4 Commits

Author	SHA1	Message	Date
Jan Safranek	5110db5087	Lock subPath volumes ... Users must not be allowed to step outside the volume with subPath. Therefore the final subPath directory must be "locked" somehow and checked if it's inside volume. On Windows, we lock the directories. On Linux, we bind-mount the final subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>, it can't be changed to symlink user once it's bind-mounted.	2018-03-05 09:14:44 +01:00
Pengfei Ni	28f67736b7	Add fake remote runtime service	2017-10-27 15:16:53 +08:00
Ed Schouten	d2851da325	Make socket address parsing work on FreeBSD. ... On FreeBSD, it is perfectly reasonable to make use of util_linux.go. Rename util_linux.go to util_unix.go so that it may be used on non-Linux UNIX-like systems. Add proper 'freebsd' build tags.	2017-08-09 21:22:26 +02:00
Dong Liu	fb26c9100a	Support TCP type runtime endpoint for kubelet.	2017-05-25 09:16:11 +08:00