Taahir Ahmed 6a75e7c40c ClusterTrustBundles: Define types ... This commit is the main API piece of KEP-3257 (ClusterTrustBundles). This commit: * Adds the certificates.k8s.io/v1alpha1 API group * Adds the ClusterTrustBundle type. * Registers the new type in kube-apiserver. * Implements the type-specfic validation specified for ClusterTrustBundles: - spec.pemTrustAnchors must always be non-empty. - spec.signerName must be either empty or a valid signer name. - Changing spec.signerName is disallowed. * Implements the "attest" admission check to restrict actions on ClusterTrustBundles that include a signer name. Because it wasn't specified in the KEP, I chose to make attempts to update the signer name be validation errors, rather than silently ignored. I have tested this out by launching these changes in kind and manipulating ClusterTrustBundle objects in the resulting cluster using kubectl.		2023-03-15 20:10:18 -07:00
..
testdata	Graduate StatefulSetAutoDelete to beta	2023-03-13 17:09:29 -07:00
controller_policy.go	remove heapster rule from system:controller:horizontal-pod-autoscaler clusterrole	2023-01-04 16:28:42 +08:00
controller_policy_test.go	Support scale subresource for PDBs (#76294)	2019-05-23 22:24:17 -07:00
namespace_policy.go	switch over k/k to use klog v2	2020-05-16 07:54:27 -04:00
policy.go	ClusterTrustBundles: Define types	2023-03-15 20:10:18 -07:00
policy_test.go	Remove ioutil from auth plugin	2022-07-30 23:30:29 +09:00