Kubernetes Submit Queue ea206bbe29 Merge pull request #51347 from Random-Liu/fix-no-new-privs ...

Automatic merge from submit-queue (batch tested with PRs 50889, 51347, 50582, 51297, 51264)

Fix NoNewPrivs and also allow remote runtime to provide the support.

Fixes https://github.com/kubernetes/kubernetes/issues/51319.

This PR:
1) Let kubelet admit remote runtime for `NoNewPrivis` container runtime.
2) Fix a `NoNewPrivis` bug which checks wrong runtime type.

/cc @kubernetes/sig-node-bugs @jessfraz

2017-08-25 22:43:28 -07:00

..

api

Merge pull request #50889 from NickrenREN/local-storage-eviction

2017-08-25 22:43:26 -07:00

apimachinery/tests

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

apis

Merge pull request #50033 from cmluciano/cml/addnpcidrselector

2017-08-25 11:07:07 -07:00

auth

Add enj as reviewer to OWNERS

2017-08-17 20:42:46 -04:00

bootstrap/api

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

capabilities

Merge pull request #49853 from duan-yue/capabilities

2017-08-12 02:35:57 -07:00

client

Update generated files

2017-08-15 11:56:46 +02:00

cloudprovider

Merge pull request #50972 from FengyunPan/external-loadBalancerIP

2017-08-25 19:40:36 -07:00

controller

Merge pull request #50730 from andrewsykim/49836

2017-08-25 20:43:37 -07:00

credentialprovider

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

features

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

fieldpath

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

generated

Merge pull request #50155 from lucab85/i18n-Italian

2017-08-25 07:58:11 -07:00

hyperkube

Remove kubectl's dependence on schema file in pkg/api/validation.

2017-08-16 16:38:28 -07:00

kubeapiserver

Merge pull request #51198 from mattmoyer/rename-experimental-bootstrap-token-auth

2017-08-24 11:17:09 -07:00

kubectl

Merge pull request #47171 from xilabao/validate-nonResourceURL-in-create-clusterrole

2017-08-25 12:31:07 -07:00

kubelet

Merge pull request #51347 from Random-Liu/fix-no-new-privs

2017-08-25 22:43:28 -07:00

kubemark

Revert "Merge pull request #51008 from kubernetes/revert-50789-fix-scheme"

2017-08-21 11:28:05 -07:00

master

Paramaterize stickyMaxAgeMinutes for service in API

2017-08-25 17:44:47 +08:00

printers

refactor CephFS PV spec to use SecretReference

2017-08-24 18:49:05 +00:00

probe

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

proxy

Merge pull request #49850 from m1093782566/service-session-timeout

2017-08-25 20:43:30 -07:00

quota

update testcase err msg

2017-08-17 15:42:05 +08:00

registry

Merge pull request #51244 from lichuqiang/fix_rollback

2017-08-25 04:11:05 -07:00

routes

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

security

Allow remote runtimes to pass apparmor host validation

2017-08-24 09:18:46 +08:00

securitycontext

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

serviceaccount

Merge pull request #50876 from enj/enj/f/owners_reviewer

2017-08-18 05:42:07 -07:00

ssh

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

util

Adding fsGroup check before mounting a volume

2017-08-24 17:33:51 -04:00

version

Use buildozer to delete licenses() rules except under third_party/

2017-08-11 09:32:39 -07:00

volume

Merge pull request #50504 from yastij/fcVolume-handleFailedMount

2017-08-25 19:40:38 -07:00

watch

Remove BUILD reference to removed files

2017-08-16 11:22:37 -07:00

BUILD

Remove BUILD reference to removed files

2017-08-16 11:22:37 -07:00

OWNERS

…