-
Notifications
You must be signed in to change notification settings - Fork 4.7k
remove scc type carries #14701
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
remove scc type carries #14701
Conversation
"k8s.io/apiserver/pkg/registry/rest" | ||
) | ||
|
||
// LegacyStorageWrapper allows someone to mutate the storage. We use this to add SCCs. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
s/LegacyStorageWrapper/LegacyStorageMutatorFunc/
7c42380
to
1490b0a
Compare
[test] |
conflicts! noooooooooo |
[test] |
weird, the pull doesn't match https://github.com/deads2k/origin/commits/api-08-scc-addhook |
1490b0a
to
56cd3d3
Compare
so much for my test :( |
@mfojtik fyi |
pkg/security/api/types.go
Outdated
FSPortworxVolume FSType = "portworxVolume" | ||
FSScaleIO FSType = "scaleIO" | ||
FSTypeAll FSType = "*" | ||
) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
pick in the FSTypeNone bits here
pkg/security/api/v1/defaults.go
Outdated
// In order to support old clients the boolean fields will always take precedence. | ||
defaultAllowedVolumes := fsTypeToStringSet(scc.Volumes) | ||
|
||
// assume a nil volume slice is allowing everything for backwards compatibility |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
FSTypeNone changes here
@@ -0,0 +1,49 @@ | |||
package(default_visibility = ["//visibility:public"]) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
remove BUILD files from the origin packages
@@ -0,0 +1,19 @@ | |||
/* | |||
Copyright 2015 The Kubernetes Authors. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
scc files we were carrying should never have had kube copyrights... remove them when moving into origin packages
pkg/security/scc/byrestrictions.go
Outdated
case kapi.FSTypeSecret, kapi.FSTypeConfigMap, | ||
kapi.FSTypeEmptyDir, kapi.FSTypeDownwardAPI: | ||
case securityapi.FSTypeSecret, securityapi.FSTypeConfigMap, | ||
securityapi.FSTypeEmptyDir, securityapi.FSTypeDownwardAPI: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
FSTypeNone
You merged after this was posted. How is the structure and after I rebase you can come back through and make sure it was all pickdown down properly. |
structure seemed fine, nits overall |
56cd3d3
to
91fbf83
Compare
91fbf83
to
6ce395f
Compare
|
6ce395f
to
e54c831
Compare
e7834cf
to
6c4fb50
Compare
I'd like this one before #14843 |
@stevekuznetsov is there some serial option I can run to see my test-go results? Locally my machine can't seem to start a built. It constantly fails (even on master). |
@deads2k we should have
Can you:
? |
51d07e5
to
c767366
Compare
re[test] |
1 similar comment
re[test] |
c767366
to
85b8f6e
Compare
re[test] |
#14043 re[test] |
re[test] |
Evaluated for origin test up to 85b8f6e |
continuous-integration/openshift-jenkins/test SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pull_request_origin/2610/) (Base Commit: 0d15b16) (PR Branch Commit: 85b8f6e) |
I'm getting weird build errors
trying to sort it out.