mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-03-09 10:00:54 -04:00
7d5dc528a0
Automatic merge from submit-queue (batch tested with PRs 49865, 53731, 54013, 54513, 51502). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. ScaleIO - Ability to specify Secret's name and namespace **What this PR does / why we need it**: This PR is to decouple the ScaleIO secret from the same namespace as that of the StorageClass/PVC/PV that uses it (#53619). Currently, authorized non-admin k8s user, who creates volumes, may end up having unauthorized access to ScaleIO secret information. This PR introduces secret parameter that allows specification of secret's namespace. **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #53619 **Release note**: ```release-note ScaleIO persistent volumes now support referencing a secret in a namespace other than the bound persistent volume claim's namespace; this is controlled during provisioning with the `secretNamespace` storage class parameter; StoragePool and ProtectionDomain attributes no longer defaults to the value `default` ``` |
||
|---|---|---|
| .. | ||
| admissionregistration.k8s.io.json | ||
| admissionregistration.k8s.io_v1alpha1.json | ||
| api.json | ||
| apis.json | ||
| apps.json | ||
| apps_v1.json | ||
| apps_v1alpha1.json | ||
| apps_v1beta1.json | ||
| apps_v1beta2.json | ||
| authentication.k8s.io.json | ||
| authentication.k8s.io_v1.json | ||
| authentication.k8s.io_v1beta1.json | ||
| authorization.k8s.io.json | ||
| authorization.k8s.io_v1.json | ||
| authorization.k8s.io_v1beta1.json | ||
| autoscaling.json | ||
| autoscaling_v1.json | ||
| autoscaling_v2beta1.json | ||
| batch.json | ||
| batch_v1.json | ||
| batch_v1beta1.json | ||
| batch_v2alpha1.json | ||
| BUILD | ||
| certificates.k8s.io.json | ||
| certificates.k8s.io_v1beta1.json | ||
| extensions.json | ||
| extensions_v1beta1.json | ||
| logs.json | ||
| networking.k8s.io.json | ||
| networking.k8s.io_v1.json | ||
| policy.json | ||
| policy_v1alpha1.json | ||
| policy_v1beta1.json | ||
| rbac.authorization.k8s.io.json | ||
| rbac.authorization.k8s.io_v1.json | ||
| rbac.authorization.k8s.io_v1alpha1.json | ||
| rbac.authorization.k8s.io_v1beta1.json | ||
| resourceListing.json | ||
| scheduling.k8s.io.json | ||
| scheduling.k8s.io_v1alpha1.json | ||
| settings.k8s.io.json | ||
| settings.k8s.io_v1alpha1.json | ||
| storage.authorization.k8s.io_v1beta1.json | ||
| storage.k8s.io.json | ||
| storage.k8s.io_v1.json | ||
| storage.k8s.io_v1beta1.json | ||
| v1.json | ||
| version.json | ||