Kubernetes Submit Queue 2ca21edd00 Merge pull request #56503 from php-coder/fail_non_root_verification ...

Automatic merge from submit-queue (batch tested with PRs 56589, 56503). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

MustRunAsNonRoot should reject a pod if it has non-numeric USER

**What this PR does / why we need it**:
This PR modifies kubelet behavior to reject pods with non-numeric USER instead of showing a warning.

**Special notes for your reviewer**:
Related discussion: https://github.com/kubernetes/community/pull/756#discussion_r143694443

**Release note**:
```release-note
kubelet: fix bug where `runAsUser: MustRunAsNonRoot` strategy didn't reject a pod with a non-numeric `USER`.
```

PTAL @pweil- @tallclair @liggitt @Random-Liu
CC @simo5 @adelton

2017-11-30 12:07:48 -08:00

..

api

generated

2017-11-22 18:40:09 +00:00

apimachinery/tests

update BUILD files

2017-10-15 18:18:13 -07:00

apis

Use full gopath for externalTypes of missing API groups.

2017-11-26 00:12:45 +08:00

auth

move authorizers over to new interface

2017-11-03 13:46:28 -07:00

bootstrap/api

Validate usage strings when creating bootstrap tokens via kubeadm

2017-11-13 09:37:20 +08:00

capabilities

update BUILD files

2017-10-15 18:18:13 -07:00

client

generated

2017-11-22 18:40:09 +00:00

cloudprovider

Merge pull request #55987 from andyzhangx/azure-reviewer

2017-11-30 09:24:18 -08:00

controller

Revert "Merge pull request #55336 from oracle/for/upstream/master/53462"

2017-11-28 19:04:42 -05:00

credentialprovider

fix awsStandardDNSSuffix

2017-11-15 16:39:48 +08:00

features

Implement resource limit priority function. This function checks if the input pod's

2017-11-27 12:53:47 -05:00

fieldpath

Validate key subscript for metadata.annotations and metadata.labels separately

2017-11-22 15:50:40 -08:00

generated

generated

2017-11-22 18:40:09 +00:00

hyperkube

update BUILD files

2017-10-15 18:18:13 -07:00

kubeapiserver

Merge pull request #56175 from ericchiang/oidc-fix-prefixing

2017-11-21 19:49:33 -08:00

kubectl

Merge pull request #55039 from msau42/local-binding-4

2017-11-22 11:59:55 -08:00

kubelet

Merge pull request #56503 from php-coder/fail_non_root_verification

2017-11-30 12:07:48 -08:00

kubemark

Move ungated 'alpha' KubeletConfiguration fields and self-registration fields to KubeletFlags

2017-11-15 17:47:10 -08:00

master

generated

2017-11-22 18:40:09 +00:00

printers

support flexvlome in psp

2017-11-23 16:06:51 +08:00

probe

update BUILD files

2017-10-15 18:18:13 -07:00

proxy

add cleanup-ipvs flag

2017-11-21 15:05:23 +08:00

quota

update unit test for hugepage resourceQuota support

2017-11-13 09:37:20 +08:00

registry

Merge pull request #56252 from deads2k/rbac-04-migrate

2017-11-23 00:23:26 -08:00

routes

update BUILD files

2017-10-15 18:18:13 -07:00

security

support flexvlome in psp

2017-11-23 16:06:51 +08:00

securitycontext

Update generated files

2017-11-09 12:14:08 +01:00

serviceaccount

Update generated files

2017-11-09 12:14:08 +01:00

ssh

update BUILD files

2017-10-15 18:18:13 -07:00

util

Use PATCHs instead of PUTs in CIDR allocator

2017-11-23 21:04:28 +01:00

version

Capture git export-subst strings in version.sh for 'git archive' use.

2017-11-09 16:36:27 -08:00

volume

Merge pull request #55987 from andyzhangx/azure-reviewer

2017-11-30 09:24:18 -08:00

watch

update BUILD files

2017-10-15 18:18:13 -07:00

.import-restrictions

Add import-boss directives

2017-10-13 07:06:22 -04:00

BUILD

generated

2017-11-22 18:40:09 +00:00

OWNERS

…