3 Commits

Author	SHA1	Message	Date
Jan Safranek	5110db5087	Lock subPath volumes ... Users must not be allowed to step outside the volume with subPath. Therefore the final subPath directory must be "locked" somehow and checked if it's inside volume. On Windows, we lock the directories. On Linux, we bind-mount the final subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>, it can't be changed to symlink user once it's bind-mounted.	2018-03-05 09:14:44 +01:00
Di Xu	48388fec7e	fix all the typos across the project	2018-02-11 11:04:14 +08:00
Jan Safranek	1dd32ce7eb	Add ExecMounter	2017-11-10 13:14:40 +01:00