github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
3f5675880d
kubernetes/pkg/kubelet/kuberuntime
History
Jean Rouge 3f5675880d Kubelet changes for Windows GMSA support 
This patch comprises the kubelet changes outlined in the GMSA KEP
(https://github.com/kubernetes/enhancements/blob/master/keps/sig-windows/20181221-windows-group-managed-service-accounts-for-container-identity.md)
to add GMSA support to Windows workloads.

More precisely, it includes the logic proposed in the KEP to resolve
which GMSA spec should be applied to which containers, and changes
`dockershim` to copy the relevant GMSA credential specs to Windows
registry values prior to creating the container, passing them down
to docker itself, and finally removing the values from the registry
afterwards; both these changes need to be activated with the `WindowsGMSA`
feature gate.

Includes unit tests.

Signed-off-by: Jean Rouge <rougej+github@gmail.com>
2019-02-05 09:17:46 -08:00
..
logs Move from glog to klog 2018-11-10 07:50:31 -05:00
BUILD Kubelet changes for Windows GMSA support 2019-02-05 09:17:46 -08:00
doc.go cmd/kubelet 2016-11-23 15:53:09 -08:00
fake_kuberuntime_manager.go Merge pull request #68181 from Pingan2017/golint 2018-09-28 01:56:26 -07:00
helpers_linux_test.go Fix unit tests calling SetFeatureGateDuringTest incorrectly 2018-11-21 11:51:33 -05:00
helpers_linux.go fix #51135 make CFS quota period configurable, adds a cli flag and config option to kubelet to be able to set cpu.cfs_period and defaults to 100ms as before. 2018-09-01 20:19:59 +02:00
helpers_test.go Fix unit tests calling SetFeatureGateDuringTest incorrectly 2018-11-21 11:51:33 -05:00
helpers_unsupported.go Setup windows container config to kubelet CRI 2018-02-28 09:56:41 +08:00
helpers_windows.go Setup windows container config to kubelet CRI 2018-02-28 09:56:41 +08:00
helpers.go Move from glog to klog 2018-11-10 07:50:31 -05:00
instrumented_services_test.go fix golint failures - /pkg/kubelet/images 2018-09-17 10:52:25 +08:00
instrumented_services.go Pass PodSandboxConfig to PullImage method in CRI 2018-12-07 10:10:22 +08:00
kuberuntime_container_linux_test.go Merge pull request #72280 from verb/kubelet-no-containertype 2019-01-10 01:18:41 -08:00
kuberuntime_container_linux.go fix #51135 make CFS quota period configurable, adds a cli flag and config option to kubelet to be able to set cpu.cfs_period and defaults to 100ms as before. 2018-09-01 20:19:59 +02:00
kuberuntime_container_test.go Remove container type from kubelet runtime labels 2018-12-21 15:47:47 +01:00
kuberuntime_container_unsupported.go Setup windows container config to kubelet CRI 2018-02-28 09:56:41 +08:00
kuberuntime_container_windows_test.go Kubelet changes for Windows GMSA support 2019-02-05 09:17:46 -08:00
kuberuntime_container_windows.go Kubelet changes for Windows GMSA support 2019-02-05 09:17:46 -08:00
kuberuntime_container.go Merge pull request #70978 from Pingan2017/gracePeriod 2019-01-31 16:05:33 -08:00
kuberuntime_gc_test.go Merge pull request #58740 from YuxiJin-tobeyjin/add-ut-for-kuberuntime-gc 2018-04-19 12:27:19 -07:00
kuberuntime_gc.go Move from glog to klog 2018-11-10 07:50:31 -05:00
kuberuntime_image_test.go Pass PodSandboxConfig to PullImage method in CRI 2018-12-07 10:10:22 +08:00
kuberuntime_image.go Pass PodSandboxConfig to PullImage method in CRI 2018-12-07 10:10:22 +08:00
kuberuntime_logs.go kubelet: plumb context for log requests 2018-08-10 17:35:46 -07:00
kuberuntime_manager_test.go Merge pull request #64648 from dcbw/remove-unused-param 2019-02-01 09:03:45 -08:00
kuberuntime_manager.go Merge pull request #64648 from dcbw/remove-unused-param 2019-02-01 09:03:45 -08:00
kuberuntime_sandbox_test.go Merge pull request #73285 from tallclair/typed-runtimeclass 2019-02-04 16:13:30 -08:00
kuberuntime_sandbox.go Surface selected pod RuntimeHandler in Kubelet logs 2018-12-17 16:36:47 -08:00
labels_test.go Remove container type from kubelet runtime labels 2018-12-21 15:47:47 +01:00
labels.go Remove container type from kubelet runtime labels 2018-12-21 15:47:47 +01:00
legacy_test.go fix golint failures - /pkg/kubelet/images 2018-09-17 10:52:25 +08:00
legacy.go fix golint failures - /pkg/kubelet/images 2018-09-17 10:52:25 +08:00
security_context_test.go security_context_test.go(TestVerifyRunAsNonRoot): add more test cases. 2017-12-20 18:02:52 +01:00
security_context.go ProcMount: add api options and feature gate 2018-08-30 11:40:02 -04:00