Davanum Srinivas
33081c1f07
New staging repository for cri-api
...
Change-Id: I2160b0b0ec4b9870a2d4452b428e395bbe12afbb
2019-03-26 18:21:04 -04:00
Jess Frazelle
30dcca6233
ProcMount: add api options and feature gate
...
Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
2018-08-30 11:40:02 -04:00
Lantao Liu
3193a4a469
Fix RunAsGroup.
2018-07-06 15:42:26 -07:00
Lee Verberne
e10042d22f
Increment CRI version from v1alpha1 to v1alpha2
...
This also incorporates the version string into the package name so
that incompatibile versions will fail to connect.
Arbitrary choices:
- The proto3 package name is runtime.v1alpha2. The proto compiler
normally translates this to a go package of "runtime_v1alpha2", but
I renamed it to "v1alpha2" for consistency with existing packages.
- kubelet/apis/cri is used as "internalapi". I left it alone and put the
public "runtimeapi" in kubelet/apis/cri/runtime.
2018-02-07 09:06:26 +01:00
Lee Verberne
0f1de41790
Update kubelet for enumerated CRI namespaces
...
This adds support to both the Generic Runtime Manager and the
dockershim for the CRI's enumerated namespaces.
2018-02-07 09:06:26 +01:00
Slava Semushin
445393fdce
kubelet: MustRunAsNonRoot should reject a pod if it has non-numeric USER.
2017-11-29 16:00:00 +01:00
Pengfei Ni
f3150c9c8c
Support seccomp profile from container's security context
2017-08-13 15:42:15 +08:00
Jess Frazelle
0f349cc61f
allowPrivilegeEscalation: modify api types & add functionality
...
Signed-off-by: Jess Frazelle <acidburn@google.com>
2017-07-24 12:52:41 -04:00
Chao Xu
f4989a45a5
run root-rewrite-v1-..., compile
2017-06-22 10:25:57 -07:00
Pengfei Ni
22e99504d7
Update CRI references
2017-06-09 10:16:40 +08:00
Yu-Ju Hong
07a67c252c
kuberuntime: check the value of RunAsNonRoot when verifying
...
The verification function is fixed to check the value of RunAsNonRoot,
not just the existence of it. Also adds unit tests to verify the correct
behavior.
2017-06-05 18:03:32 -07:00
Michael Taufen
cbad320205
Reorganize kubelet tree so apis can be independently versioned
2017-05-12 10:02:33 -07:00
Jamie Hannaford
9440a68744
Use dedicated Unix User and Group ID types
2017-05-05 14:07:38 +02:00
Pengfei Ni
ac76766a92
CRI: move apparmor annotations to container security context
2017-05-01 20:55:16 +08:00
Pengfei Ni
5812c876f7
kuberuntime: set namespsace options regardless of security context
2017-04-05 22:29:46 +08:00
Pengfei Ni
53c20e3630
kubelet/kuberuntime: update cri to protobuf v3
2017-01-20 09:55:56 +08:00
Chao Xu
bcc783c594
run hack/update-all.sh
2016-11-23 15:53:09 -08:00
Chao Xu
5e1adf91df
cmd/kubelet
2016-11-23 15:53:09 -08:00
Random-Liu
2ce5deb6fd
Add separate username field in CRI and use it.
2016-11-15 16:50:02 -08:00
Random-Liu
99ee3f4b76
Add non-numeric user name support.
2016-11-08 16:07:29 -08:00
Pengfei Ni
3df60eb163
Implement security context in kuberuntime
2016-11-07 11:07:56 +08:00
