Davanum Srinivas 02489f8988 Avoid setting Masked/ReadOnly paths when pod is privileged ...

In the recent PR on adding ProcMount, we introduced a regression when
pods are privileged. This shows up in 18.06 docker with kubeadm in the
kube-proxy container.

The kube-proxy container is privilged, but we end up setting the
`/proc/sys` to Read-Only which causes failures when running kube-proxy
as a pod. This shows up as a failure when using sysctl to set various
network things.

Change-Id: Ic61c4c9c961843a4e064e783fab0b54350762a8d

2018-09-18 17:46:16 -04:00

..

cm

Run hack/update-bazel.sh

2018-06-22 16:22:57 -07:00

libdocker

ProcMount: add dockershim support

2018-08-30 11:40:06 -04:00

metrics

update BUILD files

2017-10-15 18:18:13 -07:00

network

autogenerated

2018-08-29 20:21:17 +03:00

remote

Fix standalone dockershim.

2018-06-05 21:52:08 +00:00

BUILD

autogenerated

2018-08-29 20:21:17 +03:00

convert_test.go

Increment CRI version from v1alpha1 to v1alpha2

2018-02-07 09:06:26 +01:00

convert.go

Node-level Checkpointing manager

2018-04-16 00:19:42 -04:00

doc.go

Increment CRI version from v1alpha1 to v1alpha2

2018-02-07 09:06:26 +01:00

docker_checkpoint_test.go

Node-level Checkpointing manager

2018-04-16 00:19:42 -04:00

docker_checkpoint.go

K8s SCTP support implementation for the first pull request

2018-08-27 05:56:27 +00:00

docker_container_test.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_container.go

Fix dockershim CreateContainer error handling.

2018-03-31 00:39:20 +00:00

docker_image_linux.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_image_test.go

Increment CRI version from v1alpha1 to v1alpha2

2018-02-07 09:06:26 +01:00

docker_image_unsupported.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_image_windows.go

Kubelet: do not report used inodes on Windows

2018-09-03 16:42:33 +08:00

docker_image.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_legacy_service.go

kubelet: plumb context for log requests

2018-08-10 17:35:46 -07:00

docker_logs.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_sandbox_test.go

dockershim/sandbox: clean up pod network even if SetUpPod() failed

2018-04-24 11:17:49 -05:00

docker_sandbox.go

Implement RuntimeClass support for the Kubelet & CRI

2018-09-04 13:45:11 -07:00

docker_service_test.go

Make 'pod' package to use unified checkpointManager

2018-04-16 01:30:20 -04:00

docker_service.go

Update api violations, golint failures and gofmt

2018-08-29 20:21:09 +03:00

docker_stats_linux.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_stats_unsupported.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

docker_stats_windows.go

Add fs status for Windows containers

2018-05-17 14:22:21 +08:00

docker_streaming.go

Replace "golang.org/x/net/context" with "context"

2018-03-22 20:57:14 +08:00

exec.go

kubelet: remove the --docker-exec-handler flag

2017-09-22 12:13:31 -07:00

helpers_linux_test.go

Change docker/default to runtime/default

2018-04-19 10:39:53 -07:00

helpers_linux.go

Remove kubelet-level docker shared pid flag

2018-07-22 16:54:44 +02:00

helpers_test.go

Merge pull request #59317 from CaoShuFeng/assert_Equal

2018-04-17 16:31:17 -07:00

helpers_unsupported.go

Revert "Fix Windows CNI for the sandbox case"

2018-06-07 09:56:13 +08:00

helpers_windows.go

Add clarification for Windows DNS setup flow

2018-06-07 16:26:13 +08:00

helpers.go

K8s SCTP support implementation for the first pull request

2018-08-27 05:56:27 +00:00

naming_test.go

Increment CRI version from v1alpha1 to v1alpha2

2018-02-07 09:06:26 +01:00

naming.go

Increment CRI version from v1alpha1 to v1alpha2

2018-02-07 09:06:26 +01:00

security_context_test.go

Avoid setting Masked/ReadOnly paths when pod is privileged

2018-09-18 17:46:16 -04:00

security_context.go

Avoid setting Masked/ReadOnly paths when pod is privileged

2018-09-18 17:46:16 -04:00

selinux_util_test.go

…

selinux_util.go

Remove unused code

2018-04-30 14:57:26 -04:00