github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/pkg
History
Kubernetes Submit Queue 611036c8c3 Merge pull request #51404 from feiskyer/nonewprivs 
Automatic merge from submit-queue (batch tested with PRs 51425, 51404, 51459, 51504, 51488)

Admit NoNewPrivs for remote and rkt runtimes

**What this PR does / why we need it**:

#51347 is aiming to admit NoNewPrivis for remote container runtime, but it didn't actually solve the problem. See @miaoyq 's comments [here](https://github.com/kubernetes/kubernetes/pull/51347#discussion_r135379446).

This PR always admit NoNewPrivs for runtimes except docker, which should fix the problem.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: 

Fixes #51319.

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
 		2017-08-29 04:15:28 -07:00
..
api Merge pull request #51425 from NickrenREN/remove-scratch-overlay 2017-08-29 04:15:24 -07:00
apimachinery/tests Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
apis Merge pull request #51300 from caesarxuchao/remove-failure-policy 2017-08-29 03:20:08 -07:00
auth Add enj as reviewer to OWNERS 2017-08-17 20:42:46 -04:00
bootstrap/api Add extra group constants and validation to `pkg/bootstrap/api`. 2017-08-25 16:04:53 -05:00
capabilities Merge pull request #49853 from duan-yue/capabilities 2017-08-12 02:35:57 -07:00
client Update generated files 2017-08-15 11:56:46 +02:00
cloudprovider Merge pull request #51410 from nicksardo/gce-consume-netproj 2017-08-29 03:20:02 -07:00
controller Merge pull request #50099 from kargakis/clean-d-controller 2017-08-29 03:20:05 -07:00
credentialprovider Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
features Feature gate initializers field 2017-08-28 11:11:48 -04:00
fieldpath Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
generated Merge pull request #50155 from lucab85/i18n-Italian 2017-08-25 07:58:11 -07:00
hyperkube Remove kubectl's dependence on schema file in pkg/api/validation. 2017-08-16 16:38:28 -07:00
kubeapiserver Add --request-timeout to allow the global request timeout of 60 seconds to be configured. 2017-08-28 13:42:43 -07:00
kubectl Merge pull request #50561 from cblecker/zsh-compinit 2017-08-29 02:22:10 -07:00
kubelet Merge pull request #51404 from feiskyer/nonewprivs 2017-08-29 04:15:28 -07:00
kubemark Autodetect kubemark Cloud Provider 2017-08-28 12:13:53 +02:00
master Paramaterize stickyMaxAgeMinutes for service in API 2017-08-25 17:44:47 +08:00
printers Merge pull request #50953 from zjj2wry/get-pvc 2017-08-26 23:02:53 -07:00
probe Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
proxy Merge pull request #49850 from m1093782566/service-session-timeout 2017-08-25 20:43:30 -07:00
quota Merge pull request #49610 from NickrenREN/local-isolation 2017-08-29 01:17:34 -07:00
registry Merge pull request #50582 from dixudx/support_fieldSelector_spec.schedulerName 2017-08-25 22:43:32 -07:00
routes Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
security Allow remote runtimes to pass apparmor host validation 2017-08-24 09:18:46 +08:00
securitycontext Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
serviceaccount Merge pull request #50876 from enj/enj/f/owners_reviewer 2017-08-18 05:42:07 -07:00
ssh Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
util Adding fsGroup check before mounting a volume 2017-08-24 17:33:51 -04:00
version Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
volume Merge pull request #50919 from wongma7/mount-options 2017-08-29 03:20:00 -07:00
watch Remove BUILD reference to removed files 2017-08-16 11:22:37 -07:00
BUILD Remove BUILD reference to removed files 2017-08-16 11:22:37 -07:00
OWNERS
…