Commit Graph

82 Commits

Author SHA1 Message Date
Wenhao Zhou
c5e2800ab2 feat: support listing cluster that user has the cluster`s rolebinding (#6259) 2024-10-31 17:31:07 +08:00
hongming
d63a24fc91 refactor: workspace cascading deletion logic (#6249)
Signed-off-by: hongming <coder.scala@gmail.com>
2024-10-30 17:42:06 +08:00
KubeSphere CI Bot
447a51f08b feat: kubesphere 4.0 (#6115)
* feat: kubesphere 4.0

Signed-off-by: ci-bot <ci-bot@kubesphere.io>

* feat: kubesphere 4.0

Signed-off-by: ci-bot <ci-bot@kubesphere.io>

---------

Signed-off-by: ci-bot <ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@example.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>
2024-09-06 11:05:52 +08:00
Xinzhao Xu
708de806f8 Use the generic Set to replace deprecated methods (#5623) 2023-04-07 11:15:35 +08:00
hongzhouzi
44167aa47a Upgrade k8s package verison (#5358)
* upgrade k8s package version

Signed-off-by: hongzhouzi <hongzhouzi@kubesphere.io>

* Script upgrade and code formatting.

Signed-off-by: hongzhouzi <hongzhouzi@kubesphere.io>

Signed-off-by: hongzhouzi <hongzhouzi@kubesphere.io>
2022-11-15 14:56:38 +08:00
Wenhao Zhou
7e8edef01a Fix: globalrole has cluster management right can not manage cluster (#5331)
Fix: globalrole has permision of cluster management can not manage cluster
2022-10-27 14:09:50 +08:00
Wenhao Zhou
77547147de Check cluster permission for create/update workspacetemplate (#5302)
* add cluster authorization for create/update workspacetemplate

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>

add cluster authorization for create/update workspacetemplate

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>

* add handle forbidden err

* add forbidden error log

* allow to use clusters of public visibility

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>
2022-10-20 18:47:41 +08:00
Wenhao Zhou
5ea9d3deac Fix: when placement is empty return error (#5213)
Co-authored-by: Wenhao Zhou <wenhaozhou@yunfiy.com>
2022-09-14 17:33:46 +08:00
Wenhao Zhou
95576bb827 Add authorization control for patching workspacetemplates (#5191)
* update patch workspacetemplate for supporting patch with JsonPatchType and change the authorization processing

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>

* make goimports

* Fix: Of the type is not string will lead to panic

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>

* Add jsonpatchutil for handling json patch data

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>

* Updated patch workspacetemplate to to make the code run more efficiently

* fix: multiple clusterrolebindings cannot autorizate

* Correct wrong spelling

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>
2022-09-08 10:23:41 +08:00
hongming
382be8b16b fix: cluster list granted to users is incorrect 2022-05-23 17:06:19 +08:00
LiHui
35027a346b add openpitrix Client to apiserver 2022-05-20 17:37:52 +08:00
LiHui
32b85cd625 cluster clusters 2022-05-20 11:53:51 +08:00
Xinzhao Xu
26576cc665 Add get workspace API 2022-05-16 16:14:33 +08:00
Xinzhao Xu
6a3e1ac099 Refactor workspace API and introduced tenant v1alpha3 version 2022-03-09 14:12:08 +08:00
x893675
2a521bb157 add feature for live-reload when configuration changed
Signed-off-by: x893675 <x893675@icloud.com>
2022-02-08 16:28:01 +08:00
x893675
f29a5488a8 Fix kubesphere_app_template_count always be 0 when GetKubeSphereStats
Signed-off-by: x893675 <x893675@icloud.com>
2021-08-06 09:50:26 +00:00
Roland.Ma
c37a11c5f9 move api to staging
Signed-off-by: Roland.Ma <rolandma@yunify.com>
2021-04-29 08:20:05 +00:00
Rao Yunkun
5904e2e9be Remove metering ConfigMap dependency.
Signed-off-by: Rao Yunkun <yunkunrao@yunify.com>
2021-04-19 17:36:01 +08:00
Roland.Ma
133a67ce92 feat: optional cascade delete resources when deleting workspace
Signed-off-by: Roland.Ma <rolandma@yunify.com>
2021-04-06 02:38:04 +00:00
Rao Yunkun
845f6bbe89 Intergate OpenPitrix metrics into metering.
Signed-off-by: Rao Yunkun <yunkunrao@yunify.com>
2021-03-30 18:13:18 +08:00
Rao Yunkun
d08e402384 Integate metering module and support metering data csv format export.
Signed-off-by: Rao Yunkun <yunkunrao@yunify.com>
2021-03-30 15:46:16 +08:00
zryfish
ac275b6e98 add goimports format action (#3630)
Signed-off-by: Jeff <jeffzhang@yunify.com>
2021-03-30 13:44:24 +08:00
LiHui
83e6221f3a openpitrix crd
Signed-off-by: LiHui <andrewli@yunify.com>

delete helm repo, release and app

Signed-off-by: LiHui <andrewli@yunify.com>

Fix Dockerfile

Signed-off-by: LiHui <andrewli@yunify.com>

add unit test for category controller

Signed-off-by: LiHui <andrewli@yunify.com>

resource api

Signed-off-by: LiHui <andrewli@yunify.com>

miscellaneous

Signed-off-by: LiHui <andrewli@yunify.com>

resource api

Signed-off-by: LiHui <andrewli@yunify.com>

add s3 repo indx

Signed-off-by: LiHui <andrewli@yunify.com>

attachment api

Signed-off-by: LiHui <andrewli@yunify.com>

repo controller test

Signed-off-by: LiHui <andrewli@yunify.com>

application controller test

Signed-off-by: LiHui <andrewli@yunify.com>

release metric

Signed-off-by: LiHui <andrewli@yunify.com>

helm release controller test

Signed-off-by: LiHui <andrewli@yunify.com>

move constants to /pkg/apis/application

Signed-off-by: LiHui <andrewli@yunify.com>

remove unused code

Signed-off-by: LiHui <andrewli@yunify.com>

add license header

Signed-off-by: LiHui <andrewli@yunify.com>

Fix bugs

Signed-off-by: LiHui <andrewli@yunify.com>

cluster cluent

Signed-off-by: LiHui <andrewli@yunify.com>

format code

Signed-off-by: LiHui <andrewli@yunify.com>

move workspace,cluster from spec to labels

Signed-off-by: LiHui <andrewli@yunify.com>

add license header

Signed-off-by: LiHui <andrewli@yunify.com>

openpitrix test

Signed-off-by: LiHui <andrewli@yunify.com>

add worksapce labels for app in appstore

Signed-off-by: LiHui <andrewli@yunify.com>
2021-03-09 18:30:02 +08:00
Rao Yunkun
d9b681dd8d Merge branch 'master' into metering
Signed-off-by: Rao Yunkun <yunkunrao@yunify.com>
2021-03-05 14:43:30 +08:00
hongming
70fa24010c support workspace resource quota
Signed-off-by: hongming <talonwan@yunify.com>
2021-03-02 10:42:09 +08:00
yunkunrao
e9073f0486 Add metering api.
Signed-off-by: yunkunrao <yunkunrao@yunify.com>
2021-02-22 14:31:10 +08:00
KubeSphere CI Bot
bed6465993 Merge pull request #3212 from wanjunlei/es
add a es client for auditing, events, and logging
2021-01-19 17:09:19 +08:00
Zack Zhang
f20c1f33f1 refactor application controller
Signed-off-by: zackzhang <zackzhang@yunify.com>
2021-01-04 16:34:04 +08:00
hongming
fe6c5de00f update dependencies
Signed-off-by: hongming <talonwan@yunify.com>
2021-01-04 15:35:32 +08:00
wanjunlei
039507c9ae add a es client for auditing, events, and logging
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-12-29 14:17:21 +08:00
hongming
cd99f78768 Fix container terminal security risk
Signed-off-by: hongming <talonwan@yunify.com>
2020-11-13 16:37:33 +08:00
Roland.Ma
80f3db3d42 feat: authentication users with group's RoleBindings in API Server
Signed-off-by: Roland.Ma <rolandma@yunify.com>
2020-11-11 05:31:25 +00:00
hongming
e8c1acdcf3 fix workspacetemplate patch API not working
Signed-off-by: hongming <talonwan@yunify.com>
2020-08-06 16:17:49 +08:00
hongming
1d9c9bc0c2 fix labelSelector not working
Signed-off-by: hongming <talonwan@yunify.com>
2020-08-04 11:35:53 +08:00
zryfish
4702beb6ac add federated resource api (#2725)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-31 17:12:58 +08:00
KubeSphere CI Bot
67c6a8c510 Merge pull request #2672 from wanjunlei/auditing-log
make ws admin can be aware of anything happened in its workspace.
2020-07-30 13:33:51 +08:00
wanjunlei
b5392b97c0 add ns and ws query parameter to es query body
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-29 18:48:34 +08:00
wanjunlei
b51a5c22f2 resolve conversation
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-29 18:48:34 +08:00
wanjunlei
713c646bfd make ws admin aware of anything happened in its workspace.
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-29 18:48:34 +08:00
huanggze
70d0d5fe18 Allow global admins to view deleted namespace logs
Signed-off-by: huanggze <loganhuang@yunify.com>
2020-07-29 10:26:38 +08:00
hongming
bda48c240f fix: devop IAM bugs
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-28 10:01:50 +08:00
wanjunlei
bf87894512 resolve conversation
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-25 18:15:21 +08:00
wanjunlei
6585881d01 fix bug multi tenant auditing, logging and event is incorrect
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-25 12:19:29 +08:00
hongming
c103f47abd fix federatednamespace resource scope
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-22 22:42:53 +08:00
hongming
3525fc5507 add federatednamespaces tenant API
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-20 17:39:46 +08:00
zryfish
3c99b3ca9e fix issue #2289 Can't create fed project (#2291) 2020-07-03 18:06:02 +08:00
hongming
8515e01f55 fix: federated workspace cluster selector
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-02 21:38:04 +08:00
KubeSphere CI Bot
2a05365871 Merge pull request #2257 from wanjunlei/auditing-authority
add resourcescope to AttributesRecord when determine whether the user…
2020-06-27 20:45:42 +08:00
KubeSphere CI Bot
eb1001d2b8 Merge pull request #2256 from huanggze/role
logging: update rolebinding check
2020-06-27 20:43:43 +08:00
wanjunlei
0e6277ed66 add resourcescope to AttributesRecord when determine whether the user can list namespace 2020-06-27 19:21:00 +08:00