ta/caas-security.git
4 years agoadd rights to svcwatcher clusterrole events 84/2084/4 master
Tamas Laczko [Mon, 2 Dec 2019 14:41:05 +0000 (15:41 +0100)]
add rights to svcwatcher clusterrole events

Change-Id: I1c566732435601f69761aa0229c7fc6b2a691de5

4 years agoAdd EFI support for grub.cfg generation 08/2108/4
Alexandru Avadanii [Mon, 9 Dec 2019 14:20:59 +0000 (15:20 +0100)]
Add EFI support for grub.cfg generation

On UEFI-enabled systems, the location of grub.cfg is different.

Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Change-Id: I0fefe733587ca1fb0f12975eadfaad2e19fbd02c

4 years agoMerge "Dynamic provisioner rbac update."
Levente Kálé [Wed, 30 Oct 2019 12:46:35 +0000 (12:46 +0000)]
Merge "Dynamic provisioner rbac update."

4 years agoMerge "Update cert role to enable to load them to secrets"
Levente Kálé [Tue, 29 Oct 2019 16:10:17 +0000 (16:10 +0000)]
Merge "Update cert role to enable to load them to secrets"

4 years agoDynamic provisioner rbac update. 71/1871/2
Balazs Szekeres [Tue, 29 Oct 2019 15:06:27 +0000 (16:06 +0100)]
Dynamic provisioner rbac update.

Change-Id: Ie4d81a8b3803b05d01f81064af0748e72a7a85ba
Signed-off-by: Balazs Szekeres <balazs.szekeres@nokia.com>
4 years agoUpdate cert role to enable to load them to secrets 51/1751/6
Zoltan Hegyi [Wed, 9 Oct 2019 15:50:15 +0000 (17:50 +0200)]
Update cert role to enable to load them to secrets

Added secret_ns parameter, Corrected typo(s)

Signed-off-by: Zoltan Hegyi <zoltan.hegyi@nokia.com>
Change-Id: Ib83795d637f901c31cbf0a037cfbc5e56d8ff7c8

4 years agoAdded new rbac rules. 70/1770/9
Balazs Szekeres [Tue, 24 Sep 2019 13:56:54 +0000 (15:56 +0200)]
Added new rbac rules.

Added storage local static provisioner rbac rule
Added dynamic local pv provisioner rbac rule

Change-Id: Id4824cee7a8232521127a9b7ce794a3bc3ba6084
Signed-off-by: Balazs Szekeres <balazs.szekeres@nokia.com>
4 years agoKubernetes 1.16.0 api reference change 00/1700/2
Balazs Szekeres [Wed, 2 Oct 2019 12:20:40 +0000 (14:20 +0200)]
Kubernetes 1.16.0 api reference change

Change-Id: I92c422283105858ec18d4ce03f4d4d74d47c5c99
Signed-off-by: Balazs Szekeres <balazs.szekeres@nokia.com>
4 years agospec: Allow building on any platform 68/1668/1
Alexandru Avadanii [Fri, 27 Sep 2019 20:25:48 +0000 (22:25 +0200)]
spec: Allow building on any platform

Change hardcoded x86_64 build architecture to current platform arch.

Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Change-Id: I278bed8f78ca7cf023518a64a67ba09470fe9beb

4 years agoCapability update 44/1544/2
Balazs Szekeres [Thu, 5 Sep 2019 19:33:55 +0000 (21:33 +0200)]
Capability update

Inside swift container rsync needs these capabilities

Change-Id: I65e51a99a0ef5a077a68509f6244fec5bcb081e6
Signed-off-by: Balazs Szekeres <balazs.szekeres@nokia.com>
4 years agoUpdate DANM RBAC 69/1469/2
Krisztian Lengyel [Mon, 26 Aug 2019 14:10:47 +0000 (16:10 +0200)]
Update DANM RBAC

Update DANM RBAC for version 5e15d4e322fc5ff89b06ac70bd83b5ce4c09d0df

Change-Id: I57f0632cd641eb8b13f3a17321374f4ea38e6e44
Signed-off-by: Krisztian Lengyel <krisztian.lengyel@nokia.com>
4 years agoBump RPM_MINOR_VERSION 00/1300/1
Krisztian Lengyel [Thu, 1 Aug 2019 07:54:00 +0000 (09:54 +0200)]
Bump RPM_MINOR_VERSION

Change-Id: I56c362a91eafa80668c2923907e7f9428418f50b
Signed-off-by: Krisztian Lengyel <krisztian.lengyel@nokia.com>
4 years agoMerge "ACL mask added for cert_path"
Levente Kálé [Wed, 31 Jul 2019 18:14:33 +0000 (18:14 +0000)]
Merge "ACL mask added for cert_path"

4 years agoACL mask added for cert_path 67/1267/1
Balint Varga [Fri, 26 Jul 2019 07:19:28 +0000 (09:19 +0200)]
ACL mask added for cert_path

Signed-off-by: Balint Varga <balint.varga@nokia.com>
Change-Id: I1a1a1912eecd8cbb3966f77b4f3e9f9ac03b2354

4 years agoUpdate DANM RBAC roles for version 4.0 04/1204/2
Krisztian Lengyel [Tue, 16 Jul 2019 12:59:17 +0000 (14:59 +0200)]
Update DANM RBAC roles for version 4.0

Change-Id: I1dbc5f6acf73ed735a5c91aef728ea6d1ef17d82
Signed-off-by: Krisztian Lengyel <krisztian.lengyel@nokia.com>
4 years agoAdd RBAC config for CPU webhookcfg-controller 62/962/2
Krisztian Lengyel [Fri, 7 Jun 2019 12:42:38 +0000 (14:42 +0200)]
Add RBAC config for CPU webhookcfg-controller

Change-Id: I2c6a1f33cd4b06d1b3f41b3db3935c83fdabed7b
Signed-off-by: Krisztian Lengyel <krisztian.lengyel@nokia.com>
4 years agoMerge "Added node read rule."
Levente Kálé [Wed, 12 Jun 2019 13:28:53 +0000 (13:28 +0000)]
Merge "Added node read rule."

4 years agoAdded node read rule. 19/619/3
Szekeres, Balazs (Nokia - HU/Budapest) [Mon, 6 May 2019 10:43:04 +0000 (12:43 +0200)]
Added node read rule.

- Now the node.go can read the node resources, as kube-proxy user.
- Added .gitreview file for ease of use.

Change-Id: If6c2e34b8486c0ebfd52d0afc1dbb0fe41197373
Signed-off-by: Szekeres, Balazs (Nokia - HU/Budapest) <balazs.szekeres@nokia.com>
4 years agoExtract RBAC manifest dir variable 24/624/3
Krisztian Lengyel [Mon, 29 Apr 2019 12:43:59 +0000 (14:43 +0200)]
Extract RBAC manifest dir variable

Change-Id: I6da12fb4ea87205ac642f1198f889be3713bab07
Depends-On: I2969223948218155aff121c20731eb336c13fca6
Signed-off-by: Krisztian Lengyel <krisztian.lengyel@nokia.com>
4 years agoAdded seed code for caas-security. 05/605/3
Szekeres, Balazs (Nokia - HU/Budapest) [Thu, 2 May 2019 12:07:07 +0000 (14:07 +0200)]
Added seed code for caas-security.

Added seed code for caas-security.

Change-Id: I206543bc11d68300fd205e3194beae8eb65c66dc
Signed-off-by: Szekeres, Balazs (Nokia - HU/Budapest) <balazs.szekeres@nokia.com>
4 years agoInitial empty repository
Eric Ball [Wed, 1 May 2019 00:25:23 +0000 (00:25 +0000)]
Initial empty repository