github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/pkg/kubelet
History
Kubernetes Submit Queue 6901a00078 Merge pull request #31286 from yifan-gu/rkt_privileged 
Automatic merge from submit-queue

rkt: Improve support for privileged pod (pod whose all containers are privileged) 

Fix https://github.com/kubernetes/kubernetes/issues/31100

This takes advantage of https://github.com/coreos/rkt/pull/2983 . By appending the new `--all-run` insecure-options to `rkt run-prepared` command when all the containers are privileged. The pod now gets more privileged power.
 		2016-08-25 06:58:43 -07:00
..
api Merge pull request #30753 from feiskyer/sandbox-name 2016-08-22 19:41:44 -07:00
cadvisor updated cadvisor version 2016-08-02 16:33:03 -07:00
client Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
cm Create testable implementation of sysctl 2016-08-23 01:42:37 -04:00
config Convert() should accept the new conversion Context value 2016-08-18 14:45:20 -04:00
container rkt: Refactoring the construction of the mount points. 2016-08-19 13:09:27 -07:00
custommetrics Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
dockershim Kubelet: pass pod name/namespace/uid to runtimes 2016-08-23 07:33:15 +08:00
dockertools Merge pull request #27180 from sttts/sysctl-implementation 2016-08-25 06:21:24 -07:00
envvars Use Go canonical import paths 2016-07-16 13:48:21 -04:00
events Add Events for operation_executor to show status of mounts, failed or successful 2016-08-17 09:53:47 -04:00
eviction kubelet eviction on inode exhaustion 2016-08-17 16:57:44 -04:00
images pkg/kubelet/images: fix struct initialization 2016-08-19 16:52:52 +03:00
kuberuntime Merge pull request #31091 from feiskyer/kuberuntime-getnetns 2016-08-24 13:40:40 -07:00
leaky Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
lifecycle Remove apparmor dependency on pkg/kubelet/lifecycle 2016-08-21 20:59:11 -07:00
metrics Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
network fix #30376 that broken cross-build 2016-08-24 13:18:18 -07:00
pleg Fix various typos in kubelet 2016-08-03 01:14:44 +03:00
pod Fix various typos in kubelet 2016-08-03 01:14:44 +03:00
prober Always return exec command output 2016-08-17 16:21:19 -04:00
qos Use Go canonical import paths 2016-07-16 13:48:21 -04:00
remote Repalce rawContainerID with containerID 2016-08-05 16:26:47 -07:00
rkt Merge pull request #31286 from yifan-gu/rkt_privileged 2016-08-25 06:58:43 -07:00
rktshim Kubelet: pass pod name/namespace/uid to runtimes 2016-08-23 07:33:15 +08:00
server Add return code support to kubectl-exec and -run 2016-08-20 15:58:47 +02:00
status Fix nil in error message due to var shadowing 2016-08-19 11:23:19 -04:00
sysctl Add sysctl whitelist on the node 2016-08-25 13:22:01 +02:00
types Use Go canonical import paths 2016-07-16 13:48:21 -04:00
util Kubelet code move: volume / util 2016-08-22 23:35:11 -04:00
volumemanager Add Events for operation_executor to show status of mounts, failed or successful 2016-08-17 09:53:47 -04:00
OWNERS Move blunderbuss assignees into tree 2016-03-02 20:46:32 -05:00
active_deadline.go Refactor util clock into it's own pkg 2016-07-28 02:29:04 -04:00
active_deadline_test.go Refactor util clock into it's own pkg 2016-07-28 02:29:04 -04:00
container_bridge.go Revert "Use netlink.SetPromiscOn instead of iproute2 command" 2016-08-22 10:28:11 +02:00
container_bridge_test.go Add tests for container_bridge.go (really just ensureIPTablesMasqRule) 2016-07-29 11:57:17 -04:00
disk_manager.go Revert "Declare out of disk when there is no free inodes" 2016-07-06 08:19:09 -07:00
disk_manager_test.go Revert "Declare out of disk when there is no free inodes" 2016-07-06 08:19:09 -07:00
doc.go Use Go canonical import paths 2016-07-16 13:48:21 -04:00
flannel_helper.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
kubelet.go Add sysctl whitelist on the node 2016-08-25 13:22:01 +02:00
kubelet_cadvisor.go Eviction manager needs to start as runtime dependent module 2016-07-22 10:19:40 -04:00
kubelet_cadvisor_test.go Print/log pointers of structs with %#v instead of %+v 2016-08-01 22:27:56 +02:00
kubelet_getters.go This change supports robust kubelet volume cleanup 2016-08-15 11:29:15 -07:00
kubelet_getters_test.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
kubelet_network.go Merge pull request #29969 from ZTE-PaaS/zhangke-patch-015 2016-08-22 17:40:43 -07:00
kubelet_network_test.go Revert "Revert "syncNetworkUtil in kubelet and fix loadbalancerSourceRange on GCE"" 2016-08-18 10:19:48 -07:00
kubelet_node_status.go Kubelet code move: volume / util 2016-08-22 23:35:11 -04:00
kubelet_node_status_test.go Merge pull request #31157 from pmorie/kubelet-move 2016-08-25 00:20:39 -07:00
kubelet_resources.go Fix default resource limits (node capacities) for downward api volumes 2016-08-16 14:41:17 -04:00
kubelet_resources_test.go Fix default resource limits (node capacities) for downward api volumes 2016-08-16 14:41:17 -04:00
kubelet_test.go Merge pull request #31157 from pmorie/kubelet-move 2016-08-25 00:20:39 -07:00
kubelet_volumes.go Kubelet code move: volume / util 2016-08-22 23:35:11 -04:00
kubelet_volumes_test.go Kubelet code move: volume / util 2016-08-22 23:35:11 -04:00
networks.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
oom_watcher.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
oom_watcher_test.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
pod_container_deletor.go Delete all dead containers only after pod syncing is done. 2016-08-15 14:36:51 -07:00
pod_container_deletor_test.go Delete all dead containers only after pod syncing is done. 2016-08-15 14:36:51 -07:00
pod_workers.go Fix various typos in kubelet 2016-08-03 01:14:44 +03:00
pod_workers_test.go Refactor util clock into it's own pkg 2016-07-28 02:29:04 -04:00
reason_cache.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
reason_cache_test.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
root_context_linux.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
root_context_unsupported.go Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
runonce.go pods can not admitted should return directly 2016-07-30 11:47:50 +08:00
runonce_test.go Add network-plugin-mtu option for MTU selection 2016-08-23 01:50:58 -04:00
runtime.go optimize lock of runtimeState stuct 2016-08-03 13:19:22 +08:00
util.go Kubelet code move: volume / util 2016-08-22 23:35:11 -04:00
volume_host.go Fix default resource limits (node capacities) for downward api volumes 2016-08-16 14:41:17 -04:00