github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
116,447 Commits 1 Branch 31 Tags
b4dfae25dee40dd9233f90079a1eb51a902b7612
Commit Graph

40 Commits

Author SHA1 Message Date
TommyStarK
73d9a9cfa0 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig' 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2023-04-25 17:29:25 +02:00
Kubernetes Prow Robot
f734741cb8 Merge pull request #114373 from TommyStarK/unit-tests/kubelet-kuberuntime 
kubelet/kuberuntime: Improving test coverage
 2023-03-10 04:34:58 -08:00
TommyStarK
7f21a9ce01 kubelet/kuberuntime: Improving test coverage 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2023-03-10 11:06:54 +01:00
Kubernetes Prow Robot
0018c07050 Merge pull request #115898 from saschagrunert/seccomp-todo 
Default to sandbox `Seccomp` field instead of `SeccompProfilePath`
 2023-03-09 22:43:05 -08:00
Sascha Grunert
58923c9f1a Default to sandbox Seccomp field instead of SeccompProfilePath 
The seccomp field is the new default since a couple of releases, means
we can stop using `SeccompProfilePath`.

Follow-up on https://github.com/kubernetes/kubernetes/pull/96281

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-02-20 12:16:32 +01:00
TommyStarK
1fcc8fbf59 kubelet: Replace deprecated pointer function 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2023-01-08 13:44:09 +01:00
Kubernetes Prow Robot
2ef00038d3 Merge pull request #112961 from marosset/windows-hostnetwork-alpha 
Windows hostnetwork alpha
 2022-11-07 12:42:16 -08:00
David Ashpole
64af1adace Second attempt: Plumb context to Kubelet CRI calls (#113591) 
* plumb context from CRI calls through kubelet

* clean up extra timeouts

* try fixing incorrectly cancelled context
 2022-11-05 06:02:13 -07:00
Mark Rossetti
f4305db4ee populate namespace options in runtimeapi.WindowsSandboxSecurityContext + unit tests 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-11-04 09:29:39 -07:00
Antonio Ojea
9c2b333925 Revert "plumb context from CRI calls through kubelet" 
This reverts commit f43b4f1b95.
 2022-11-02 13:37:23 +00:00
Kubernetes Prow Robot
9bbd0fbdb2 Merge pull request #113476 from marosset/hpc-to-stable 
Promoting WindowsHostProcessContainers to stable
 2022-11-01 19:59:43 -07:00
Mark Rossetti
498d065cc5 Promoting WindowsHostProcessContainers to stable 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-11-01 14:06:25 -07:00
David Ashpole
f43b4f1b95 plumb context from CRI calls through kubelet 2022-10-28 02:55:28 +00:00
Sascha Grunert
584783ee9f Partly remove support for seccomp annotations 
We now partly drop the support for seccomp annotations which is planned
for v1.25 as part of the KEP:

https://github.com/kubernetes/enhancements/issues/135

Pod security policies are not touched by this change and therefore we
have to keep the annotation key constants.

This means we only allow the usage of the annotations for backwards
compatibility reasons while the synchronization of the field to
annotation is no longer supported. Using the annotations for static pods
is also not supported any more.

Making the annotations fully non-functional will be deferred to a
future release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2022-08-01 09:19:29 +02:00
Mark Rossetti
0c6088861b Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by 
where pod sandbox won't have HostProcess bit set if pod does not have a
security context but containers specify HostProcess.

Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-06-02 12:10:10 -07:00
Sascha Grunert
de37b9d293 Make CRI v1 the default and allow a fallback to v1alpha2 
This patch makes the CRI `v1` API the new project-wide default version.
To allow backwards compatibility, a fallback to `v1alpha2` has been added
as well. This fallback can either used by automatically determined by
the kubelet.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-11-17 11:05:05 -08:00
marosset
fd94032b21 Kubelet updates for Windows HostProcess Containers 2021-05-19 16:24:14 -07:00
Sergey Kanzhelev
4c9e96c238 Revert "Merge pull request #92817 from kmala/kubelet" 
This reverts commit 88512be213, reversing
changes made to c3b888f647.
 2021-01-12 22:27:22 +00:00
Sergey Kanzhelev
06da0e5e74 GA of RuntimeClass feature gate and API 2020-11-11 19:22:32 +00:00
Keerthan Reddy,Mala
90cc954eed add sandbox deletor to delete sandboxes on pod delete event 2020-07-22 11:54:58 -07:00
Paulo Gomes
b451563560 Add seccomp least privilege for kuberuntime 2020-07-08 22:03:29 +01:00
Paulo Gomes
8976e3620f Add seccomp enforcement and validation based on new GA fields 
Adds seccomp validation.

This ensures that field and annotation values must match when present.

Co-authored-by: Sascha Grunert <sgrunert@suse.com>
 2020-07-06 09:13:25 +01:00
Andrew Kim
c919139245 update import of generic featuregate code from k8s.io/apiserver/pkg/util/feature -> k8s.io/component-base/featuregate 2019-05-08 10:01:50 -04:00
Davanum Srinivas
33081c1f07 New staging repository for cri-api 
Change-Id: I2160b0b0ec4b9870a2d4452b428e395bbe12afbb
 2019-03-26 18:21:04 -04:00
Lantao Liu
f14c6c95d6 New pod log directory /var/log/pods/NAMESPACE_NAME_UID. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2019-03-08 16:42:14 -08:00
Kubernetes Prow Robot
6a149864fb Merge pull request #73285 from tallclair/typed-runtimeclass 
Migrate RuntimeClass support to the generated typed client
 2019-02-04 16:13:30 -08:00
Seth Jennings
6b51d48c4f TestCreatePodSandbox_RuntimeClass should not expect RunPodSandbox when runtime class is not found 2019-01-31 12:55:56 -06:00
Tim Allclair
aab3523e0e Migrate RuntimeClass support to the generated typed client 2019-01-24 11:08:30 -08:00
Tim Allclair
63f3bc1b7e Implement RuntimeClass support for the Kubelet & CRI 2018-09-04 13:45:11 -07:00
Lee Verberne
e10042d22f Increment CRI version from v1alpha1 to v1alpha2 
This also incorporates the version string into the package name so
that incompatibile versions will fail to connect.

Arbitrary choices:
- The proto3 package name is runtime.v1alpha2. The proto compiler
  normally translates this to a go package of "runtime_v1alpha2", but
  I renamed it to "v1alpha2" for consistency with existing packages.
- kubelet/apis/cri is used as "internalapi". I left it alone and put the
  public "runtimeapi" in kubelet/apis/cri/runtime.
 2018-02-07 09:06:26 +01:00
Chao Xu
60604f8818 run hack/update-all 2017-06-22 11:31:03 -07:00
Chao Xu
f4989a45a5 run root-rewrite-v1-..., compile 2017-06-22 10:25:57 -07:00
Pengfei Ni
22e99504d7 Update CRI references 2017-06-09 10:16:40 +08:00
Michael Taufen
cbad320205 Reorganize kubelet tree so apis can be independently versioned 2017-05-12 10:02:33 -07:00
Lee Verberne
f83337a8ac Fix AssertCalls usage for kubelet fake runtimes 
Despite its name, AssertCalls() does not assert anything. It returns an
error that must be checked. This was causing false negatives for
a handful of unit tests.
 2017-05-10 01:40:58 +00:00
Pengfei Ni
53c20e3630 kubelet/kuberuntime: update cri to protobuf v3 2017-01-20 09:55:56 +08:00
Clayton Coleman
9a2a50cda7 refactor: use metav1.ObjectMeta in other types 2017-01-17 16:17:19 -05:00
Pengfei Ni
f584ed4398 Fix package aliases to follow golang convention 2016-11-30 15:40:50 +08:00
Chao Xu
5e1adf91df cmd/kubelet 2016-11-23 15:53:09 -08:00
Random-Liu
121a91eb12 Symlink docker logs to CRI defined log path. 2016-10-23 19:08:47 -07:00