Add SCC Describer

[pweil-]

fork PR: openshift/kubernetes#5

Adds a describer for SCC. Example output:

[pweil@localhost origin]$ oc describe scc anyuid
Name:               anyuid
Priority:           10
Access:             
  Users:            
  Groups:           system:cluster-admins
Settings:           
  Allow Privileged:     false
  Default Add Capabilities: 
  Required Drop Capabilities:   KILL,MKNOD,SYS_CHROOT,SETUID,SETGID
  Allowed Capabilities:     
  Allow Host Dir Volumes:   false
  Allow Host Network:       false
  Allow Host Ports:     false
  Allow Host PID:       false
  Allow Host IPC:       false
  Run As User Strategy:     
    Type:           RunAsAny
  SELinux Context Strategy: 
    Type:           MustRunAs
  FSGroup Strategy:     
    Type:           RunAsAny
    Ranges:         
  Supplemental Groups Strategy: 
    Type:           RunAsAny
    Ranges:         


[pweil@localhost origin]$ oc describe scc privileged
Name:               privileged
Access:             
  Users:            system:serviceaccount:openshift-infra:build-controller
  Groups:           system:cluster-admins,system:nodes
Settings:           
  Allow Privileged:     true
  Default Add Capabilities: 
  Required Drop Capabilities:   
  Allowed Capabilities:     
  Allow Host Dir Volumes:   true
  Allow Host Network:       true
  Allow Host Ports:     true
  Allow Host PID:       true
  Allow Host IPC:       true
  Run As User Strategy:     
    Type:           RunAsAny
  SELinux Context Strategy: 
    Type:           RunAsAny
  FSGroup Strategy:     
    Type:           RunAsAny
    Ranges:         
  Supplemental Groups Strategy: 
    Type:           RunAsAny
    Ranges:         

Fixes #7051

[smarterclayton]

Looks good, please add some representative tests

[deads2k]

@stevekuznetsov ptal

[stevekuznetsov]

fixes #5299

[stevekuznetsov]

Why are endpoint and scc kinds plural?

[pweil-]

that's how they've been for a while. There is a special case for them in rest mapping for when the singular == the plural.

[stevekuznetsov]

/twitch

[liggitt]

/twitch

yes. tough.

[stevekuznetsov]

@pweil- need to update generated bash completions

[pweil-]

@stevekuznetsov - updated - PTAL

[stevekuznetsov]

Could you post example output for the changes?

[pweil-]

Changes to move type inline

[pweil@localhost origin]$ oc describe scc restricted
Name:                       restricted
Access:                     
  Users:                    
  Groups:                   system:authenticated
Settings:                   
  Allow Privileged:             false
  Default Add Capabilities:         
  Required Drop Capabilities:           KILL,MKNOD,SYS_CHROOT,SETUID,SETGID
  Allowed Capabilities:             
  Allow Host Dir Volumes:           false
  Allow Host Network:               false
  Allow Host Ports:             false
  Allow Host PID:               false
  Allow Host IPC:               false
  Run As User Strategy: MustRunAsRange      
  SELinux Context Strategy: MustRunAs       
  FSGroup Strategy: RunAsAny            
    Ranges:                 
  Supplemental Groups Strategy: RunAsAny    
    Ranges:                 

[pweil-]

actually, I'll me add a len check on the ranges as well. Let me know if there is anything else you see

Edit: on second though, knowing they are empty provides value...it indicates that they will pull from the namespace depending on the strategy. Leaving that alone

[smarterclayton]

Instead of empty, print <none> or <empty>

[stevekuznetsov]

It looks good other than the "empty" representation. It would be nice if things lined up and didn't look so awful, but I can't tell why that's occurring as you're using a TabWriter.

[pweil-]

[pweil@localhost origin]$ oc describe scc restricted
Name:                       restricted
Access:                     
  Users:                    <none>
  Groups:                   system:authenticated
Settings:                   
  Allow Privileged:             false
  Default Add Capabilities:         <none>
  Required Drop Capabilities:           KILL,MKNOD,SYS_CHROOT,SETUID,SETGID
  Allowed Capabilities:             <none>
  Allow Host Dir Volumes:           false
  Allow Host Network:               false
  Allow Host Ports:             false
  Allow Host PID:               false
  Allow Host IPC:               false
  Run As User Strategy: MustRunAsRange      
    UID:                    <none>
    UID Range Min:              <none>
    UID Range Max:              <none>
  SELinux Context Strategy: MustRunAs       
    User:                   <none>
    Role:                   <none>
    Type:                   <none>
    Level:                  <none>
  FSGroup Strategy: RunAsAny            
    Ranges:                 <none>
  Supplemental Groups Strategy: RunAsAny    
    Ranges:                 <none>

[smarterclayton]

LGTM

[pweil-]

[merge]

[openshift-bot]

continuous-integration/openshift-jenkins/merge SUCCESS (https://ci.openshift.redhat.com/jenkins/job/merge_pull_requests_origin/5030/) (Image: devenv-rhel7_3478)

[openshift-bot]

[Test]ing while waiting on the merge queue

[openshift-bot]

Evaluated for origin test up to 6a835c5

[openshift-bot]

continuous-integration/openshift-jenkins/test SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pr_origin/1362/)

[openshift-bot]

Evaluated for origin merge up to 6a835c5