admin/kubesphere
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,928 Commits 13 Branches 51 Tags
4d9268be3dd83df20cd6bd07dffb93a1864de152
Commit Graph

262 Commits

Author SHA1 Message Date
rick
8f4a6d9b93 Restrict only specific users or admin can approve a pipeline 
Signed-off-by: rick <rick@jenkins-zh.cn>
 2020-11-30 09:28:08 +08:00
hongming
00920d3d51 improve LDAP identity provider 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-11-23 17:29:46 +08:00
KubeSphere CI Bot
01cc686cd3 Merge pull request #3080 from zheng1/weave 
Add param WeaveScopeHost
 2020-11-17 17:25:33 +08:00
Zhengyi Lai
c8f814acf2 Add param WeaveScopeHost 
Signed-off-by: Zhengyi Lai <zheng1@yunify.com>
 2020-11-17 16:57:11 +08:00
KubeSphere CI Bot
e9f709057a Merge pull request #3042 from wansir/fix-3041 
Fix container terminal security risk
 2020-11-16 13:35:33 +08:00
yuswift
69a27e40aa Feat: support runnig ks-controller-manager without ldap option 
Signed-off-by: yuswift <yuswiftli@yunify.com>
 2020-11-16 12:19:07 +08:00
hongming
cd99f78768 Fix container terminal security risk 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-11-13 16:37:33 +08:00
KubeSphere CI Bot
b14081ce9f Merge pull request #3073 from RolandMa1986/feat-group-api 
feat: group auth, add group & groupbinding api
 2020-11-11 17:10:30 +08:00
Roland.Ma
80f3db3d42 feat: authentication users with group's RoleBindings in API Server 
Signed-off-by: Roland.Ma <rolandma@yunify.com>
 2020-11-11 05:31:25 +00:00
Roland.Ma
af271a49ce feat: group auth, add group & groupbinding api 
Signed-off-by: Roland.Ma <rolandma@yunify.com>
 2020-11-10 07:19:59 +00:00
luxingmin
1a39d62f63 support aliyun idaas oauth login 
Signed-off-by: luxingmin <luxingmin@hongyaa.com.cn>
 2020-09-29 11:14:23 +08:00
zryfish
f5b3491d7f fix unauthorized if using token kubeconfig (#2930) 
Signed-off-by: Jeff <jeffzhang@yunify.com>
 2020-08-27 22:51:00 +08:00
zryfish
dbc33fe5d2 add license header (#2761) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-08-05 15:54:17 +08:00
zryfish
0a893d20bc fix missing cache federatedapplication (#2733) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-08-01 13:22:39 +08:00
zryfish
4702beb6ac add federated resource api (#2725) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-07-31 17:12:58 +08:00
KubeSphere CI Bot
67c6a8c510 Merge pull request #2672 from wanjunlei/auditing-log 
make ws admin can be aware of anything happened in its workspace.
 2020-07-30 13:33:51 +08:00
KubeSphere CI Bot
b71ce47788 Merge pull request #2706 from wansir/iam 
fix request info resource scope
 2020-07-30 10:09:51 +08:00
hongming
02c71e9b79 fix request info resource scope 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-30 00:23:29 +08:00
zryfish
3c8fbe39b9 fix websocket lost query string bug (#2705) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-07-29 21:51:55 +08:00
wanjunlei
6f90e24b83 change resourceGetter to devopsGetter 
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
 2020-07-29 19:31:20 +08:00
wanjunlei
713c646bfd make ws admin aware of anything happened in its workspace. 
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
 2020-07-29 18:48:34 +08:00
zryfish
93b123c1f0 add last login time for user (#2679) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-07-28 17:26:13 +08:00
KubeSphere CI Bot
822f5f25d7 Merge pull request #2599 from duanjiong/networkpolicy-fix 
add new parameters allowedIngressNamespaces for user customization
 2020-07-28 14:05:51 +08:00
Duan Jiong
eb21606602 networkpolicy: add new parameters allowedIngressNamespaces for user customization 
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-07-28 10:55:16 +08:00
hongming
bda48c240f fix: devop IAM bugs 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-28 10:01:50 +08:00
hongming
f8c0e9addc Reorder request filters 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-26 10:35:22 +08:00
zryfish
051893eb71 Use 429 for auth limit exceeded requests (#2591) 
* fix login with email

Signed-off-by: Jeff <zw0948@gmail.com>

* use 429 for auth limit exceeded error

Signed-off-by: Jeff <zw0948@gmail.com>
 2020-07-25 14:27:03 +08:00
KubeSphere CI Bot
b814c5ba4f Merge pull request #2609 from wansir/master 
fix RBAC authorizer
 2020-07-25 10:09:50 +08:00
hongming
982ea74185 fix RBAC authorizer 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-25 09:51:39 +08:00
zryfish
f1146f5d6c fix cannot create success login (#2576) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-07-24 13:09:38 +08:00
zryfish
06932926a0 fix creating login records for user failed (#2572) 
Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
 2020-07-23 23:36:11 +08:00
zryfish
3d74bb0589 login record CRD (#2565) 
* Signed-off-by: hongming <talonwan@yunify.com>

support ldap identity provider

Signed-off-by: hongming <talonwan@yunify.com>

* add login record

Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
 2020-07-23 22:10:39 +08:00
hongming
d1f98b3289 Configuring kubectl image from command line 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-23 02:29:56 +08:00
KubeSphere CI Bot
1096eb8adb Merge pull request #2498 from wansir/federatednamespaces 
add tenant federated namespaces API
 2020-07-22 15:23:49 +08:00
hongming
3525fc5507 add federatednamespaces tenant API 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-20 17:39:46 +08:00
KubeSphere CI Bot
bd6f46a5c9 Merge pull request #2427 from wanjunlei/auditing-log 
ignore dryRun k8s request when auditing
 2020-07-20 14:55:49 +08:00
zryfish
8241a0f9c5 cache v1beta1 crd instead of v1 version, cause v1 is not available in kubernetes v1.15.x (#2482) 
Signed-off-by: Jeff <zw0948@gmail.com>
 2020-07-20 10:03:26 +08:00
wanjunlei
5d99024f0b resovle conversation 
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
 2020-07-17 15:39:52 +08:00
wanjunlei
a0255d6409 ignore dryRun k8s request when auditing 
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
 2020-07-17 15:39:36 +08:00
KubeSphere CI Bot
fcea347780 Merge pull request #2368 from shaowenchen/add_dowload 
using /v1alpha2/jenkins replace /jenkins.kubesphere.io api
 2020-07-16 17:11:48 +08:00
shaowenchen
6090874cc4 using /jenkins replace jenkins.kubesphere.io api 
Signed-off-by: shaowenchen <mail@chenshaowen.com>
 2020-07-15 17:06:54 +08:00
zryfish
eeaa4b646a use more friendly error messages (#2364) 2020-07-09 18:33:24 +08:00
zryfish
693a4143db reconcile host cluster (#2354) 
print friendly error when component failed

update dockerfile
 2020-07-08 23:55:13 +08:00
hongming
99aff3c7da fix: resource scope (#2280) 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-07 15:24:10 +08:00
KubeSphere CI Bot
d50e59bc9e Merge pull request #2324 from wanjunlei/auditing 
make the ResponseCapture implements CloseNotify interface
 2020-07-07 14:38:46 +08:00
KubeSphere CI Bot
cdd78e8bcd Merge pull request #2264 from wansir/iam 
fix: password modify
 2020-07-07 14:17:45 +08:00
wanjunlei
cb5f98cf97 make the ResponseCapture implements CloseNotify interface 2020-07-06 22:06:32 +08:00
hongming
77a3722b4e fix: password modify 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-06 15:12:11 +08:00
hongming
b52db8732b fix: implicit workspace info in query 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-03 21:14:52 +08:00
hongming
48f80d8c1a fix: Synchronize users to LDAP 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-07-02 15:43:21 +08:00