github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f6d97b5d2b
kubernetes/pkg/util
History
Jan Safranek 5110db5087 Lock subPath volumes 
Users must not be allowed to step outside the volume with subPath.
Therefore the final subPath directory must be "locked" somehow
and checked if it's inside volume.

On Windows, we lock the directories. On Linux, we bind-mount the final
subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>,
it can't be changed to symlink user once it's bind-mounted.
2018-03-05 09:14:44 +01:00
..
async Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
bandwidth Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
config Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
configz Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
conntrack Auto-updated BUILD files 2018-02-27 11:18:11 -08:00
dbus Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
ebtables Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
env Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
file Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
filesystem update BUILD files 2017-10-15 18:18:13 -07:00
flag Log the command line flags 2018-02-15 18:04:04 -05:00
flock Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
goroutinemap Merge pull request #59714 from hzxuzhonghu/clean-up-goroutinemap 2018-02-27 12:05:40 -08:00
hash Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
initsystem Kubeadm - Added initial support for Windows worker nodes to join cluster using kubeadm 2017-11-01 10:36:37 -04:00
interrupt update BUILD files 2017-10-15 18:18:13 -07:00
io refactor NsenterWriter to utilize pkg/util/nsenter 2018-02-04 16:27:13 +08:00
ipconfig Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
ipset Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
iptables add me to iptables/kube-proxy reviewers 2018-02-22 17:36:57 -05:00
ipvs Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
keymutex Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
labels Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
limitwriter Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
maps update BUILD files 2017-10-15 18:18:13 -07:00
metrics Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
mount Lock subPath volumes 2018-03-05 09:14:44 +01:00
net Auto-updated BUILD files 2018-02-27 11:18:11 -08:00
netsh Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
node Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
normalizer Clone documentation utility from //pkg/kubectl/cmd/templates 2017-11-16 10:18:00 +01:00
nsenter Fix nsenter on Mac 2018-02-22 16:32:06 +01:00
oom Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
parsers Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
pointer Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
procfs Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
reflector/prometheus rename metric reflector_xx_last_resource_version to reflector_last_resource_version{name="xx"} 2017-11-01 16:34:18 +08:00
removeall Lock subPath volumes 2018-03-05 09:14:44 +01:00
resizefs Perform resize of mounted volume if necessary 2018-01-29 17:49:50 -05:00
resourcecontainer Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
rlimit Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
selinux Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
slice Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
strings Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
sysctl update BUILD files 2017-10-15 18:18:13 -07:00
system Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
tail Merge pull request #59713 from hanxiaoshuai/fix0211 2018-02-22 23:17:38 -08:00
taints Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
template Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
term Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
threading Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
tolerations Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
version Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
workqueue/prometheus update BUILD files 2017-10-15 18:18:13 -07:00
BUILD Remove conntrack entry on udp rule add. 2018-02-22 23:34:42 -08:00
verify-util-pkg.sh verify pkg/util contains no code 2017-08-17 15:28:27 +08:00