Rao Yunkun
d9b681dd8d
Merge branch 'master' into metering
...
Signed-off-by: Rao Yunkun <yunkunrao@yunify.com >
2021-03-05 14:43:30 +08:00
hongming
70fa24010c
support workspace resource quota
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-03-02 10:42:09 +08:00
yunkunrao
e9073f0486
Add metering api.
...
Signed-off-by: yunkunrao <yunkunrao@yunify.com >
2021-02-22 14:31:10 +08:00
KubeSphere CI Bot
bed6465993
Merge pull request #3212 from wanjunlei/es
...
add a es client for auditing, events, and logging
2021-01-19 17:09:19 +08:00
Zack Zhang
f20c1f33f1
refactor application controller
...
Signed-off-by: zackzhang <zackzhang@yunify.com >
2021-01-04 16:34:04 +08:00
hongming
fe6c5de00f
update dependencies
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-01-04 15:35:32 +08:00
wanjunlei
039507c9ae
add a es client for auditing, events, and logging
...
Signed-off-by: wanjunlei <wanjunlei@yunify.com >
2020-12-29 14:17:21 +08:00
hongming
cd99f78768
Fix container terminal security risk
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-11-13 16:37:33 +08:00
Roland.Ma
80f3db3d42
feat: authentication users with group's RoleBindings in API Server
...
Signed-off-by: Roland.Ma <rolandma@yunify.com >
2020-11-11 05:31:25 +00:00
hongming
e8c1acdcf3
fix workspacetemplate patch API not working
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-08-06 16:17:49 +08:00
hongming
1d9c9bc0c2
fix labelSelector not working
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-08-04 11:35:53 +08:00
zryfish
4702beb6ac
add federated resource api ( #2725 )
...
Signed-off-by: Jeff <zw0948@gmail.com >
2020-07-31 17:12:58 +08:00
KubeSphere CI Bot
67c6a8c510
Merge pull request #2672 from wanjunlei/auditing-log
...
make ws admin can be aware of anything happened in its workspace.
2020-07-30 13:33:51 +08:00
wanjunlei
b5392b97c0
add ns and ws query parameter to es query body
...
Signed-off-by: wanjunlei <wanjunlei@yunify.com >
2020-07-29 18:48:34 +08:00
wanjunlei
b51a5c22f2
resolve conversation
...
Signed-off-by: wanjunlei <wanjunlei@yunify.com >
2020-07-29 18:48:34 +08:00
wanjunlei
713c646bfd
make ws admin aware of anything happened in its workspace.
...
Signed-off-by: wanjunlei <wanjunlei@yunify.com >
2020-07-29 18:48:34 +08:00
huanggze
70d0d5fe18
Allow global admins to view deleted namespace logs
...
Signed-off-by: huanggze <loganhuang@yunify.com >
2020-07-29 10:26:38 +08:00
hongming
bda48c240f
fix: devop IAM bugs
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-07-28 10:01:50 +08:00
wanjunlei
bf87894512
resolve conversation
...
Signed-off-by: wanjunlei <wanjunlei@yunify.com >
2020-07-25 18:15:21 +08:00
wanjunlei
6585881d01
fix bug multi tenant auditing, logging and event is incorrect
...
Signed-off-by: wanjunlei <wanjunlei@yunify.com >
2020-07-25 12:19:29 +08:00
hongming
c103f47abd
fix federatednamespace resource scope
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-07-22 22:42:53 +08:00
hongming
3525fc5507
add federatednamespaces tenant API
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-07-20 17:39:46 +08:00
zryfish
3c99b3ca9e
fix issue #2289 Can't create fed project ( #2291 )
2020-07-03 18:06:02 +08:00
hongming
8515e01f55
fix: federated workspace cluster selector
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-07-02 21:38:04 +08:00
KubeSphere CI Bot
2a05365871
Merge pull request #2257 from wanjunlei/auditing-authority
...
add resourcescope to AttributesRecord when determine whether the user…
2020-06-27 20:45:42 +08:00
KubeSphere CI Bot
eb1001d2b8
Merge pull request #2256 from huanggze/role
...
logging: update rolebinding check
2020-06-27 20:43:43 +08:00
wanjunlei
0e6277ed66
add resourcescope to AttributesRecord when determine whether the user can list namespace
2020-06-27 19:21:00 +08:00
huanggze
b92e768beb
logging: update rolebinding check
...
Signed-off-by: huanggze <loganhuang@yunify.com >
2020-06-27 10:37:59 +08:00
junotx
f0ae82793e
fix: listIntersectedNamespaces for observability
2020-06-24 19:16:22 +08:00
hongming
8aa934bfb7
fix: workspace cluster authorize
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-06-17 13:10:11 +08:00
hongming
4fcaa78b45
improve multicluster resource controller
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-06-15 21:40:24 +08:00
hongming
b1d996f4a7
add test case
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-06-12 12:29:46 +08:00
hongming
bafeecfee6
add tenant resource API
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-06-11 01:47:25 +08:00
hongming
ce3cd21a76
update user's role templates API
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-06-03 23:49:49 +08:00
root
951c31189a
add auditing events search api
2020-05-28 09:55:14 +08:00
junotx
5818733481
fix events search
2020-05-27 14:24:34 +08:00
KubeSphere CI Bot
b8f6a97340
Merge pull request #2100 from huanggze/logging
...
logging: integrate new IAM
2020-05-25 21:43:34 +08:00
huanggze
9b6f38d857
logging: integrate new IAM
...
Signed-off-by: huanggze <loganhuang@yunify.com >
2020-05-25 16:58:20 +08:00
hongming
85b61dce7c
copyright license update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-05-25 14:51:24 +08:00
hongming
8f93266ec0
improve IAM module
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-05-23 20:48:19 +08:00
junotx
8f5ca7673d
add events search apis
2020-05-15 10:28:12 +08:00
hongming
992be764a1
fix list namespaces
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-05-07 09:14:54 +08:00
hongming
8976ee242f
remove useless go moudle
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-04-29 10:28:25 +08:00
hongming
7db2ba662c
migrate legacy API
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-04-28 00:45:12 +08:00
hongming
5f951508c5
migrate legacy API
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-04-15 16:59:13 +08:00
hongming
a3d3c8e427
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-04-10 15:41:23 +08:00
hongming
1f26e62105
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-21 18:52:28 +08:00
hongming
9769357005
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-20 02:16:11 +08:00
zryfish
641615b299
This is a huge commit, it does following things: ( #1942 )
...
1. Remove ks-iam standalone binary, move it to ks-apiserver
2. Generate all devops apis inside kubesphere repository, no need to
import s2ioperator.
3. Reorganize ldap code, make it more flexible to use.
2020-03-10 13:50:17 +08:00
hongming
570ef8b60a
code refactor ( #1923 )
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-02-25 20:47:59 +08:00