informers/informers_generated/externalversions/batch/v1
|
|
pkg/client/informers/informers_generated/externalversions/batch/v2alpha1
|
|
pkg/client/informers/informers_generated/externalversions/certificates
|
|
pkg/client/informers/informers_generated/externalversions/certificates/v1beta1
|
|
pkg/client/informers/informers_generated/externalversions/core
|
|
pkg/client/informers/informers_generated/externalversions/core/v1
|
|
pkg/client/informers/informers_generated/externalversions/extensions
|
|
pkg/client/informers/informers_generated/externalversions/extensions/v1beta1
|
|
pkg/client/informers/informers_generated/externalversions/policy
|
|
pkg/client/informers/informers_generated/externalversions/policy/v1beta1
|
|
pkg/client/informers/informers_generated/externalversions/rbac
|
|
pkg/client/informers/informers_generated/externalversions/rbac/v1alpha1
|
|
pkg/client/informers/informers_generated/externalversions/rbac/v1beta1
|
|
pkg/client/informers/informers_generated/externalversions/settings
|
|
pkg/client/informers/informers_generated/externalversions/settings/v1alpha1
|
|
pkg/client/informers/informers_generated/externalversions/storage
|
|
pkg/client/informers/informers_generated/externalversions/storage/v1
|
|
pkg/client/informers/informers_generated/externalversions/storage/v1beta1
|
|
pkg/client/informers/informers_generated/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/apps
|
|
pkg/client/informers/informers_generated/internalversion/apps/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/autoscaling
|
|
pkg/client/informers/informers_generated/internalversion/autoscaling/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/batch
|
|
pkg/client/informers/informers_generated/internalversion/batch/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/certificates
|
|
pkg/client/informers/informers_generated/internalversion/certificates/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/core
|
|
pkg/client/informers/informers_generated/internalversion/core/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/extensions
|
|
pkg/client/informers/informers_generated/internalversion/extensions/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/policy
|
|
pkg/client/informers/informers_generated/internalversion/policy/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/rbac
|
|
pkg/client/informers/informers_generated/internalversion/rbac/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/settings
|
|
pkg/client/informers/informers_generated/internalversion/settings/internalversion
|
|
pkg/client/informers/informers_generated/internalversion/storage
|
|
pkg/client/informers/informers_generated/internalversion/storage/internalversion
|
|
pkg/client/listers/apps/internalversion
|
|
pkg/client/listers/apps/v1beta1
|
|
pkg/client/listers/authentication/internalversion
|
|
pkg/client/listers/authentication/v1
|
|
pkg/client/listers/authentication/v1beta1
|
|
pkg/client/listers/authorization/internalversion
|
|
pkg/client/listers/authorization/v1
|
|
pkg/client/listers/authorization/v1beta1
|
|
pkg/client/listers/autoscaling/internalversion
|
|
pkg/client/listers/autoscaling/v1
|
|
pkg/client/listers/autoscaling/v2alpha1
|
|
pkg/client/listers/batch/internalversion
|
|
pkg/client/listers/batch/v1
|
|
pkg/client/listers/batch/v2alpha1
|
|
pkg/client/listers/certificates/internalversion
|
|
pkg/client/listers/certificates/v1beta1
|
|
pkg/client/listers/core/internalversion
|
|
pkg/client/listers/core/v1
|
|
pkg/client/listers/extensions/internalversion
|
|
pkg/client/listers/extensions/v1beta1
|
|
pkg/client/listers/imagepolicy/internalversion
|
|
pkg/client/listers/imagepolicy/v1alpha1
|
|
pkg/client/listers/policy/internalversion
|
|
pkg/client/listers/policy/v1alpha1
|
|
pkg/client/listers/policy/v1beta1
|
|
pkg/client/listers/rbac/internalversion
|
|
pkg/client/listers/rbac/v1alpha1
|
|
pkg/client/listers/rbac/v1beta1
|
|
pkg/client/listers/settings/internalversion
|
|
pkg/client/listers/settings/v1alpha1
|
|
pkg/client/listers/storage/internalversion
|
|
pkg/client/listers/storage/v1
|
|
pkg/client/listers/storage/v1beta1
|
|
pkg/client/metrics
|
|
pkg/client/metrics/prometheus
|
|
pkg/client/unversioned
|
|
pkg/client/unversioned/remotecommand
|
|
pkg/cloudprovider/providers
|
|
pkg/cloudprovider/providers/azure
|
|
pkg/cloudprovider/providers/cloudstack
|
|
pkg/controller/volume/attachdetach/cache
|
|
pkg/controller/volume/attachdetach/populator
|
|
pkg/controller/volume/attachdetach/reconciler
|
|
pkg/conversion
|
|
pkg/conversion/queryparams
|
|
pkg/credentialprovider/aws
|
|
pkg/fieldpath
|
|
pkg/fields
|
|
pkg/hyperkube
|
|
pkg/kubelet/api
|
|
pkg/kubelet/container
|
|
pkg/kubelet/envvars
|
|
pkg/kubelet/eviction
|
|
pkg/kubelet/eviction/api
|
|
pkg/kubelet/gpu/nvidia
|
|
pkg/kubelet/util/csr
|
|
pkg/kubelet/util/format
|
|
pkg/kubelet/util/ioutils
|
|
pkg/kubelet/volumemanager
|
|
pkg/kubelet/volumemanager/cache
|
|
pkg/kubelet/volumemanager/populator
|
|
pkg/kubelet/volumemanager/reconciler
|
|
pkg/labels
|
|
pkg/printers
|
|
pkg/proxy/config
|
|
pkg/proxy/healthcheck
|
|
pkg/quota
|
|
pkg/quota/install
|
|
pkg/registry
|
|
pkg/registry/authorization/util
|
|
pkg/registry/core/configmap/storage
|
|
pkg/registry/core/endpoint
|
|
pkg/registry/core/node/rest
|
|
pkg/registry/core/pod/storage
|
|
pkg/registry/core/rangeallocation
|
|
pkg/registry/core/service/ipallocator/controller
|
|
pkg/registry/core/service/ipallocator/storage
|
|
pkg/registry/core/serviceaccount
|
|
pkg/registry/extensions/podsecuritypolicy/storage
|
|
pkg/registry/extensions/thirdpartyresource
|
|
pkg/registry/extensions/thirdpartyresource/storage
|
|
pkg/registry/rbac/clusterrole/storage
|
|
pkg/registry/rbac/clusterrolebinding/storage
|
|
pkg/registry/rbac/role/storage
|
|
pkg/registry/rbac/rolebinding/storage
|
|
pkg/runtime
|
|
pkg/runtime/serializer
|
|
pkg/runtime/serializer/json
|
|
pkg/runtime/serializer/protobuf
|
|
pkg/runtime/serializer/recognizer
|
|
pkg/runtime/serializer/streaming
|
|
pkg/runtime/serializer/versioning
|
|
pkg/security
|
|
pkg/security/podsecuritypolicy/apparmor
|
|
pkg/security/podsecuritypolicy/capabilities
|
|
pkg/security/podsecuritypolicy/sysctl
|
|
pkg/serviceaccount
|
|
pkg/types
|
|
pkg/util/async
|
|
pkg/util/errors
|
|
pkg/util/flock
|
|
pkg/util/framer
|
|
pkg/util/goroutinemap
|
|
pkg/util/hash
|
|
pkg/util/i18n
|
|
pkg/util/interrupt
|
|
pkg/util/intstr
|
|
pkg/util/io
|
|
pkg/util/json
|
|
pkg/util/limitwriter
|
|
pkg/util/logs
|
|
pkg/util/maps
|
|
pkg/util/metrics
|
|
pkg/util/net
|
|
pkg/util/netsh
|
|
pkg/util/rand
|
|
pkg/util/runtime
|
|
pkg/util/sets
|
|
pkg/util/tail
|
|
pkg/util/validation
|
|
pkg/util/validation/field
|
|
pkg/util/version
|
|
pkg/util/wait
|
|
pkg/util/yaml
|
|
pkg/version/prometheus
|
|
pkg/volume
|
|
pkg/volume/downwardapi
|
|
pkg/volume/projected
|
|
pkg/volume/quobyte
|
|
pkg/volume/util/nestedpendingoperations
|
|
pkg/volume/util/operationexecutor
|
|
pkg/volume/util/types
|
|
pkg/volume/util/volumehelper
|
|
pkg/volume/validation
|
|
pkg/watch
|
|
pkg/watch/json
|
|
pkg/watch/versioned
|
|
plugin/cmd/kube-scheduler
|
|
plugin/cmd/kube-scheduler/app/options
|
|
plugin/pkg/admission/admit
|
|
plugin/pkg/admission/alwayspullimages
|
|
plugin/pkg/admission/defaulttolerationseconds
|
|
plugin/pkg/admission/deny
|
|
plugin/pkg/admission/exec
|
|
plugin/pkg/admission/gc
|
|
plugin/pkg/admission/imagepolicy
|
|
plugin/pkg/admission/namespace/autoprovision
|
|
plugin/pkg/admission/namespace/exists
|
|
plugin/pkg/admission/podtolerationrestriction/apis/podtolerationrestriction/install
|
|
plugin/pkg/admission/podtolerationrestriction/apis/podtolerationrestriction/validation
|
|
plugin/pkg/admission/resourcequota/apis/resourcequota/install
|
|
plugin/pkg/admission/resourcequota/apis/resourcequota/validation
|
|
plugin/pkg/admission/securitycontext/scdeny
|
|
plugin/pkg/auth
|
|
plugin/pkg/auth/authenticator/token/bootstrap
|
|
plugin/pkg/auth/authorizer
|
|
plugin/pkg/auth/authorizer/rbac/bootstrappolicy
|
|
plugin/pkg/scheduler
|
|
plugin/pkg/scheduler/algorithmprovider
|
|
plugin/pkg/scheduler/algorithmprovider/defaults
|
|
plugin/pkg/scheduler/api/validation
|
|
staging/src/k8s.io/apimachinery/pkg/api/equality
|
|
staging/src/k8s.io/apimachinery/pkg/api/errors
|
|
staging/src/k8s.io/apimachinery/pkg/api/resource
|
|
staging/src/k8s.io/apimachinery/pkg/apimachinery
|
|
staging/src/k8s.io/apimachinery/pkg/conversion/queryparams
|
|
staging/src/k8s.io/apimachinery/pkg/runtime
|
|
staging/src/k8s.io/apimachinery/pkg/runtime/serializer/json
|
|
staging/src/k8s.io/apimachinery/pkg/runtime/serializer/recognizer/testing
|
|
staging/src/k8s.io/apimachinery/pkg/runtime/serializer/versioning
|
|
staging/src/k8s.io/apimachinery/pkg/runtime/serializer/yaml
|
|
staging/src/k8s.io/apimachinery/pkg/util/json
|
|
staging/src/k8s.io/apimachinery/pkg/util/validation/field
|
|
staging/src/k8s.io/apimachinery/pkg/version
|
|
staging/src/k8s.io/apimachinery/pkg/watch
|
|
staging/src/k8s.io/apiserver/pkg/admission/initializer
|
|
staging/src/k8s.io/apiserver/pkg/apis/apiserver/install
|
|
staging/src/k8s.io/apiserver/pkg/apis/example/install
|
|
staging/src/k8s.io/apiserver/pkg/authentication/authenticator
|
|
staging/src/k8s.io/apiserver/pkg/authentication/request/union
|
|
staging/src/k8s.io/apiserver/pkg/authentication/request/x509
|
|
staging/src/k8s.io/apiserver/pkg/authorization/union
|
|
staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters
|
|
staging/src/k8s.io/apiserver/pkg/endpoints/openapi
|
|
staging/src/k8s.io/apiserver/pkg/endpoints/request
|
|
staging/src/k8s.io/apiserver/pkg/registry
|
|
staging/src/k8s.io/apiserver/pkg/server/filters
|
|
staging/src/k8s.io/apiserver/pkg/server/mux
|
|
staging/src/k8s.io/apiserver/pkg/server/routes
|
|
staging/src/k8s.io/apiserver/pkg/storage/etcd3
|
|
staging/src/k8s.io/apiserver/pkg/storage/etcd3
|
|
staging/src/k8s.io/apiserver/pkg/storage/names
|
|
staging/src/k8s.io/apiserver/pkg/storage/storagebackend/factory
|
|
staging/src/k8s.io/apiserver/pkg/storage/storagebackend/factory
|
|
staging/src/k8s.io/apiserver/pkg/util/flushwriter
|
|
staging/src/k8s.io/apiserver/pkg/util/logs
|
|
staging/src/k8s.io/apiserver/plugin/pkg/authenticator
|
|
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/password
|
|
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/password/allow
|
|
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/request/basicauth
|
|
staging/src/k8s.io/client-go/discovery
|
|
staging/src/k8s.io/client-go/examples/in-cluster
|
|
staging/src/k8s.io/client-go/examples/out-of-cluster
|
|
staging/src/k8s.io/client-go/informers
|
|
staging/src/k8s.io/client-go/informers/apps
|
|
staging/src/k8s.io/client-go/informers/apps/v1beta1
|
|
staging/src/k8s.io/client-go/informers/autoscaling
|
|
staging/src/k8s.io/client-go/informers/autoscaling/v1
|
|
staging/src/k8s.io/client-go/informers/autoscaling/v2alpha1
|
|
staging/src/k8s.io/client-go/informers/batch
|
|
staging/src/k8s.io/client-go/informers/batch/v1
|
|
staging/src/k8s.io/client-go/informers/batch/v2alpha1
|
|
staging/src/k8s.io/client-go/informers/certificates
|
|
staging/src/k8s.io/client-go/informers/certificates/v1beta1
|
|
staging/src/k8s.io/client-go/informers/core
|
|
staging/src/k8s.io/client-go/informers/core/v1
|
|
staging/src/k8s.io/client-go/informers/extensions
|
|
staging/src/k8s.io/client-go/informers/extensions/v1beta1
|
|
staging/src/k8s.io/client-go/informers/policy
|
|
staging/src/k8s.io/client-go/informers/policy/v1beta1
|
|
staging/src/k8s.io/client-go/informers/rbac
|
|
staging/src/k8s.io/client-go/informers/rbac/v1alpha1
|
|
staging/src/k8s.io/client-go/informers/rbac/v1beta1
|
|
staging/src/k8s.io/client-go/informers/settings
|
|
staging/src/k8s.io/client-go/informers/settings/v1alpha1
|
|
staging/src/k8s.io/client-go/informers/storage
|
|
staging/src/k8s.io/client-go/informers/storage/v1
|
|
staging/src/k8s.io/client-go/informers/storage/v1beta1
|
|
staging/src/k8s.io/client-go/listers/apps/v1beta1
|
|
staging/src/k8s.io/client-go/listers/autoscaling/v1
|
|
staging/src/k8s.io/client-go/listers/autoscaling/v2alpha1
|
|
staging/src/k8s.io/client-go/listers/batch/v1
|
|
staging/src/k8s.io/client-go/listers/batch/v2alpha1
|
|
staging/src/k8s.io/client-go/listers/certificates/v1beta1
|
|
staging/src/k8s.io/client-go/listers/core/v1
|
|
staging/src/k8s.io/client-go/listers/extensions/v1beta1
|
|
staging/src/k8s.io/client-go/listers/policy/v1beta1
|
|
staging/src/k8s.io/client-go/listers/rbac/v1alpha1
|
|
staging/src/k8s.io/client-go/listers/rbac/v1beta1
|
|
staging/src/k8s.io/client-go/listers/settings/v1alpha1
|
|
staging/src/k8s.io/client-go/listers/storage/v1
|
|
staging/src/k8s.io/client-go/listers/storage/v1beta1
|
|
staging/src/k8s.io/client-go/plugin/pkg/client/auth
|
|
staging/src/k8s.io/client-go/plugin/pkg/client/auth/gcp
|
|
staging/src/k8s.io/client-go/rest/watch
|
|
staging/src/k8s.io/client-go/tools/auth
|
|
staging/src/k8s.io/client-go/tools/metrics
|
|
staging/src/k8s.io/client-go/util/cert
|
|
staging/src/k8s.io/client-go/util/homedir
|
|
staging/src/k8s.io/client-go/util/workqueue
|
|
staging/src/k8s.io/kube-aggregator
|
|
staging/src/k8s.io/kube-aggregator/pkg/apis/apiregistration/install
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/informers/externalversions
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/informers/externalversions/apiregistration
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/informers/externalversions/apiregistration/v1alpha1
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/informers/internalversion
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/informers/internalversion/apiregistration
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/informers/internalversion/apiregistration/internalversion
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/internalversion
|
|
staging/src/k8s.io/kube-aggregator/pkg/client/listers/apiregistration/v1alpha1
|
|
staging/src/k8s.io/sample-apiserver
|
|
staging/src/k8s.io/sample-apiserver/pkg/apis/wardle/install
|
|
test/e2e/perftype
|
|
test/e2e_federation/upgrades
|
|
test/e2e_node/runner/local
|
|
test/images/clusterapi-tester
|
|
test/images/entrypoint-tester
|
|
test/images/fakegitserver
|
|
test/images/goproxy
|
|
test/images/logs-generator
|
|
test/images/mount-tester
|
|
test/images/n-way-http
|
|
test/images/net
|
|
test/images/net/common
|
|
test/images/port-forward-tester
|
|
test/images/porter
|
|
test/images/resource-consumer/consume-cpu
|
|
test/images/serve_hostname
|
|
test/integration/examples
|
|
test/integration/federation
|
|
test/integration/metrics
|
|
test/integration/objectmeta
|
|
test/integration/openshift
|
|
test/soak/cauldron
|
|
test/soak/serve_hostnames
|