• Kubernetes Submit Queue's avatar
    Merge pull request #54013 from vladimirvivien/scaleio-secret-multi-tenancy · 7d5dc528
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 49865, 53731, 54013, 54513, 51502). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    ScaleIO - Ability to specify Secret's name and namespace 
    
    **What this PR does / why we need it**:
    This PR is to decouple the ScaleIO secret from the same namespace as that of the StorageClass/PVC/PV that uses it (#53619). Currently, authorized non-admin k8s user, who creates volumes, may end up having unauthorized access to ScaleIO secret information.  This PR introduces secret parameter that allows specification of secret's namespace.
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #53619 
    
    **Release note**:
    ```release-note
    ScaleIO persistent volumes now support referencing a secret in a namespace other than the bound persistent volume claim's namespace; this is controlled during provisioning with the `secretNamespace` storage class parameter; StoragePool and ProtectionDomain attributes no longer defaults to the value `default`
    ```
    7d5dc528
Name
Last commit
Last update
..
endpoints Loading commit data...
helper Loading commit data...
node Loading commit data...
pod Loading commit data...
resource Loading commit data...
service Loading commit data...
validation Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
conversion.go Loading commit data...
conversion_test.go Loading commit data...
defaults.go Loading commit data...
defaults_test.go Loading commit data...
doc.go Loading commit data...
register.go Loading commit data...
zz_generated.conversion.go Loading commit data...
zz_generated.defaults.go Loading commit data...