Commit Graph

30 Commits

Author SHA1 Message Date
zryfish
3c8fbe39b9 fix websocket lost query string bug (#2705)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-29 21:51:55 +08:00
hongming
bda48c240f fix: devop IAM bugs
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-28 10:01:50 +08:00
zryfish
051893eb71 Use 429 for auth limit exceeded requests (#2591)
* fix login with email

Signed-off-by: Jeff <zw0948@gmail.com>

* use 429 for auth limit exceeded error

Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-25 14:27:03 +08:00
zryfish
f1146f5d6c fix cannot create success login (#2576)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-24 13:09:38 +08:00
zryfish
06932926a0 fix creating login records for user failed (#2572)
Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
2020-07-23 23:36:11 +08:00
zryfish
3d74bb0589 login record CRD (#2565)
* Signed-off-by: hongming <talonwan@yunify.com>

support ldap identity provider

Signed-off-by: hongming <talonwan@yunify.com>

* add login record

Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
2020-07-23 22:10:39 +08:00
wanjunlei
a0255d6409 ignore dryRun k8s request when auditing
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-07-17 15:39:36 +08:00
hongming
77a3722b4e fix: password modify
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-06 15:12:11 +08:00
KubeSphere CI Bot
52abbeb355 Merge pull request #2227 from wanjunlei/master
process audit information for resource creating requests
2020-06-27 20:51:43 +08:00
zryfish
48081f91af fix kubeapiserver proxy rejects all dryRun requests (#2241) 2020-06-22 16:37:52 +08:00
zryfish
5caee71b25 fix kubeapiserver proxy rejects all dryRun requests (#2240) 2020-06-22 14:24:59 +08:00
wanjunlei
7393ef91fa processing audit information of non-standard request
Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-06-18 22:56:25 +08:00
wanjunlei
584bdda50e Add two elements Message and Devops into Event struct.
Pass the event object instead of RequestInfo by request context to request handler.
2020-06-13 17:13:55 +08:00
wanjunlei
356560ac74 resolve conversation
formater

Signed-off-by: wanjunlei <wanjunlei@yunify.com>

debug

debug

Signed-off-by: wanjunlei <wanjunlei@yunify.com>
2020-06-12 11:19:27 +08:00
wanjunlei
4cb84de44d add audit components
Signed-off-by: wanjunlei <wanjunlei@yunify.com>

debug

add test

add test

add test
2020-06-10 20:21:07 +08:00
zryfish
68029de64c fix authorization header stripped by kube-apiserver (#2145) 2020-06-02 11:59:46 +08:00
hongming
85b61dce7c copyright license update
Signed-off-by: hongming <talonwan@yunify.com>
2020-05-25 14:51:24 +08:00
zryfish
1d48ca3446 fix ws authorization bug (#2059) 2020-05-12 16:08:05 +08:00
zryfish
dcd341e70f fix websocket bug (#2058) 2020-05-12 15:31:13 +08:00
hongming
992be764a1 fix list namespaces
Signed-off-by: hongming <talonwan@yunify.com>
2020-05-07 09:14:54 +08:00
hongming
7db2ba662c migrate legacy API
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-28 00:45:12 +08:00
hongming
3ce4a0d77c token cache config
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-13 19:14:41 +08:00
zryfish
dd5b96254c fix cluster bug (#1997) 2020-04-10 14:47:41 +08:00
zryfish
3c73471f79 fix path authorizer give no opinion on resource requests (#1981) 2020-04-01 17:41:50 +08:00
zryfish
7121e3609c move agent crd to kubesphere (#1974) 2020-03-29 16:49:11 +08:00
hongming
aadb5e91e8 update
Signed-off-by: hongming <talonwan@yunify.com>
2020-03-21 20:31:01 +08:00
hongming
1f26e62105 update
Signed-off-by: hongming <talonwan@yunify.com>
2020-03-21 18:52:28 +08:00
hongming
23f6be88c6 implement authorizer filter
Signed-off-by: hongming <talonwan@yunify.com>
2020-03-19 11:17:21 +08:00
zryfish
abf0d66b22 Add more tests (#1949)
* add more test code

* add more test code
2020-03-15 10:22:39 +08:00
zryfish
f8e7d06b07 move apigateway into apiserver (#1948) 2020-03-13 21:57:48 +08:00