Commit Graph

1958 Commits

Author SHA1 Message Date
Akihiro Suda
5e5960f2bc
Merge pull request #1376 from Zyqsempai/add-cgroups-v2-metrics
Cgroupv2: Added CPU, Memory metrics
2020-01-21 23:21:09 +09:00
Boris Popovschi
6b8846cdf8 vendor updated + added cgroupv2 metrics
Signed-off-by: Boris Popovschi <zyqsempai@mail.ru>
2020-01-17 11:55:06 +02:00
Lantao Liu
b2804c0693
Merge pull request #1371 from AkihiroSuda/cgroup2-unshare-cgroupns
cgroup2: unshare cgroup namespace for containers
2020-01-14 10:08:14 -08:00
Akihiro Suda
982e767745
Merge pull request #1374 from lumjjb/bump_containerd
Bump vendor containerd/containerd version
2020-01-11 07:28:33 +09:00
Brandon Lum
73cd077c6b Bump vendor containerd/containerd version
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
2020-01-10 20:13:22 +00:00
Lantao Liu
83a9d2460c
Merge pull request #1363 from Random-Liu/fix-validate-config
Validate and update the right config
2020-01-10 00:11:27 -08:00
Akihiro Suda
71740399e0 cgroup2: unshare cgroup namespace for containers
In cgroup v1 container implementations, cgroupns is not used by default because
it was not available in the kernel until kernel 4.6 (May 2016), and the default
behavior will not change on cgroup v1 environments, because changing the
default will break compatibility and surprise users.

For cgroup v2, implementations are going to unshare cgroupns by default
so as to hide /sys/fs/cgroup from containers.

* Discussion: https://github.com/containers/libpod/issues/4363
* Podman PR (merged): https://github.com/containers/libpod/pull/4374
* Moby PR: https://github.com/moby/moby/pull/40174

This PR enables cgroupns for containers, but pod sandboxes are untouched
because probably there is no need to do.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-01-09 14:58:30 +09:00
Justin
522a056fe6
Merge pull request #1368 from mikebrow/vendor-update-2020-01-06
update for containerd vendor changes
2020-01-08 14:57:45 -08:00
Mike Brown
2da1ced9a1 update for containerd vendor changes
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2020-01-08 15:30:36 -06:00
Mike Brown
55566f9682
Merge pull request #1364 from katiewasnothere/local_introspection
add introspection service to cri plugin
2020-01-06 15:58:17 -08:00
Kathryn Baldauf
63d2a0445c add local support for introspection service
Signed-off-by: Kathryn Baldauf <kabaldau@microsoft.com>
2020-01-03 11:42:21 -08:00
Lantao Liu
5a9c12d49e Validate and update the right config
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-12-19 17:50:51 -08:00
Lantao Liu
ff8a2e7c65
Merge pull request #1359 from AkihiroSuda/shim-v2-runc-v2
bump up the default runtime to "io.containerd.runc.v2"
2019-12-17 11:24:22 -08:00
Akihiro Suda
aaddaa2732 bump up the default runtime to "io.containerd.runc.v2"
The former default runtime "io.containerd.runc.v1" won't support new features
like support for cgroup v2: containerd/containerd#3726

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-12-16 11:53:58 +09:00
Lantao Liu
61d3e49b42
Merge pull request #1357 from darfux/add-container-restart-test
integration: Add container restart test
2019-12-12 16:52:00 -08:00
darfux
5cccd008a0 integration: Add container restart test
Add an integration test case to test whether a runtime can restart a
container properly.

Signed-off-by: Li Yuxuan <liyuxuan04@baidu.com>
2019-12-12 10:23:15 +08:00
Lantao Liu
e68cc95fe4
Merge pull request #1356 from Random-Liu/revert-#1349
Fix privileged support
2019-12-11 17:14:01 -08:00
Mike Brown
0253fa42aa
Merge pull request #1358 from mikebrow/buildfix-appveyor
add removal of old go
2019-12-11 13:12:33 -08:00
Mike Brown
7fcef89b7d add removal of old go
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2019-12-11 12:45:07 -06:00
Lantao Liu
78e6d6175e Update golang to 1.13.4.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-12-10 13:19:53 -08:00
Lantao Liu
0c2d3b718d Fix privileged devices.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-12-09 17:43:06 -08:00
Lantao Liu
78708b20c7
Merge pull request #1351 from Random-Liu/better-unknown-state-handling
Better handle unknown state.
2019-12-09 10:34:57 -08:00
Lantao Liu
facbaa0e79 Better handle unknown state.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-12-06 10:56:27 -08:00
Mike Brown
69828d0bb2
Merge pull request #1349 from Zyqsempai/1316-use-with-host-devices
Use containerD WithHostDevices
2019-12-05 14:13:48 -08:00
bpopovschi
5d7bd738e4 Use containerD WithHostDevices
Signed-off-by: bpopovschi <zyqsempai@mail.ru>
2019-12-04 11:34:46 +02:00
Lantao Liu
0881caa9bd
Merge pull request #1348 from thaJeztah/bump_kubernetes_1.16.3
update kubernetes dependency to v1.16.3
2019-12-02 10:15:35 -08:00
Lantao Liu
444f02a89e
Merge pull request #1344 from darfux/add-resolvconf-to-sandbox-container
Provide resolvConf to sandbox container's mounts
2019-12-01 21:25:19 -08:00
Sebastiaan van Stijn
d63c62fb30
update kubernetes dependency to v1.16.3
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-11-28 14:44:15 +01:00
Li Yuxuan
dbc1fb37d0 Provide resolvConf to sandbox container's mounts
As https://github.com/kata-containers/runtime/issues/1603 discussed,
kata relies on such mount spec to setup resolv.conf for pod VM properly.

Signed-off-by: Li Yuxuan <liyuxuan04@baidu.com>
2019-11-28 12:05:05 +08:00
Lantao Liu
40e147cb73
Merge pull request #1347 from Random-Liu/fix-typo
Fix typo.
2019-11-26 16:36:23 -08:00
Lantao Liu
4f350ad474 Fix typo.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-26 15:09:07 -08:00
Lantao Liu
ae3c28c4d7
Merge pull request #1345 from Random-Liu/insecure-skip-verify
Add insecure_skip_verify option.
2019-11-26 14:34:55 -08:00
Lantao Liu
ab6701bd11 Add insecure_skip_verify option.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-26 13:25:52 -08:00
Lantao Liu
d4d337b425
Merge pull request #1338 from Random-Liu/add-windows-release-tar-for-test
[WCOW] Add windows release tar for test
2019-11-26 10:58:13 -08:00
Lantao Liu
0cb707e5f6 Add build script, this will be used in CI.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-25 16:45:56 -08:00
Lantao Liu
a60143be5b Add GOOS=windows make release support.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-25 16:45:56 -08:00
Lantao Liu
4cc8bafa20 Update vendors.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-25 16:45:35 -08:00
Lantao Liu
c9d45e6526
Merge pull request #1341 from estesp/update-docker-vendor
Update docker/docker vendor to upstream latest
2019-11-25 14:27:25 -08:00
Phil Estes
d6359df24f
Update docker/docker vendor to upstream latest
Also requires containerd and golang.org/x/sys vendor updates

Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
2019-11-23 17:55:11 -05:00
Lantao Liu
0dcaf6e987
Merge pull request #1337 from Random-Liu/clean-mount-path
[WCOW] Clean mount path for windows
2019-11-15 13:45:28 -08:00
Lantao Liu
5c2f33bd0d Cleanup path for windows mount
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-11-15 18:52:11 +00:00
Lantao Liu
9f79be1b88
Merge pull request #1331 from erikwilson/fix-http-localhost
Fix using `http` for localhost, 127.0.0.1 and ::1 by default
2019-11-01 00:09:53 -07:00
Erik Wilson
7cc3938717 Set default scheme in registryEndpoints for host
Signed-off-by: Erik Wilson <Erik.E.Wilson@gmail.com>
2019-10-31 10:30:17 -07:00
Mike Brown
5abebfa27a
Merge pull request #1330 from mikebrow/update-support-statement-oct29
missed the release version for HEAD in table-1
2019-10-31 11:56:04 -05:00
Mike Brown
a3d180b094 HEAD is not needed in support tables
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2019-10-30 11:22:41 -05:00
Mike Brown
73e5fa0f34
Merge pull request #1328 from Random-Liu/make-localhost-http
Use `http` for localhost and 127.0.0.1 by default.
2019-10-29 12:43:07 -05:00
Lantao Liu
41f73f79fe
Merge pull request #1329 from Random-Liu/update-support-metrics
Update support metrics.
2019-10-29 10:23:11 -07:00
Lantao Liu
bd54412b81 Update support metrics.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-10-28 19:19:28 -07:00
Lantao Liu
65b9c31805 Use http for localhost, 127.0.0.1 and ::1 by default.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-10-28 19:07:43 -07:00
Lantao Liu
aeebf37ab7
Merge pull request #1326 from Random-Liu/add-container-compute-stats
[WCOW] Add container compute stats support.
2019-10-27 23:57:28 -07:00