Commit Graph
81 Commits
Author SHA1 Message Date
zryfish 93b123c1f0 add last login time for user (#2679)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-28 17:26:13 +08:00
KubeSphere CI Bot 822f5f25d7 Merge pull request #2599 from duanjiong/networkpolicy-fix
add new parameters allowedIngressNamespaces for user customization
2020-07-28 14:05:51 +08:00
Duan Jiong eb21606602 networkpolicy: add new parameters allowedIngressNamespaces for user customization
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-07-28 10:55:16 +08:00
hongming bda48c240f fix: devop IAM bugs
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-28 10:01:50 +08:00
zryfish c5a63500a4 add application controller (#2652)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-26 23:11:56 +08:00
zryfishandhongming 3d74bb0589 login record CRD (#2565)
* Signed-off-by: hongming <talonwan@yunify.com>

support ldap identity provider

Signed-off-by: hongming <talonwan@yunify.com>

* add login record

Signed-off-by: Jeff <zw0948@gmail.com>

Co-authored-by: hongming <talonwan@yunify.com>
2020-07-23 22:10:39 +08:00
hongming d1f98b3289 Configuring kubectl image from command line
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-23 02:29:56 +08:00
hongming a42fa6afaf fix: exit without error log
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-21 19:15:21 +08:00
KubeSphere CI Bot f706d264dd Merge pull request #2392 from shaowenchen/fix_devops
add interface for iam
2020-07-17 12:57:48 +08:00
zryfish 97580d3776 use 8443 for webhook port (#2458)
Signed-off-by: Jeff <zw0948@gmail.com>
2020-07-17 12:56:21 +08:00
shaowenchen 895d8b838f add interface for iam
Signed-off-by: shaowenchen <mail@chenshaowen.com>
2020-07-15 17:51:08 +08:00
hongming ed8bb437e8 fix: resource lifecycle
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-10 13:23:18 +08:00
zryfish 693a4143db reconcile host cluster (#2354)
print friendly error when component failed

update dockerfile
2020-07-08 23:55:13 +08:00
calvinyv c3700b78d9 Merge pull request #2265 from min-zh/storage-capability
capability for non CSI storage
2020-07-06 19:36:22 +08:00
zhangmin 052b1b5f25 capability for non CSI storage 2020-07-06 16:01:57 +08:00
KubeSphere CI Bot 031d6b3b6a Merge pull request #2270 from wansir/ldap
fix: synchronize users to LDAP
2020-07-02 17:54:44 +08:00
hongming 48f80d8c1a fix: Synchronize users to LDAP
Signed-off-by: hongming <talonwan@yunify.com>
2020-07-02 15:43:21 +08:00
Duan Jiong 655fd26cbf fix nsnp webhook to validate all fileds in it
such as ipblock, service.
And the crd openAPIV3Schema could not validate all scenarios

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-06-28 09:44:05 +08:00
zryfish ad1471a4a7 only run virtualservice and destinationrule controller when servicemesh is enabled (#2243) 2020-06-23 11:48:50 +08:00
zryfish 5d9542025a create openpitrix runtime when new cluster added (#2204) 2020-06-15 23:17:16 +08:00
hongming 4fcaa78b45 improve multicluster resource controller
Signed-off-by: hongming <talonwan@yunify.com>
2020-06-15 21:40:24 +08:00
Zhengyi Lai 3778abf767 Cleanup namespace controller 2020-06-13 00:32:13 +08:00
pengcong06 55354bf20d add list events 2020-06-10 21:28:07 +08:00
zryfish e7c5c5a1f3 fix namespace controller crash when openpitrix is not enabled (#2167) 2020-06-07 23:15:43 +08:00
KubeSphere CI Bot eb99025fe7 Merge pull request #2149 from min-zh/snapshot
storage capability
2020-06-04 12:47:37 +08:00
hongming 4e418bbe03 fix: clusterrolebinding controller bug
Signed-off-by: hongming <talonwan@yunify.com>
2020-06-04 12:18:00 +08:00
zhangmin c6158a7cd3 storage capability 2020-06-04 10:36:13 +08:00
hongming ce3cd21a76 update user's role templates API
Signed-off-by: hongming <talonwan@yunify.com>
2020-06-03 23:49:49 +08:00
KubeSphere CI Bot c104516ce0 Merge pull request #2111 from wansir/update-copyright
copyright license update
2020-05-25 17:17:34 +08:00
KubeSphere CI Bot 19d546a973 Merge pull request #2106 from wansir/master
fix user's resource lifecycle
2020-05-25 15:15:34 +08:00
hongming 85b61dce7c copyright license update
Signed-off-by: hongming <talonwan@yunify.com>
2020-05-25 14:51:24 +08:00
hongming 57acaeba41 use ownerReference control the lifecycle of user's kubeconfig and kubectl pod
Signed-off-by: hongming <talonwan@yunify.com>
2020-05-23 21:26:28 +08:00
KubeSphere CI Bot 5a89ce7394 Merge pull request #2056 from wansir/master
improve IAM module
2020-05-23 21:02:35 +08:00
hongming 8f93266ec0 improve IAM module
Signed-off-by: hongming <talonwan@yunify.com>
2020-05-23 20:48:19 +08:00
Ray Zhou 66a312a1e0 Fix grammer errors in code comments 2020-05-20 20:31:19 +08:00
zryfish 18ab887640 add cluster and crd to resources api group (#2053) 2020-05-08 17:30:15 +08:00
zhangmin 4f17b7a07f volume snapshot 2020-05-07 10:47:44 +08:00
zryfish 31436b451d fix multicluster options (#2037) 2020-04-29 14:36:40 +08:00
Duan Jiong 4fb9d84fea allow dns traffic and host node traffic
Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-04-28 10:21:58 +08:00
Duan Jiong d3bdcd0465 network: support network isolate
Add new crd to convert kubesphere network policy to k8s network policy, and then other network
plugin will do the rest work.

Use  cache.go from calico project's kube-controller,  it aim to  sync nsnp with k8s np, delete unused np, and relieve the pressure on k8s restful client.

If you want higher performance, you can implement interface  NsNetworkPolicyProvider in pkg/controller/provider/namespace_np.go.

Signed-off-by: Duan Jiong <djduanjiong@gmail.com>
2020-04-28 10:21:50 +08:00
zryfish 5a3eb651f3 change cluster schema (#2026)
* change cluster schema

* change cluster schema
2020-04-27 17:34:02 +08:00
runzexia 052af22761 regenerate 2020-04-15 11:37:52 +08:00
runzexia d8259160b8 Merge branch 'dev' into devops-refactor
# Conflicts:
#	Makefile
#	api/api-rules/violation_exceptions.list
#	api/openapi-spec/swagger.json
#	cmd/controller-manager/app/controllers.go
#	hack/generate_client.sh
#	pkg/apis/cluster/v1alpha1/openapi_generated.go
#	pkg/client/informers/externalversions/generic.go
#	pkg/kapis/tenant/v1alpha2/register.go
#	pkg/models/tenant/devops.go
#	pkg/models/tenant/workspaces.go
#	pkg/simple/client/devops/fake/fakedevops.go
#	tools/cmd/crd-doc-gen/main.go
2020-04-15 11:33:05 +08:00
runzexia 9a6ba04a37 clean old devops code
todo impl use informer

Signed-off-by: runzexia <runzexia@yunify.com>
2020-04-15 11:03:08 +08:00
hongming 5ac915ad2e Merge remote-tracking branch 'upstream/dev' into dev
# Conflicts:
#	pkg/apis/iam/v1alpha2/user_types.go
2020-04-10 15:49:31 +08:00
hongming a3d3c8e427 update
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-10 15:41:23 +08:00
hongming 0e814bb5e4 add iam crd
Signed-off-by: hongming <talonwan@yunify.com>
2020-04-10 04:05:23 +08:00
zryfish e174dcb3d6 add cluster controller (#1993) 2020-04-08 00:40:28 +08:00
runzexia 30be09e012 refmt 2020-04-01 11:10:07 +08:00
runzexia 1a6f563da1 Merge branch 'dev' into devops-refactor
# Conflicts:
#	cmd/controller-manager/app/controllers.go
#	hack/generate_client.sh
#	pkg/client/clientset/versioned/clientset.go
#	pkg/client/clientset/versioned/fake/clientset_generated.go
#	pkg/client/clientset/versioned/fake/register.go
#	pkg/client/clientset/versioned/scheme/register.go
#	pkg/client/informers/externalversions/generic.go
2020-04-01 11:04:09 +08:00