github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1f8c21166e
kubernetes/pkg
History
Sascha Grunert 1f8c21166e
Remove AppArmor loaded profile validation 
In general it could be possible that init containers deploy security
profiles. The existing AppArmor pre-validation would block the complete
workload without this patch being applied. If we now schedule a
workload which contains an unconfined init container, then we will skip
the validation. The underlying container runtime will fail if the
profile is not available after the execution of the init container.

This synchronizes the overall behavior with seccomp.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-03-12 10:19:44 +01:00
..
api Generated changes for probe terminationGracePeriodSeconds 2021-03-11 16:40:40 -08:00
apis Merge pull request #99375 from ehashman/probe-kep-2238 2021-03-11 23:10:18 -08:00
auth hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
capabilities hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
client hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
cloudprovider hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
cluster/ports hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
controller Updating EndpointSlice controllers to avoid duplicate creations 2021-03-10 13:13:13 -08:00
controlplane Promote PDBs to GA 2021-03-09 10:29:11 -05:00
credentialprovider Add RegistryConfig/RegistryConfigEntry. 2021-03-02 00:08:54 +00:00
features Merge pull request #99375 from ehashman/probe-kep-2238 2021-03-11 23:10:18 -08:00
fieldpath hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
generated Add extract apply function generation 2021-03-10 06:13:51 -08:00
kubeapiserver CSIStorageCapacity: promote API to beta 2021-03-08 20:52:50 +01:00
kubectl hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
kubelet Merge pull request #99996 from learner0810/master 2021-03-12 00:12:18 -08:00
kubemark hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
printers Add namespace scoped ParametersReference to IngressClass 2021-03-07 00:45:32 +05:30
probe Clean up OWNERS for pkg/probe 2021-03-02 16:38:32 -08:00
proxy Merge pull request #99958 from sbangari/winkubeproxylbservicefix 2021-03-10 00:35:35 -08:00
quota/v1 Count pod overhead as an entity's resource usage 2021-03-06 07:58:56 +09:00
registry Merge pull request #99298 from zshihang/csi 2021-03-11 17:28:25 -08:00
routes hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
scheduler Merge pull request #100034 from AliceZhang2016/nodeaffinity-cleanup-only-scheduler 2021-03-09 17:39:56 -08:00
security Remove AppArmor loaded profile validation 2021-03-12 10:19:44 +01:00
securitycontext hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
serviceaccount add context to serviceaccount authenticator metrics 2021-03-08 14:16:48 -08:00
ssh hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
util Merge pull request #97818 from damemi/remove-util-node-dep 2021-03-05 04:06:32 -08:00
volume Merge pull request #99221 from jsturtevant/windows-host-stats-provider 2021-03-10 11:09:23 -08:00
windows/service hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
.import-restrictions cmd/api/testing no longer overrides pkg's rules 2020-04-28 08:46:49 -07:00
OWNERS Sign up dims for additional review roles 2020-08-08 19:08:38 -04:00