kubernetes/pkg/controller
Jan Safranek 2050d6fc69 selinux: add a new SELinux translator to the controller
A real SELinuxOptionsToFileLabel function needs access to host's
/etc/selinux to read the defaults. This is not possible in
kube-controller-manager that often runs in a container and does not have
access to /etc on the host. Even if it had, it could run on a different
Linux distro than worker nodes.

Therefore implement a custom SELinuxOptionsToFileLabel that does not
default fields in SELinuxOptions and uses just fields provided by the Pod.

Since the controller cannot default empty SELinux label components,
treat them as incomparable.
Example: "system_u:system_r:container_t:s0:c1,c2" *does not* conflict with ":::s0:c1,c2",
because the node that will run such a Pod may expand "":::s0:c1,c2" to "system_u:system_r:container_t:s0:c1,c2".
However, "system_u:system_r:container_t:s0:c1,c2" *does* conflict with ":::s0:c98,c99".
2025-02-17 13:32:10 +01:00
..
apis/config remove import doc comments 2024-12-02 16:59:34 +01:00
bootstrap remove import doc comments 2024-12-02 16:59:34 +01:00
certificates remove import doc comments 2024-12-02 16:59:34 +01:00
clusterroleaggregation Use the generic/typed workqueue throughout 2024-05-04 14:33:12 -04:00
cronjob fix name 2025-01-15 18:14:32 +08:00
daemon remove import doc comments 2024-12-02 16:59:34 +01:00
deployment Deployment controller should count terminating pods in the status 2025-01-23 22:37:05 +01:00
disruption Use the generic/typed workqueue throughout 2024-05-04 14:33:12 -04:00
endpoint remove import doc comments 2024-12-02 16:59:34 +01:00
endpointslice remove import doc comments 2024-12-02 16:59:34 +01:00
endpointslicemirroring remove import doc comments 2024-12-02 16:59:34 +01:00
garbagecollector remove import doc comments 2024-12-02 16:59:34 +01:00
history api: introduce separate VolumeResourceRequirements struct 2023-08-21 15:31:28 +02:00
job Promote SidecarContainers feature to GA 2025-02-02 17:45:36 +09:00
namespace remove import doc comments 2024-12-02 16:59:34 +01:00
nodeipam Merge pull request #129054 from pohly/remove-import-name 2024-12-12 09:58:35 +01:00
nodelifecycle remove import doc comments 2024-12-02 16:59:34 +01:00
podautoscaler Merge pull request #125046 from tklauser/min-max-builtins 2025-01-30 07:33:23 -08:00
podgc remove import doc comments 2024-12-02 16:59:34 +01:00
replicaset ReplicaSet controller should count terminating pods in the status 2025-01-23 22:26:34 +01:00
replication remove import doc comments 2024-12-02 16:59:34 +01:00
resourceclaim client-go/tools/cache: add APIs with context parameter 2024-12-18 18:45:02 +01:00
resourcequota remove import doc comments 2024-12-02 16:59:34 +01:00
serviceaccount Switch to gopkg.in/go-jose/go-jose.v2 @ v2.6.3 2025-01-21 09:21:27 -05:00
servicecidrs update controller manager 2025-01-20 13:01:53 +00:00
statefulset Do not attempt to truncate revision history if revisionHistoryLimit is negative 2024-12-19 11:35:29 +03:00
storageversiongc Use the generic/typed workqueue throughout 2024-05-04 14:33:12 -04:00
storageversionmigrator svm: set UID and RV on SSA patch to cause conflict on logical create 2024-07-18 17:19:11 -04:00
tainteviction There is no need to set the worker to nil to avoid potential timing issues. 2025-01-17 10:10:58 +00:00
testutil Use canonical json-patch v4 import 2024-05-28 10:48:22 +02:00
ttl fix: enable empty and len rules from testifylint on pkg package 2024-07-06 23:15:43 +00:00
ttlafterfinished remove import doc comments 2024-12-02 16:59:34 +01:00
util Fix Go vet errors for master golang 2024-09-20 12:36:38 +05:30
validatingadmissionpolicystatus remove import doc comments 2024-12-02 16:59:34 +01:00
volume selinux: add a new SELinux translator to the controller 2025-02-17 13:32:10 +01:00
controller_ref_manager.go kube-controller-manager: finish conversion to contextual logging 2023-07-12 14:57:29 +02:00
controller_ref_manager_test.go Merge pull request #101250 from evertrain/master 2021-11-10 09:19:26 -08:00
controller_utils.go ReplicaSet controller should count terminating pods in the status 2025-01-23 22:26:34 +01:00
controller_utils_test.go ReplicaSet controller should count terminating pods in the status 2025-01-23 22:26:34 +01:00
doc.go remove import doc comments 2024-12-02 16:59:34 +01:00
OWNERS add myself as approver to pkg/controller 2022-01-12 19:33:02 -05:00