admin/kubesphere
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,359 Commits 13 Branches 51 Tags
edcec868dc0d9b7dc2796feafd63b6f3b6959ea5
Commit Graph

104 Commits

Author SHA1 Message Date
Duan Jiong
4fb9d84fea allow dns traffic and host node traffic 
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:21:58 +08:00
Duan Jiong
1ab7d67e51 allow ip/port in service when config service nsnp 
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:21:58 +08:00
Duan Jiong
d3bdcd0465 network: support network isolate 
Add new crd to convert kubesphere network policy to k8s network policy, and then other network
plugin will do the rest work.

Use  cache.go from calico project's kube-controller,  it aim to  sync nsnp with k8s np, delete unused np, and relieve the pressure on k8s restful client.

If you want higher performance, you can implement interface  NsNetworkPolicyProvider in pkg/controller/provider/namespace_np.go.

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:21:50 +08:00
Duan Jiong
26d014302e namespace: add namespace label 
in order to select namespace when convert nsnp to k8snp

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
 2020-04-28 10:06:53 +08:00
zryfish
5a3eb651f3 change cluster schema (#2026) 
* change cluster schema

* change cluster schema
 2020-04-27 17:34:02 +08:00
runzexia
9a6ba04a37 clean old devops code 
todo impl use informer

Signed-off-by: runzexia <runzexia@yunify.com>
 2020-04-15 11:03:08 +08:00
runzexia
2aa343465e update 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-04-02 10:21:34 +08:00
runzexia
1a6f563da1 Merge branch 'dev' into devops-refactor 
# Conflicts:
#	cmd/controller-manager/app/controllers.go
#	hack/generate_client.sh
#	pkg/client/clientset/versioned/clientset.go
#	pkg/client/clientset/versioned/fake/clientset_generated.go
#	pkg/client/clientset/versioned/fake/register.go
#	pkg/client/clientset/versioned/scheme/register.go
#	pkg/client/informers/externalversions/generic.go
 2020-04-01 11:04:09 +08:00
hongming
0d2279f5e4 fix somme error in controller-manager 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-30 15:40:03 +08:00
runzexia
8892c63adb Merge branch 'dev' into devops-refactor 2020-03-30 10:26:13 +08:00
hongming
54fc52c0e3 add user crd 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-28 21:14:43 +08:00
runzexia
443eb3f74c enable controller 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-27 15:20:53 +08:00
runzexia
f411bec10b add ut test 2020-03-27 10:52:39 +08:00
hongming
9b9d4021ec implement identity provider and built-in oauth server 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-26 15:19:20 +08:00
runzexia
af3b87ddca add devops credential controller 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-26 14:53:33 +08:00
runzexia
23c8d71a5a pipeline crd 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-25 10:58:39 +08:00
runzexia
7a00f9e3e4 add multi version crd docs support &add crd docs gen 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 17:11:50 +08:00
runzexia
a48d7f5478 create devops job with admin ns name 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 16:13:49 +08:00
runzexia
e06a1a8335 create admin ns for devops project 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 15:56:37 +08:00
runzexia
0ac15ea744 refmt code 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-23 10:01:22 +08:00
runzexia
ba4ab97cb6 fix comment 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-20 10:28:05 +08:00
hongming
9769357005 update 
Signed-off-by: hongming <talonwan@yunify.com>
 2020-03-20 02:16:11 +08:00
runzexia
7ffee72b1f filter wach && list action 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 14:49:47 +08:00
runzexia
5dffb7305f add code comments 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 14:44:45 +08:00
runzexia
3e998c3498 add devops project test 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 11:52:30 +08:00
runzexia
71898e59dd add s2irun controller test 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 10:35:15 +08:00
runzexia
6a7bf0a86f add s2i controller test 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-19 09:53:16 +08:00
runzexia
93461cfb0b add devops project controller 
Signed-off-by: runzexia <runzexia@yunify.com>
 2020-03-18 14:48:41 +08:00
zryfish
641615b299 This is a huge commit, it does following things: (#1942) 
1. Remove ks-iam standalone binary, move it to ks-apiserver
2. Generate all devops apis inside kubesphere repository, no need to
import s2ioperator.
3. Reorganize ldap code, make it more flexible to use.
 2020-03-10 13:50:17 +08:00
hongming
a9e1183f3c code refactor (#1924) 
* code refactor

Signed-off-by: hongming <talonwan@yunify.com>

* code refactor

Signed-off-by: hongming <talonwan@yunify.com>
 2020-02-26 10:08:13 +08:00
hongming
71849f028f [WIP] API refactor (#1737) 
* refactor openpitrix API

Signed-off-by: hongming <talonwan@yunify.com>

* add openpitrix mock client

Signed-off-by: hongming <talonwan@yunify.com>

* refactor tenant API

Signed-off-by: hongming <talonwan@yunify.com>

* refactor IAM API

Signed-off-by: hongming <talonwan@yunify.com>

* refactor IAM API

Signed-off-by: hongming <talonwan@yunify.com>
 2020-01-13 13:36:21 +08:00
zryfish
eceadec69c devlopment branch (#1736) 2020-01-02 20:52:00 +08:00
zryfish
ea88c8803d use istio client-go library instead of knative (#1661) 
use istio client-go library instead of knative
bump kubernetes dependency version
change code coverage to codecov
 2019-12-13 11:26:18 +08:00
zryfish
1b67c43731 remove dependency on kubernetes repo (#1651) 
remove dependency on kubernetes/kubernetes repo
 2019-12-10 14:46:55 +08:00
hongming
636ace1b86 refine iam policy rules 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-11-04 12:48:00 +08:00
hongming
8b037cef3f refine iam policy rules 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-11-02 13:28:12 +08:00
hongming
34e15c2bdc fix: do not delete devops project when devops is not enabled 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-25 02:25:01 +08:00
hongming
2c9ada7c69 fix: allow workspace-viewer view audits log 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-24 03:00:43 +08:00
hongming
42f6ba4935 refine policy rules 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-18 18:11:33 +08:00
hongming
4b7b49487b refine clusterrolebinding controller 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-12 14:26:29 +08:00
hongming
78c40dc20b fix: return early when err is nil 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-11 15:44:11 +08:00
hongming
3c802ebb3d support s2ibuilder 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-10 17:33:57 +08:00
KubeSphere CI Bot
aba512659f Merge pull request #878 from wansir/update-iam-policy 
update iam policy
 2019-10-10 11:58:50 +08:00
hongming
42e1b823e2 update iam policy 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-10 11:05:44 +08:00
hongming
9cff0cc942 remove useless logs 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-10-08 17:20:19 +08:00
KubeSphere CI Bot
65c803fd3a Merge pull request #835 from runzexia/cleanup-s2ibinary 
clean up s2ibinary
 2019-10-08 16:18:08 +08:00
runzexia
1406961e8c fix typo 
Signed-off-by: runzexia <runzexia@yunify.com>
 2019-10-08 15:18:04 +08:00
runzexia
8f9c2126f7 fix vet 
Signed-off-by: runzexia <runzexia@yunify.com>
 2019-09-29 15:20:02 +08:00
runzexia
d453a3b245 clean up s2ibinary 
Signed-off-by: runzexia <runzexia@yunify.com>
 2019-09-29 15:04:11 +08:00
hongming
bfb8924eb3 refactor: openpitrix module 
Signed-off-by: hongming <talonwan@yunify.com>
 2019-09-29 10:38:24 +08:00