• Kubernetes Submit Queue's avatar
    Merge pull request #54013 from vladimirvivien/scaleio-secret-multi-tenancy · 7d5dc528
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 49865, 53731, 54013, 54513, 51502). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    ScaleIO - Ability to specify Secret's name and namespace 
    
    **What this PR does / why we need it**:
    This PR is to decouple the ScaleIO secret from the same namespace as that of the StorageClass/PVC/PV that uses it (#53619). Currently, authorized non-admin k8s user, who creates volumes, may end up having unauthorized access to ScaleIO secret information.  This PR introduces secret parameter that allows specification of secret's namespace.
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #53619 
    
    **Release note**:
    ```release-note
    ScaleIO persistent volumes now support referencing a secret in a namespace other than the bound persistent volume claim's namespace; this is controlled during provisioning with the `secretNamespace` storage class parameter; StoragePool and ProtectionDomain attributes no longer defaults to the value `default`
    ```
    7d5dc528
Name
Last commit
Last update
..
BUILD Loading commit data...
admissionregistration.k8s.io.json Loading commit data...
admissionregistration.k8s.io_v1alpha1.json Loading commit data...
api.json Loading commit data...
apis.json Loading commit data...
apps.json Loading commit data...
apps_v1.json Loading commit data...
apps_v1alpha1.json Loading commit data...
apps_v1beta1.json Loading commit data...
apps_v1beta2.json Loading commit data...
authentication.k8s.io.json Loading commit data...
authentication.k8s.io_v1.json Loading commit data...
authentication.k8s.io_v1beta1.json Loading commit data...
authorization.k8s.io.json Loading commit data...
authorization.k8s.io_v1.json Loading commit data...
authorization.k8s.io_v1beta1.json Loading commit data...
autoscaling.json Loading commit data...
autoscaling_v1.json Loading commit data...
autoscaling_v2beta1.json Loading commit data...
batch.json Loading commit data...
batch_v1.json Loading commit data...
batch_v1beta1.json Loading commit data...
batch_v2alpha1.json Loading commit data...
certificates.k8s.io.json Loading commit data...
certificates.k8s.io_v1beta1.json Loading commit data...
extensions.json Loading commit data...
extensions_v1beta1.json Loading commit data...
logs.json Loading commit data...
networking.k8s.io.json Loading commit data...
networking.k8s.io_v1.json Loading commit data...
policy.json Loading commit data...
policy_v1alpha1.json Loading commit data...
policy_v1beta1.json Loading commit data...
rbac.authorization.k8s.io.json Loading commit data...
rbac.authorization.k8s.io_v1.json Loading commit data...
rbac.authorization.k8s.io_v1alpha1.json Loading commit data...
rbac.authorization.k8s.io_v1beta1.json Loading commit data...
resourceListing.json Loading commit data...
scheduling.k8s.io.json Loading commit data...
scheduling.k8s.io_v1alpha1.json Loading commit data...
settings.k8s.io.json Loading commit data...
settings.k8s.io_v1alpha1.json Loading commit data...
storage.authorization.k8s.io_v1beta1.json Loading commit data...
storage.k8s.io.json Loading commit data...
storage.k8s.io_v1.json Loading commit data...
storage.k8s.io_v1beta1.json Loading commit data...
v1.json Loading commit data...
version.json Loading commit data...