Akihiro Suda
fe6833a9a4
config: TolerateMissingHugePagesCgroupController -> TolerateMissingHugetlbController
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-07-02 13:49:42 +09:00
Mike Brown
b661ad711e
Merge pull request #1504 from lorenz/ignore-image-defined-volumes
...
Add option for ignoring volumes defined in images
2020-06-14 11:52:48 -05:00
Wei Fu
ae8200bf93
Merge pull request #1499 from webwurst/patch-1
...
Fix typo
2020-06-10 13:46:29 +08:00
Lorenz Brun
5a1d49b063
Add option for ignoring volumes defined in images
...
Signed-off-by: Lorenz Brun <lorenz@brun.one>
2020-06-09 21:02:47 +02:00
Brian Goff
c694c63176
Add config for registry http headers
...
This adds a configuration knob for adding request headers to all
registry requests. It is not namespaced to a registry.
Signed-off-by: Brian Goff <cpuguy83@gmail.com>
2020-06-08 18:56:15 -07:00
Tobias Bradtke
098e040014
Fix typo
...
Signed-off-by: Tobias Bradtke <webwurst@gmail.com>
2020-06-05 18:19:49 +02:00
Michael Crosby
8898550e34
Merge pull request #1498 from mxpv/base
...
Specify base OCI runtime spec
2020-05-29 16:34:29 -04:00
Maksym Pavlenko
df8d6c5b7b
Update documentation for base OCI spec files
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2020-05-28 14:45:11 -07:00
Maksym Pavlenko
8d54f39753
Allow specify base OCI runtime spec
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2020-05-28 13:39:31 -07:00
Mike Brown
a7ad3bc01f
add a registry auth tutorial
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2020-05-22 15:39:30 -05:00
Mike Brown
3f0aa45453
removing boilerplate test replace by projectboiler check
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2020-05-14 17:52:12 -05:00
Maksym Pavlenko
674fe72aa8
Update docs for unset seccomp profile
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2020-05-10 10:46:58 -07:00
Dave Syer
5ac8515bf0
Clarify that plugin names are long in version = 2
...
Otherwise it's confusing for readers who just need quick reference
for plugin configurations.
Signed-off-by: Dave Syer <dsyer@pivotal.io>
2020-04-27 14:35:41 +01:00
Martin Hickey
02307da36d
Add improvement to docs
...
Some small improvements to docs of things I found while
using the docs.
Signed-off-by: Martin Hickey <martin.hickey@ie.ibm.com>
2020-04-23 09:47:54 +00:00
Wei Fu
a45f57bcf1
Merge pull request #1375 from jdewinne/registry-doc
...
Update registry.md for auth config
2020-04-21 16:25:08 +08:00
Joris De Winne
050e8c63c0
Update registry.md for auth config
...
Signed-off-by: Joris De Winne <joris.dewinne@gmail.com>
2020-04-20 21:19:35 -07:00
Brandon Lum
8d5a8355d0
Updated docs and code for default nil behavior
...
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
2020-02-27 23:42:03 +00:00
Brandon Lum
7a24da0375
Updated docs and encryption.md -> decryption.md
...
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
2020-02-24 20:45:57 +00:00
Brandon Lum
c5209cd679
Updated doc based on changes requested
...
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
2020-02-24 20:45:57 +00:00
Brandon Lum
8df431fc31
Defer multitenant key model to image auth discussion
...
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
2020-02-24 20:45:57 +00:00
Brandon Lum
f0579c7b4d
Implmented node key model for image encryption
...
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
2020-02-24 20:45:57 +00:00
Mike Brown
c9ed98462d
move to v3.2 for the pause image
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2020-02-14 12:55:52 -06:00
Akihiro Suda
aaddaa2732
bump up the default runtime to "io.containerd.runc.v2"
...
The former default runtime "io.containerd.runc.v1" won't support new features
like support for cgroup v2: containerd/containerd#3726
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-12-16 11:53:58 +09:00
Lantao Liu
4f350ad474
Fix typo.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-26 15:09:07 -08:00
Lantao Liu
ab6701bd11
Add insecure_skip_verify option.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-26 13:25:52 -08:00
Lantao Liu
56fa16ef9c
Update the kube-up doc with a simpler approach.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-09-23 17:24:10 -07:00
Lantao Liu
35eb96d901
Update deployment and integration test
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-09-18 17:21:37 -07:00
Ed Bartosh
e28689657a
Add ContatinerAnnotations to the Runtime and config
...
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2019-09-10 11:28:51 +03:00
Lantao Liu
2d03ccf5dd
FDQN is a typo, and we don't support trailing dot in FQDN.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-30 13:31:04 -07:00
Lantao Liu
81ca274c6f
Add wildcard mirror support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-13 12:02:57 -07:00
Akihiro Suda
28e492fce0
allow non-mutual TLS
...
Previously, client keypair had needed to be specified even when unused.
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-08-10 21:48:03 +09:00
Lantao Liu
53e94c6753
Use containerd registry mirror library.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-09 14:39:30 -07:00
Alex Price
3353ab76d9
Add flag to overload default privileged host device behaviour
...
This commit adds a flag to the runtime config that allows overloading of the default
privileged behaviour. When the flag is enabled on a runtime, host devices won't
be appended to the runtime spec if the container is run as privileged.
By default the flag is false to maintain the current behaviour of privileged.
Fixes #1213
Signed-off-by: Alex Price <aprice@atlassian.com>
2019-08-08 12:16:42 +10:00
Lantao Liu
871a8b89c8
Do not deprecate no_pivot yet.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 15:12:50 -07:00
Lantao Liu
b74653b821
Print warning message for deprecated options.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-02 01:10:11 -07:00
Lantao Liu
467f9e0e8a
Fix proc mount support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-07-31 17:11:15 -07:00
Lantao Liu
c78caf902d
Add max concurrent downloads support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-07-26 18:15:17 -07:00
Aldo Culquicondor
4b43303203
Add option to register on TCP server
...
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2019-07-25 09:42:49 -04:00
Lantao Liu
64bf4bebf3
Merge pull request #1188 from alculquicondor/fix/doc
...
Update docs to v2 config
2019-07-24 14:25:42 -07:00
Aldo Culquicondor
e2550f6285
Update docs to v2 config
...
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2019-07-24 09:30:13 -04:00
Joe Borg
9ebc10ec08
Correcting typo
...
`/ec/` > `/etc/`
Signed-off-by: Joe Borg <joe@josephb.org>
2019-07-04 14:12:20 -04:00
Mike Brown
3ba04c01cc
doc update for cni max num
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2019-06-11 08:35:22 -05:00
kuramal
b022de5f37
add cni plugin config file max num config, set go-cni to commit 22460c0
...
Signed-off-by: kuramal <linxxnil@126.com>
2019-06-10 12:14:35 +08:00
Vlad Ungureanu
60a58af376
Add TLS auth registry support
...
Signed-off-by: Vlad Ungureanu <ungureanuvladvictor@gmail.com>
2019-06-06 14:55:53 -07:00
Lantao Liu
db90808477
Update doc and add deprecation policy for CRI options.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-25 16:11:16 -07:00
Lantao Liu
19e2b20c13
Use ctr images import.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-15 10:37:31 -07:00
Lantao Liu
238658719f
Cleanup pod annotation test and only support tailing wildcard.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-03-25 12:54:34 -07:00
Harshal Patil
effd82227c
Add support for passing sandbox annotations to runtime
...
Signed-off-by: Harshal Patil <harshal.patil@in.ibm.com>
2019-03-21 14:38:14 +05:30
Mike Brown
9474b05dd7
clarify the versioning for the tarball
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2019-03-13 12:58:12 -05:00
Lantao Liu
f2f90f6b00
Merge pull request #1060 from Random-Liu/support-stream-idle-timeout
...
Support stream idle timeout.
2019-02-28 10:28:27 -08:00