Kubernetes Submit Queue 2ca21edd00 Merge pull request #56503 from php-coder/fail_non_root_verification ...

Automatic merge from submit-queue (batch tested with PRs 56589, 56503). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

MustRunAsNonRoot should reject a pod if it has non-numeric USER

**What this PR does / why we need it**:
This PR modifies kubelet behavior to reject pods with non-numeric USER instead of showing a warning.

**Special notes for your reviewer**:
Related discussion: https://github.com/kubernetes/community/pull/756#discussion_r143694443

**Release note**:
```release-note
kubelet: fix bug where `runAsUser: MustRunAsNonRoot` strategy didn't reject a pod with a non-numeric `USER`.
```

PTAL @pweil- @tallclair @liggitt @Random-Liu
CC @simo5 @adelton

2017-11-30 12:07:48 -08:00

..

apis

Merge pull request #52144 from andyxning/fix_network_value_for_stats_summary

2017-11-28 14:59:08 -08:00

cadvisor

fix cadvisor.New signature for cross build

2017-11-18 15:23:17 -08:00

certificate

use versiond group clients from client-go

2017-11-07 14:47:22 +08:00

checkpoint

Update generated and dep addition of safefile

2017-11-20 22:24:23 -06:00

client

update BUILD files

2017-10-15 18:18:13 -07:00

cm

Add pod-level metric for CPU and memory stats

2017-11-22 09:25:23 -08:00

config

Merge pull request #51494 from mtanino/pr/BlockVolumesSupport-volumemanager

2017-11-21 19:43:27 -08:00

configmap

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

container

BlockVolumesSupport: CRI, VolumeManager and OperationExecutor changes

2017-11-20 14:10:26 -05:00

custommetrics

update BUILD files

2017-10-15 18:18:13 -07:00

dockershim

mock container networking and fix filtering bug

2017-11-28 15:32:18 -08:00

envvars

Update generated files

2017-11-09 12:14:08 +01:00

events

Implement file system resizing support on kubelet start

2017-11-22 16:06:10 -05:00

eviction

take disk requests into account during evictions

2017-11-21 10:21:30 -08:00

gpu

Move regexp.MustCompile to global variable

2017-11-16 22:03:12 +02:00

images

update BUILD files

2017-10-15 18:18:13 -07:00

kubeletconfig

Kubelet: Relative paths in local config file

2017-11-15 09:32:53 -08:00

kuberuntime

kubelet: MustRunAsNonRoot should reject a pod if it has non-numeric USER.

2017-11-29 16:00:00 +01:00

leaky

update BUILD files

2017-10-15 18:18:13 -07:00

lifecycle

add admission handler for device resources allocation

2017-11-02 09:17:48 +08:00

metrics

Adds device plugin registration count metric and allocation latency metric.

2017-11-21 13:44:10 -08:00

mountpod

Add mount containers to kubelet

2017-11-10 13:14:40 +01:00

network

Support Custom Pod DNS in kubelet, gated by feature gate

2017-11-20 16:18:10 -08:00

pleg

Fix typo in function name.

2017-10-17 11:31:46 +02:00

pod

Update generated and dep addition of safefile

2017-11-20 22:24:23 -06:00

preemption

Update generated files

2017-11-09 12:14:08 +01:00

prober

update BUILD files

2017-10-15 18:18:13 -07:00

qos

Update generated files

2017-11-09 12:14:08 +01:00

remote

Add fake remote runtime service

2017-10-27 15:16:53 +08:00

rkt

Consolidate DNS codes in kubelet pkg

2017-11-16 21:07:24 -08:00

rktshim

update BUILD files

2017-10-15 18:18:13 -07:00

secret

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

server

Add Pod-level local ephemeral storage metric in Summary API

2017-11-20 16:32:38 -08:00

stats

Merge pull request #52144 from andyxning/fix_network_value_for_stats_summary

2017-11-28 14:59:08 -08:00

status

Update generated files

2017-11-09 12:14:08 +01:00

sysctl

Update generated files

2017-11-09 12:14:08 +01:00

types

Addition of bootstrap checkpointing

2017-11-20 21:54:15 -06:00

util

Close the file before renaming in FileStore

2017-11-03 10:24:49 -07:00

volumemanager

PVC Being Deleted Checks in kubelet

2017-11-23 11:41:30 +01:00

winstats

Use GetVersion() API instead of ver command

2017-11-21 03:05:24 +00:00

active_deadline_test.go

…

active_deadline.go

…

BUILD

Create a separate conversion function for the field labels used by downward API

2017-11-22 11:02:20 -08:00

doc.go

…

kubelet_getters_test.go

…

kubelet_getters.go

BlockVolumesSupport: CRI, VolumeManager and OperationExecutor changes

2017-11-20 14:10:26 -05:00

kubelet_network_test.go

Move DNS related kubelet codes into its own package

2017-11-15 10:56:44 -08:00

kubelet_network.go

Consolidate DNS codes in kubelet pkg

2017-11-16 21:07:24 -08:00

kubelet_node_status_test.go

Adds Support for Node Resource IPv6 Addressing

2017-11-10 15:13:53 -08:00

kubelet_node_status.go

Extends deviceplugin to gracefully handle full device plugin lifecycle.

2017-11-20 23:40:14 -08:00

kubelet_pods_test.go

BlockVolumesSupport: CRI, VolumeManager and OperationExecutor changes

2017-11-20 14:10:26 -05:00

kubelet_pods_windows_test.go

…

kubelet_pods.go

Merge pull request #55902 from yguo0905/annotations

2017-11-22 18:54:29 -08:00

kubelet_resources_test.go

…

kubelet_resources.go

apimachinery: remove Scheme.DeepCopy

2017-10-06 14:59:17 +02:00

kubelet_test.go

Rearrange kubelet networking codes

2017-11-09 13:43:30 -08:00

kubelet_volumes_test.go

BlockVolumesSupport: CRI, VolumeManager and OperationExecutor changes

2017-11-20 14:10:26 -05:00

kubelet_volumes.go

use GetFileType per mount.Interface to check hostpath type

2017-09-26 09:57:06 +08:00

kubelet.go

Merge pull request #50984 from timothysc/checkpoint

2017-11-21 17:57:40 -08:00

oom_watcher_test.go

…

oom_watcher.go

…

OWNERS

…

pod_container_deletor_test.go

…

pod_container_deletor.go

…

pod_workers_test.go

…

pod_workers.go

kubelet syncPod throws specific events

2017-10-13 10:24:09 -04:00

reason_cache_test.go

…

reason_cache.go

…

runonce_test.go

Share /var/lib/kubernetes on startup

2017-08-30 16:45:04 +02:00

runonce.go

…

runtime.go

…

util.go

…

volume_host.go

BlockVolumesSupport: CRI, VolumeManager and OperationExecutor changes

2017-11-20 14:10:26 -05:00