k8s-merge-robot 7ee4189cf6 Merge pull request #27036 from sttts/sttts-secure-seccomp-path ...

Automatic merge from submit-queue

Filter seccomp profile path from malicious .. and /

Without this patch with `localhost/<some-releative-path>` as seccomp profile one can load any file on the host, e.g. `localhost/../../../../dev/mem` which is not healthy for the kubelet.

/cc @jfrazelle 

Unit tests depend on https://github.com/kubernetes/kubernetes/pull/26710.

2016-06-18 15:58:07 -07:00

..

admission

make admission plugins configurable based on external criteria

2016-05-26 09:12:17 -04:00

api

Merge pull request #27036 from sttts/sttts-secure-seccomp-path

2016-06-18 15:58:07 -07:00

apimachinery

Moving StorageFactory building logic to genericapiserver

2016-05-10 00:57:11 -07:00

apis

Merge pull request #26924 from olegshaldybin/pluralize-subject

2016-06-18 14:18:04 -07:00

apiserver

Merge pull request #25731 from Pensu/master

2016-06-06 12:06:32 -07:00

auth

Add an 'authenticated user' metric to the RequestAuthenticator.

2016-05-19 16:04:11 -07:00

capabilities

…

client

Merge pull request #26113 from aaronlevy/log-elect

2016-06-17 14:03:22 -07:00

cloudprovider

Merge pull request #25929 from jingxu97/bug-notag

2016-06-17 23:56:17 -07:00

controller

Merge pull request #27415 from caesarxuchao/fix-oldrc

2016-06-16 17:09:53 -07:00

conversion

Remove unused deep_copies

2016-06-06 17:18:22 -04:00

credentialprovider

Add ap-northeast-2

2016-05-10 12:03:41 -04:00

dns

Fix srv record lookup

2016-06-03 20:41:08 -07:00

fieldpath

Merge pull request #27441 from derekwaynecarr/downward_api_node_defaults

2016-06-18 12:12:24 -07:00

fields

move parse or die logic to selector.go

2015-12-17 19:59:46 +08:00

genericapiserver

Merge pull request #23473 from AdoHe/kubelet_tls_overwrite

2016-06-17 23:20:03 -07:00

healthz

…

httplog

httplog is not a CloseNotifier

2015-12-20 21:59:59 -05:00

hyperkube

…

kubectl

Merge pull request #26557 from AdoHe/patch_retry

2016-06-13 10:13:27 -07:00

kubelet

Merge pull request #27036 from sttts/sttts-secure-seccomp-path

2016-06-18 15:58:07 -07:00

kubemark

Added pods-per-core to kubelet. #25762

2016-05-27 07:10:13 -04:00

labels

Remove unused deep_copies

2016-06-06 17:18:22 -04:00

master

Extract interface for master endpoints reconciler.

2016-06-06 17:56:23 -04:00

metrics

Remove known metrics list

2016-06-13 10:37:21 +02:00

probe

followup to add http server close method

2016-05-05 12:04:41 +08:00

proxy

add hostport support for kubenet

2016-05-22 22:18:58 -07:00

quota

Merge pull request #26988 from vishh/quota-owners

2016-06-13 17:32:24 -07:00

registry

Merge pull request #26388 from caseydavenport/cd-networkpolicy-uts

2016-06-18 00:30:00 -07:00

runtime

Remove unused deep_copies

2016-06-06 17:18:22 -04:00

security

Adding volume plugin to api/v1 and updating auto-generated files

2016-05-21 12:53:03 -07:00

securitycontext

Merge pull request #24909 from pmorie/security-context-loc

2016-05-27 10:27:55 -07:00

serviceaccount

Make name validators return string slices

2016-05-18 00:48:01 -07:00

ssh

Merge pull request #24506 from timstclair/ssh

2016-04-19 22:36:44 -07:00

storage

Fix traces

2016-06-06 10:49:46 +02:00

types

Create Unix UID/GID types

2016-02-24 11:22:02 -05:00

ui

Remove url query param that is leading to XSS issue

2016-03-22 10:35:06 -07:00

util

Merge pull request #23473 from AdoHe/kubelet_tls_overwrite

2016-06-17 23:20:03 -07:00

version

Include Go version, platform, and other build info in version string

2016-03-14 13:55:28 -07:00

volume

Merge pull request #26781 from aveshagarwal/master-dapi-volume-annotations-labels-issue

2016-06-18 09:19:21 -07:00

watch

Merge pull request #24789 from wojtek-t/use_proper_codec_in_client

2016-05-04 11:00:04 -07:00

OWNERS

Move blunderbuss assignees into tree

2016-03-02 20:46:32 -05:00