Commit Graph

248 Commits

Author SHA1 Message Date
zryfish
4702beb6ac add federated resource api (#2725)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-31 17:12:58 +08:00
KubeSphere CI Bot
67c6a8c510 Merge pull request #2672 from wanjunlei/auditing-log
make ws admin can be aware of anything happened in its workspace.
2020-07-30 13:33:51 +08:00
KubeSphere CI Bot
b71ce47788 Merge pull request #2706 from wansir/iam
fix request info resource scope
2020-07-30 10:09:51 +08:00
hongming
02c71e9b79 fix request info resource scope
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-30 00:23:29 +08:00
zryfish
3c8fbe39b9 fix websocket lost query string bug (#2705)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-29 21:51:55 +08:00
wanjunlei
6f90e24b83 change resourceGetter to devopsGetter
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-29 19:31:20 +08:00
wanjunlei
713c646bfd make ws admin aware of anything happened in its workspace.
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-29 18:48:34 +08:00
zryfish
93b123c1f0 add last login time for user (#2679)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-28 17:26:13 +08:00
KubeSphere CI Bot
822f5f25d7 Merge pull request #2599 from duanjiong/networkpolicy-fix
add new parameters allowedIngressNamespaces for user customization
2020-07-28 14:05:51 +08:00
Duan Jiong
eb21606602 networkpolicy: add new parameters allowedIngressNamespaces for user customization
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-07-28 10:55:16 +08:00
hongming
bda48c240f fix: devop IAM bugs
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-28 10:01:50 +08:00
hongming
f8c0e9addc Reorder request filters
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-26 10:35:22 +08:00
zryfish
051893eb71 Use 429 for auth limit exceeded requests (#2591)
* fix login with email

Signed-off-by: Jeff <zw0948@gmail.com>

* use 429 for auth limit exceeded error

Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-25 14:27:03 +08:00
KubeSphere CI Bot
b814c5ba4f Merge pull request #2609 from wansir/master
fix RBAC authorizer
2020-07-25 10:09:50 +08:00
hongming
982ea74185 fix RBAC authorizer
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-25 09:51:39 +08:00
zryfish
f1146f5d6c fix cannot create success login (#2576)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-24 13:09:38 +08:00
zryfish
06932926a0 fix creating login records for user failed (#2572)
Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
2020-07-23 23:36:11 +08:00
zryfish
3d74bb0589 login record CRD (#2565)
* Signed-off-by: hongming <talonwan@yunify.com>

support ldap identity provider

Signed-off-by: hongming <talonwan@yunify.com>

* add login record

Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
2020-07-23 22:10:39 +08:00
hongming
d1f98b3289 Configuring kubectl image from command line
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-23 02:29:56 +08:00
KubeSphere CI Bot
1096eb8adb Merge pull request #2498 from wansir/federatednamespaces
add tenant federated namespaces API
2020-07-22 15:23:49 +08:00
hongming
3525fc5507 add federatednamespaces tenant API
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-20 17:39:46 +08:00
KubeSphere CI Bot
bd6f46a5c9 Merge pull request #2427 from wanjunlei/auditing-log
ignore dryRun k8s request when auditing
2020-07-20 14:55:49 +08:00
zryfish
8241a0f9c5 cache v1beta1 crd instead of v1 version, cause v1 is not available in kubernetes v1.15.x (#2482)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-20 10:03:26 +08:00
wanjunlei
5d99024f0b resovle conversation
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-17 15:39:52 +08:00
wanjunlei
a0255d6409 ignore dryRun k8s request when auditing
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-17 15:39:36 +08:00
KubeSphere CI Bot
fcea347780 Merge pull request #2368 from shaowenchen/add_dowload
using /v1alpha2/jenkins replace /jenkins.kubesphere.io api
2020-07-16 17:11:48 +08:00
shaowenchen
6090874cc4 using /jenkins replace jenkins.kubesphere.io api
Signed-off-by: shaowenchen <mail@chenshaowen.com>
2020-07-15 17:06:54 +08:00
zryfish
eeaa4b646a use more friendly error messages (#2364) 2020-07-09 18:33:24 +08:00
zryfish
693a4143db reconcile host cluster (#2354)
print friendly error when component failed

update dockerfile
2020-07-08 23:55:13 +08:00
hongming
99aff3c7da fix: resource scope (#2280)
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-07 15:24:10 +08:00
KubeSphere CI Bot
d50e59bc9e Merge pull request #2324 from wanjunlei/auditing
make the ResponseCapture implements CloseNotify interface
2020-07-07 14:38:46 +08:00
KubeSphere CI Bot
cdd78e8bcd Merge pull request #2264 from wansir/iam
fix: password modify
2020-07-07 14:17:45 +08:00
wanjunlei
cb5f98cf97 make the ResponseCapture implements CloseNotify interface 2020-07-06 22:06:32 +08:00
hongming
77a3722b4e fix: password modify
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-06 15:12:11 +08:00
hongming
b52db8732b fix: implicit workspace info in query
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-03 21:14:52 +08:00
hongming
48f80d8c1a fix: Synchronize users to LDAP
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-02 15:43:21 +08:00
KubeSphere CI Bot
52abbeb355 Merge pull request #2227 from wanjunlei/master
process audit information for resource creating requests
2020-06-27 20:51:43 +08:00
wanjunlei
37346150d3 resolve conversation 2020-06-23 16:26:24 +08:00
zryfish
48081f91af fix kubeapiserver proxy rejects all dryRun requests (#2241) 2020-06-22 16:37:52 +08:00
zryfish
5caee71b25 fix kubeapiserver proxy rejects all dryRun requests (#2240) 2020-06-22 14:24:59 +08:00
hongming
ee741858b6 fix: multi-cluster proxy authentication
Signed-off-by: hongming <talonwan@yunify.com>
2020-06-19 15:20:43 +08:00
wanjunlei
7393ef91fa processing audit information of non-standard request
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-06-18 22:56:25 +08:00
wanjunlei
0933e2f185 add test 2020-06-17 09:48:56 +08:00
wanjunlei
bdb123b95a fix the bug "Cannot read property 'get' of undefined" 2020-06-17 00:04:28 +08:00
KubeSphere CI Bot
977e30700e Merge pull request #2187 from wanjunlei/master
add audit components
2020-06-15 11:40:40 +08:00
wanjunlei
a3561550bb modify annotation of Event 2020-06-14 11:25:28 +08:00
wanjunlei
584bdda50e Add two elements Message and Devops into Event struct.
Pass the event object instead of RequestInfo by request context to request handler.
2020-06-13 17:13:55 +08:00
Zhengyi Lai
e1e2b6b5e4 Remove WeaveScopeHost from network
Signed-off-by: Zhengyi Lai <zheng1@yunify.com>
2020-06-12 15:23:00 +08:00
wanjunlei
dd03cab01c change log level of get crd webhook error 2020-06-12 13:20:18 +08:00
wanjunlei
356560ac74 resolve conversation
formater

Signed-off-by: wanjunlei <wanjunlei@yunify.com>

debug

debug

Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-06-12 11:19:27 +08:00