5 Commits

Author	SHA1	Message	Date
Eric Lin	5e2ed11cf7	Pass PodSandboxConfig to PullImage method in CRI ... Fix #71745	2018-12-07 10:10:22 +08:00
Pingan2017	158552ff35	fix golint failures - /pkg/kubelet/images	2018-09-17 10:52:25 +08:00
Lantao Liu	3193a4a469	Fix RunAsGroup.	2018-07-06 15:42:26 -07:00
Jan Safranek	5110db5087	Lock subPath volumes ... Users must not be allowed to step outside the volume with subPath. Therefore the final subPath directory must be "locked" somehow and checked if it's inside volume. On Windows, we lock the directories. On Linux, we bind-mount the final subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>, it can't be changed to symlink user once it's bind-mounted.	2018-03-05 09:14:44 +01:00
Pengfei Ni	b0a49e1970	Update unit tests and bazel files	2018-02-28 09:56:46 +08:00