Commit Graph

1620 Commits

Author SHA1 Message Date
Lantao Liu
cda752fd59 Update cni plugins to v0.7.6.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-14 10:19:42 -07:00
Lantao Liu
92603895fd
Merge pull request #1238 from crosbymichael/cni-update
Update cni and go-cni to the v0.7.1 release
2019-08-14 10:18:29 -07:00
Michael Crosby
3995efc7c1 Update cni and go-cni to the v0.7.1 release
Closes #1236

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2019-08-14 16:19:37 +00:00
Lantao Liu
5ea371c689
Merge pull request #1235 from Random-Liu/wildcard-mirror
Add wildcard mirror support.
2019-08-13 13:04:48 -07:00
Lantao Liu
81ca274c6f Add wildcard mirror support.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-13 12:02:57 -07:00
Lantao Liu
8021850e91
Merge pull request #1233 from AkihiroSuda/allow-ca-without-client-certs
allow non-mutual TLS
2019-08-11 17:07:57 -07:00
Lantao Liu
a4b145adbb
Merge pull request #1234 from Random-Liu/update-containerd-to-fix-race
Update containerd to fix panic caused by race condition.
2019-08-11 16:51:56 -07:00
Lantao Liu
7f330dc4aa Update containerd to fix panic caused by race condition.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-10 10:40:43 -07:00
Lantao Liu
fd6c732cd7
Merge pull request #1232 from Random-Liu/avoid-schema1-roundtrip
Remove extra roundtrip for checking schema1.
2019-08-10 10:25:46 -07:00
Lantao Liu
f1fbdbfab7
Merge pull request #1231 from Random-Liu/consider-endpoint-path-for-default
Consider endpoint path when checking default host.
2019-08-10 10:23:49 -07:00
Akihiro Suda
28e492fce0 allow non-mutual TLS
Previously, client keypair had needed to be specified even when unused.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-08-10 21:48:03 +09:00
Lantao Liu
d64fa3b6b8 Remove extra roundtrip for checking schema1.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-09 18:47:40 -07:00
Lantao Liu
005f9f7378 Consider endpoint path when checking default host.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-09 18:22:08 -07:00
Lantao Liu
a7481289bb
Merge pull request #1227 from Random-Liu/new-registry-mirror
New registry mirror
2019-08-09 16:24:38 -07:00
Lantao Liu
2fd69f0b78 Move config validation into pkg/config and add unit test.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-09 14:39:30 -07:00
Lantao Liu
53e94c6753 Use containerd registry mirror library.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-09 14:39:30 -07:00
Lantao Liu
27de1a5862 Update containerd to 5222236c1b.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-09 10:41:46 -07:00
Akihiro Suda
29d5eb69bc
Merge pull request #1228 from Random-Liu/improve-vendor
Improve vendor.conf
2019-08-09 15:08:27 +09:00
Lantao Liu
f994f43aec Update vendors.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-08 10:39:50 -07:00
Lantao Liu
7d56fdcc83 Split dependencies and update sort-vendor correspondingly
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-08 10:39:50 -07:00
Lantao Liu
aaf15b6777
Merge pull request #1225 from awprice/privileged_without_host_devices_flag
Add flag to overload default privileged host device behaviour
2019-08-08 00:13:02 -07:00
Alex Price
3353ab76d9 Add flag to overload default privileged host device behaviour
This commit adds a flag to the runtime config that allows overloading of the default
privileged behaviour. When the flag is enabled on a runtime, host devices won't
be appended to the runtime spec if the container is run as privileged.

By default the flag is false to maintain the current behaviour of privileged.

Fixes #1213

Signed-off-by: Alex Price <aprice@atlassian.com>
2019-08-08 12:16:42 +10:00
Lantao Liu
95bd02d28f
Merge pull request #1200 from jterry75/image_user
Assign ImageSpec User if SecurityContext is not set
2019-08-07 13:50:08 -07:00
Lantao Liu
8ea0cc90aa
Merge pull request #1221 from jterry75/log_g
Switch to containerd/log package
2019-08-07 13:49:33 -07:00
Justin Terry (VM)
bc2cff625b Assign ImageSpec User if SecurityContext is not set
By default the SecurityContext for Container activation can contain a Username
UID, GID. The order of precedences is username, UID, GID. If none of these
options are specified as a last resort attempt to set the ImageSpec username.

Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
2019-08-07 12:20:52 -07:00
Justin Terry (VM)
193918b702 Switch to containerd/log package
Moves to the containerd/log package over logrus directly. This benefits the
traces because if using any log context such as OpenCensus on the entry gRPC
API all traces for that gRPC method will now contain the appropriate TraceID,
SpanID for easy correlation.

Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
2019-08-07 12:18:18 -07:00
Mike Brown
29104d94d6
Merge pull request #1223 from Random-Liu/update-support-metrics
Update support metrics to reflect 1.11 EOL.
2019-08-07 08:13:55 -05:00
Mike Brown
5fd4ab7ef9
Merge pull request #1226 from Random-Liu/use-golangci-lint
Use golangci-lint
2019-08-07 08:12:37 -05:00
Lantao Liu
9bf53555a0 Use golangci-lint.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-07 01:20:52 -07:00
Lantao Liu
c7b48c09d7
Merge pull request #1224 from Random-Liu/infer-systemd-cgroup
Infer systemd cgroup
2019-08-06 13:33:40 -07:00
Lantao Liu
eae5fc360f Infer systemd cgroup based on path suffix.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-06 11:00:51 -07:00
Lantao Liu
30fb9ea9b2 Update support metrics to reflect 1.11 EOL.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 18:17:30 -07:00
Lantao Liu
f9760af8d4
Merge pull request #1220 from Random-Liu/remove-no-pivot-deprecation
Do not deprecate no_pivot yet.
2019-08-05 18:15:51 -07:00
Lantao Liu
871a8b89c8 Do not deprecate no_pivot yet.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-05 15:12:50 -07:00
Lantao Liu
b213648c5b
Merge pull request #1219 from Random-Liu/rename-test-containerd-bin
Rename the test binary to containerd-test.
2019-08-05 10:11:07 -07:00
Lantao Liu
7665f4ac22 Rename the test binary to containerd-test.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-02 15:43:06 -07:00
Lantao Liu
a99766612f
Merge pull request #1218 from Random-Liu/more-proc-mount-test
Add test for disable_proc_mount.
2019-08-02 14:02:56 -07:00
Lantao Liu
986d04aec1 Add test for disable_proc_mount.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-02 11:22:34 -07:00
Lantao Liu
fb5210e2aa
Merge pull request #1217 from Random-Liu/print-deprecated-notice
Print warning message for deprecated options.
2019-08-02 10:04:32 -07:00
Lantao Liu
b74653b821 Print warning message for deprecated options.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-02 01:10:11 -07:00
Lantao Liu
f636fb0519
Merge pull request #1215 from Random-Liu/update-kubernetes
Update kubernetes
2019-08-01 10:28:25 -07:00
Lantao Liu
8a5b6b8dff Update cri-tools to v1.15.0
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-07-31 23:52:03 -07:00
Lantao Liu
ba8788c6b9 Update kubernetes dependency to 1.15.0.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-07-31 23:52:03 -07:00
Lantao Liu
fe5eb76cb4
Merge pull request #1209 from Random-Liu/fix-proc-mount-support
Fix proc mount support.
2019-07-31 23:23:04 -07:00
Lantao Liu
467f9e0e8a Fix proc mount support.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-07-31 17:11:15 -07:00
Mike Brown
b23e2cf9d1
Merge pull request #1212 from mrIncompetent/return-annotations-bandwith-error
Return actual error when fetching the bandwidth info from annotation fails
2019-07-29 13:39:51 -05:00
Lantao Liu
f0a677e76f
Merge pull request #1211 from Random-Liu/add-max-concurrency-support
Add max concurrent downloads support.
2019-07-28 23:52:24 -07:00
Henrik Schmidt
9aec38164d Return actual error when fetching the bandwidth info from annotation fails
Signed-off-by: mrIncompetent <henrik@henrik-schmidt.de>
2019-07-28 09:47:31 +02:00
Lantao Liu
c78caf902d Add max concurrent downloads support.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-07-26 18:15:17 -07:00
Lantao Liu
994cea830b
Merge pull request #1207 from Random-Liu/move-cancel
Move context cancel into defer.
2019-07-26 14:04:33 -07:00