Lee Verberne
8835f54480
kubelet: add support for pod PID namespace sharing
...
This adds the logic for sending a NamespaceMode_POD to the runtime, but
leaves it disconnected pending https://issues.k8s.io/58716 .
2018-02-08 16:58:07 +01:00
Lee Verberne
e10042d22f
Increment CRI version from v1alpha1 to v1alpha2
...
This also incorporates the version string into the package name so
that incompatibile versions will fail to connect.
Arbitrary choices:
- The proto3 package name is runtime.v1alpha2. The proto compiler
normally translates this to a go package of "runtime_v1alpha2", but
I renamed it to "v1alpha2" for consistency with existing packages.
- kubelet/apis/cri is used as "internalapi". I left it alone and put the
public "runtimeapi" in kubelet/apis/cri/runtime.
2018-02-07 09:06:26 +01:00
Lee Verberne
0f1de41790
Update kubelet for enumerated CRI namespaces
...
This adds support to both the Generic Runtime Manager and the
dockershim for the CRI's enumerated namespaces.
2018-02-07 09:06:26 +01:00
Yang Guo
bf2ced837c
Updates Docker Engine API
2017-07-13 12:55:07 -07:00
Yu-Ju Hong
e6ad8f8e48
dockershim: clean up unused security context code
...
Also remove references to kubernetes api objects
2017-07-10 17:48:26 -07:00
Pengfei Ni
22e99504d7
Update CRI references
2017-06-09 10:16:40 +08:00
Michael Taufen
cbad320205
Reorganize kubelet tree so apis can be independently versioned
2017-05-12 10:02:33 -07:00
Yu-Ju Hong
951b2d922b
move securitycontext from dockertools to dockershim
2017-05-01 17:32:38 -07:00
Lee Verberne
d22dd0fa35
Implement shared PID namespace in the dockershim
2017-04-27 23:43:53 +00:00
Pengfei Ni
023fe48c98
Do not clear hostPid for host-networked container
2017-04-05 22:34:30 +08:00
Yu-Ju Hong
d8e29e782f
dockershim: set security option separators based on the docker version
...
Also add a version cache to avoid hitting the docker daemon frequently.
2017-02-07 11:06:40 -08:00
Yu-Ju Hong
05c3b8c1cf
Set docker opt separator correctly for SELinux options
2017-02-06 14:47:30 -08:00
Yu-Ju Hong
4506f4c2d0
securitycontext: move docker-specific logic into kubelet/dockertools
...
This change moves the code specific to docker to kubelet/dockertools,
while leaving the common utility functions at its current package
(pkg/securitycontext).
When we deprecate dockertools in the future, the code will be moved to
pkg/kubelet/dockershim instead.
2017-01-27 12:25:46 -08:00
Pengfei Ni
d4bfcd1fda
kubelet/dockershim: update cri to protobuf v3
2017-01-20 09:55:37 +08:00
Minhan Xia
04c3757a06
apply sandbox network mode based on network plugin
2016-12-13 16:00:23 -08:00
Random-Liu
2ce5deb6fd
Add separate username field in CRI and use it.
2016-11-15 16:50:02 -08:00
Random-Liu
99ee3f4b76
Add non-numeric user name support.
2016-11-08 16:07:29 -08:00
Pengfei Ni
f8e5f81fed
cleanup TODOs in dockershim
2016-11-07 11:41:06 +08:00
Pengfei Ni
3aee57d4ae
Add security context support in dockershim
2016-11-07 11:07:56 +08:00