mirror of https://github.com/k3s-io/k3s
60dc2fa5d8
Automatic merge from submit-queue Require PV provisioner secrets to match type In 1.5, PV provisioners are allowing targeting namespaced secrets via storageclass params. This adds a requirement that those secrets' type match the volume provisioner plugin name, to prevent targeting and extraction of arbitrary secrets Helps limit secret targeting issues mentioned in https://github.com/kubernetes/kubernetes/issues/34822 |
||
|---|---|---|
| .. | ||
| nestedpendingoperations | ||
| operationexecutor | ||
| types | ||
| volumehelper | ||
| BUILD | ||
| atomic_writer.go | ||
| atomic_writer_test.go | ||
| device_util.go | ||
| device_util_linux.go | ||
| device_util_linux_test.go | ||
| device_util_unsupported.go | ||
| doc.go | ||
| fs.go | ||
| fs_unsupported.go | ||
| io_util.go | ||
| util.go | ||