github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5110db5087
kubernetes/pkg
History
Jan Safranek 5110db5087 Lock subPath volumes 
Users must not be allowed to step outside the volume with subPath.
Therefore the final subPath directory must be "locked" somehow
and checked if it's inside volume.

On Windows, we lock the directories. On Linux, we bind-mount the final
subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>,
it can't be changed to symlink user once it's bind-mounted.
2018-03-05 09:14:44 +01:00
..
api API Changes for RunAsGroup and Implementation and e2e 2018-02-28 22:09:56 -08:00
apis Bugfix: Fix ordering of ValidateObjectMetaUpdate method arguments for PodTemplate validation 2018-03-02 14:36:20 +11:00
auth Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
capabilities Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
client Run hack/update-all.sh 2018-02-26 17:16:14 -08:00
cloudprovider Set default vmtype to standard if not set 2018-03-01 13:48:54 +08:00
controller Merge pull request #60648 from bskiba/hpa-unready 2018-03-02 14:25:54 -08:00
credentialprovider Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
features Merge pull request #60159 from jingxu97/Feb/localephemeralBeta 2018-03-02 18:35:49 -08:00
fieldpath Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
generated generated 2018-02-27 21:21:14 -08:00
kubeapiserver Merge pull request #55856 from miaoyq/replace-for-with-sets 2018-02-28 00:00:32 -08:00
kubectl Merge pull request #60572 from charrywanganthony/show-all_descr 2018-03-01 07:42:54 -08:00
kubelet Lock subPath volumes 2018-03-05 09:14:44 +01:00
kubemark add nodeport-addresses flag for kube-proxy 2018-02-26 23:48:46 +08:00
master implement token authenticator for new id tokens 2018-02-27 17:20:46 -08:00
printers Add missing table converters for server side printing 2018-02-28 17:27:45 +01:00
probe Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
proxy Merge pull request #56880 from MrHohn/kube-proxy-ipv6-fix 2018-02-28 00:00:29 -08:00
quota Merge pull request #57375 from tianshapjq/cleanup-useless-func-core/services.go 2018-02-28 01:12:29 -08:00
registry Merge pull request #60362 from lcfang/test0224 2018-03-01 07:42:48 -08:00
routes Remove /ui/ redirect 2018-02-12 10:54:33 -05:00
scheduler Fix a grammatical error in a comment 2018-03-02 21:30:44 +08:00
security Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
securitycontext API Changes for RunAsGroup and Implementation and e2e 2018-02-28 22:09:56 -08:00
serviceaccount implement token authenticator for new id tokens 2018-02-27 17:20:46 -08:00
ssh Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
util Lock subPath volumes 2018-03-05 09:14:44 +01:00
version Require boilerplate on Bazel Skylark source files 2018-02-16 13:44:04 -08:00
volume Lock subPath volumes 2018-03-05 09:14:44 +01:00
watch/json remove outdate package 2018-01-15 23:17:19 +08:00
.import-restrictions
BUILD Remove pkg/client/unversioned 2018-02-21 13:08:11 +01:00
OWNERS