5 Commits

Author	SHA1	Message	Date
Lee Verberne	f6084f7eab	Remove container type from kubelet runtime labels ... We've changed the Ephemeral Containers API, and container type will no longer be required. Since this is the only feature using it, remove it. This reverts commit ba6f31a6c6.	2018-12-21 15:47:47 +01:00
Pingan2017	158552ff35	fix golint failures - /pkg/kubelet/images	2018-09-17 10:52:25 +08:00
Lantao Liu	3193a4a469	Fix RunAsGroup.	2018-07-06 15:42:26 -07:00
Jan Safranek	5110db5087	Lock subPath volumes ... Users must not be allowed to step outside the volume with subPath. Therefore the final subPath directory must be "locked" somehow and checked if it's inside volume. On Windows, we lock the directories. On Linux, we bind-mount the final subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>, it can't be changed to symlink user once it's bind-mounted.	2018-03-05 09:14:44 +01:00
Pengfei Ni	b0a49e1970	Update unit tests and bazel files	2018-02-28 09:56:46 +08:00