admin/kubesphere
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,413 Commits 13 Branches 51 Tags
8f93266ec019960c47db903fd2c7fa2ae46be1b9
Commit Graph

116 Commits

Author SHA1 Message Date
hongming
8f93266ec0 improve IAM module 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-05-23 20:48:19 +08:00
KubeSphere CI Bot
28a9e072f4 Merge pull request #2080 from duanjiong/networkpolicy-fix 
fix namespace networkpolicy
 2020-05-19 19:22:33 +08:00
jian.zhang
df49775acb add unit test for job 
Signed-off-by: jian.zhang <jian.zhang@jhlinux.com>
 2020-05-18 20:21:57 +08:00
Duan Jiong
4e45d659c0 fix namespace networkpolicy 
1. allow egress when isolate is enabled
2. add nsnp prefix "nsnp-"
3. remove some useless log

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-05-18 09:10:33 +08:00
shaowenchen
78080afbf5 fix test 2020-05-14 19:09:53 +08:00
shaowenchen
8f40bb2d3e fix delete devops failed 2020-05-14 10:01:46 +08:00
shaowenchen
9b656196e3 fix delete devops 2020-05-13 23:13:13 +08:00
shaowenchen
f52cb829c2 fix create devops 2020-05-13 23:01:26 +08:00
shaowenchen
4f9c77383e fix create devopsproject 2020-05-13 21:34:16 +08:00
shaowenchen
4fc56de7c0 fix create devopsproject 2020-05-13 21:32:31 +08:00
zryfish
87e567eaf5 fix cluster controller bug (#2049) 2020-05-06 16:23:38 +08:00
zryfish
98f44fac99 fix generation bug (#2043) 2020-05-01 13:12:54 +08:00
Duan Jiong
4fb9d84fea allow dns traffic and host node traffic 
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:21:58 +08:00
Duan Jiong
1ab7d67e51 allow ip/port in service when config service nsnp 
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:21:58 +08:00
Duan Jiong
d3bdcd0465 network: support network isolate 
Add new crd to convert kubesphere network policy to k8s network policy, and then other network
plugin will do the rest work.

Use  cache.go from calico project's kube-controller,  it aim to  sync nsnp with k8s np, delete unused np, and relieve the pressure on k8s restful client.

If you want higher performance, you can implement interface  NsNetworkPolicyProvider in pkg/controller/provider/namespace_np.go.

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:21:50 +08:00
Duan Jiong
26d014302e namespace: add namespace label 
in order to select namespace when convert nsnp to k8snp

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:06:53 +08:00
zryfish
5a3eb651f3 change cluster schema (#2026) 
* change cluster schema

* change cluster schema
 2020-04-27 17:34:02 +08:00
runzexia
9a6ba04a37 clean old devops code 
todo impl use informer

Signed-off-by: runzexia <runzexia@yunify.com>
 2020-04-15 11:03:08 +08:00
runzexia
2aa343465e update 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-04-02 10:21:34 +08:00
runzexia
1a6f563da1 Merge branch 'dev' into devops-refactor 
# Conflicts:
#	cmd/controller-manager/app/controllers.go
#	hack/generate_client.sh
#	pkg/client/clientset/versioned/clientset.go
#	pkg/client/clientset/versioned/fake/clientset_generated.go
#	pkg/client/clientset/versioned/fake/register.go
#	pkg/client/clientset/versioned/scheme/register.go
#	pkg/client/informers/externalversions/generic.go
 2020-04-01 11:04:09 +08:00
hongming
0d2279f5e4 fix somme error in controller-manager 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-30 15:40:03 +08:00
runzexia
8892c63adb Merge branch 'dev' into devops-refactor 2020-03-30 10:26:13 +08:00
hongming
54fc52c0e3 add user crd 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-28 21:14:43 +08:00
runzexia
443eb3f74c enable controller 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-27 15:20:53 +08:00
runzexia
f411bec10b add ut test 2020-03-27 10:52:39 +08:00
hongming
9b9d4021ec implement identity provider and built-in oauth server 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-26 15:19:20 +08:00
runzexia
af3b87ddca add devops credential controller 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-26 14:53:33 +08:00
runzexia
23c8d71a5a pipeline crd 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-25 10:58:39 +08:00
runzexia
7a00f9e3e4 add multi version crd docs support &add crd docs gen 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 17:11:50 +08:00
runzexia
a48d7f5478 create devops job with admin ns name 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 16:13:49 +08:00
runzexia
e06a1a8335 create admin ns for devops project 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 15:56:37 +08:00
runzexia
0ac15ea744 refmt code 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 10:01:22 +08:00
runzexia
ba4ab97cb6 fix comment 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-20 10:28:05 +08:00
hongming
9769357005 update 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-20 02:16:11 +08:00
runzexia
7ffee72b1f filter wach && list action 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 14:49:47 +08:00
runzexia
5dffb7305f add code comments 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 14:44:45 +08:00
runzexia
3e998c3498 add devops project test 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 11:52:30 +08:00
runzexia
71898e59dd add s2irun controller test 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 10:35:15 +08:00
runzexia
6a7bf0a86f add s2i controller test 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 09:53:16 +08:00
runzexia
93461cfb0b add devops project controller 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-18 14:48:41 +08:00
zryfish
641615b299 This is a huge commit, it does following things: (#1942) 
1. Remove ks-iam standalone binary, move it to ks-apiserver
2. Generate all devops apis inside kubesphere repository, no need to
import s2ioperator.
3. Reorganize ldap code, make it more flexible to use.
 2020-03-10 13:50:17 +08:00
hongming
a9e1183f3c code refactor (#1924) 
* code refactor

Signed-off-by: hongming <talonwan@yunify.com>

* code refactor

Signed-off-by: hongming <talonwan@yunify.com>
 2020-02-26 10:08:13 +08:00
hongming
71849f028f [WIP] API refactor (#1737) 
* refactor openpitrix API

Signed-off-by: hongming <talonwan@yunify.com>

* add openpitrix mock client

Signed-off-by: hongming <talonwan@yunify.com>

* refactor tenant API

Signed-off-by: hongming <talonwan@yunify.com>

* refactor IAM API

Signed-off-by: hongming <talonwan@yunify.com>

* refactor IAM API

Signed-off-by: hongming <talonwan@yunify.com>
 2020-01-13 13:36:21 +08:00
zryfish
eceadec69c devlopment branch (#1736) 2020-01-02 20:52:00 +08:00
zryfish
ea88c8803d use istio client-go library instead of knative (#1661) 
use istio client-go library instead of knative
bump kubernetes dependency version
change code coverage to codecov
 2019-12-13 11:26:18 +08:00
zryfish
1b67c43731 remove dependency on kubernetes repo (#1651) 
remove dependency on kubernetes/kubernetes repo
 2019-12-10 14:46:55 +08:00
hongming
636ace1b86 refine iam policy rules 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-11-04 12:48:00 +08:00
hongming
8b037cef3f refine iam policy rules 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-11-02 13:28:12 +08:00
hongming
34e15c2bdc fix: do not delete devops project when devops is not enabled 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-25 02:25:01 +08:00
hongming
2c9ada7c69 fix: allow workspace-viewer view audits log 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-24 03:00:43 +08:00