Commit Graph

7 Commits

Author SHA1 Message Date
Duan Jiong
655fd26cbf fix nsnp webhook to validate all fileds in it
such as ipblock, service.
And the crd openAPIV3Schema could not validate all scenarios

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-06-28 09:44:05 +08:00
hongming
8f93266ec0 improve IAM module
Signed-off-by: hongming <talonwan@yunify.com>
2020-05-23 20:48:19 +08:00
Duan Jiong
d3bdcd0465 network: support network isolate
Add new crd to convert kubesphere network policy to k8s network policy, and then other network
plugin will do the rest work.

Use  cache.go from calico project's kube-controller,  it aim to  sync nsnp with k8s np, delete unused np, and relieve the pressure on k8s restful client.

If you want higher performance, you can implement interface  NsNetworkPolicyProvider in pkg/controller/provider/namespace_np.go.

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-04-28 10:21:50 +08:00
hongming
5f951508c5 migrate legacy API
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-15 16:59:13 +08:00
hongming
bb9e12be3d fix iam admission webhook (#2008)
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-14 00:15:18 +08:00
hongming
0e814bb5e4 add iam crd
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-10 04:05:23 +08:00
magicsong
90fa38851f add ns networkpolicy 2019-08-08 18:39:00 +08:00