MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2025-07-19 12:50:22 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,339 Commits 38 Branches 0 Tags 9.2 MiB
25dc2fc5e9
Commit Graph

440 Commits

Author SHA1 Message Date
Bruce Ashfield
25dc2fc5e9 conmon: add branch specification to SRC_URI 
The upstream project switched from master to main, so we add
an explicit branch specification to avoid fetch errors (as
the deafult of master no longer works).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-06-21 08:56:22 -04:00
Bruce Ashfield
c83e438a40 crun: switch branch to main 
crun has renamed master -> main, so we adjust our fetching to
match.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-05-19 09:10:20 -04:00
Bruce Ashfield
b5ae84170a containerd: update to v1.4.4 
Dropping the backported CVE patch, as it is part of this version bump,
which contains the followig commits:

   c64cfa03b runtime/v2/runc: fix the defer cleanup of the NewContainer
   60c139c9a gha: use sudo -E in some places to prevent dropping env-vars
   e0d452986 GHA: use setup-go@v2
   ac87e05f6 [release/1.4] update Go to 1.15.11
   425a6e4f8 night ci fix: add packages for ubuntu 20.04
   80de6e2b4 vendor: golang.org/x/sys 5cba982894dd4e8879e3ef0a0c308ceff39f6154
   92da2dbfa vendor: golang.org/x/sync 67f06af15bc961c363a7260195bcd53487529a21
   b24c8a2ec vendor: golang.org/x/net 69a78807bb2bb6d1599c68698c6b009505012083
   ebdd88cc0 vendor: sigs.k8s.io/structured-merge-diff/v4 v4.0.3
   fe197b9b5 vendor: update kubernetes to v1.19.10
   07e347903 adds log for each failed host and status not found on host
   18a271509 need to bring critest backup
   8c5422eb6 Fix error log when copy file
   f9d6a7604 runtime/v2/runc: fix leaking socket path
   24921417f Fix missing close
   bfe95947f install-runc: set GO111MODULE=off to use vendor
   520d179ed Prevent runc inheriting BUILDTAGS from containerd
   039c24043 move runc version to a separate file for easier consumption
   0e957e5ad Separate runc binary version from libcontainer version
   bd5bbbd1a Remove references to apparmor and selinux buildtags for runc
   fca4a0d1b script/setup: use git clone instead of go get -d
   4c875c81a cmd/ctr: fix export command
   bbde7b700 overlay: support "userxattr" option (kernel 5.11)
   4c2f6a7ab Fix advisory link in release notes for containerd 1.4.4
   3ba4a3171 Prepare release notes for 1.4.4
   cbcb2f57f vendor: update cri
   633bfb712 CI: cache ~/.vagrant.d/boxes
   e7851d743 CI: fix "ls: cannot access '/etc/cni/net.d': Permission denied"
   f4a6e163e Update continuity
   2ec4a495f Update gogo/protobuf to v1.3.2
   232cee448 Update to go 1.15.8

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:17:35 -04:00
Ralph Siemsen
300c3f0d13 runc: add CVE_PRODUCT to recipes 
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:15:15 -04:00
Ralph Siemsen
d7087b8395 containerd: add CVE_PRODUCT to recipe 
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:14:29 -04:00
Ralph Siemsen
8c0e83ff1a docker: add CVE_PRODUCT to recipes 
Allows the yocto cve-checker to flag CVEs, which would otherwise go
unreported due to the package name not matching NIST NVD data.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-29 23:13:55 -04:00
Ralph Siemsen
eeff98a314 docker-moby: update to v19.03.15 
Bumping to 19.03.15 to pickup bugfixes and security changes. The
following commits comprise the change:

420b1d3625 pull: Validate layer digest format
5472f39022 buildkit: Apply apparmor profile
b96fb8837b vendor buildkit 396bfe20b590914cd77945ef0d70d976a0ed093c
67de83e70b Use real root with 0701 perms
5eff67a2c2 Do not set DOCKER_TMP to be owned by remapped root
1342c51d5e Ensure MkdirAllAndChown also sets perms
7d75c1d40d Merge pull request #41731 from thaJeztah/19.03_container_1.3.9
d3c5506330 update containerd binary to v1.3.9 (address CVE-2020-15257)
1babdf81e7 update containerd binary to v1.3.8
35968c420d Merge pull request #41685 from ameyag/19.03-bmp-libnetwork-nil-deference
f80f6304e2 Bump libnetwork
837baebb74 Merge pull request #41635 from AkihiroSuda/rootlesskit-0.11.0-1903
4b181db52b bump up rootlesskit to v0.11.0
619f1b54c6 Merge pull request #41596 from thaJeztah/19.03_backport_swagger_fix
7487dca8a5 docs: fix builder-version swagger
bb69504a4a Merge pull request #41557 from AkihiroSuda/cherrypick-41156-1903
c7253a0e1a dockerd-rootless.sh: support containerd v1.4 shim socket path convention
b27122246a Merge pull request #41542 from thaJeztah/19.03_backport_fix_41517
88eec2e811 Also trim "~..." from AppArmor versions
ecd3baca25 pkg/aaparser: support parsing version like "3.0.0-beta1"
233a6379e5 Merge pull request #41522 from thaJeztah/19.03_backport_gcp_leak
74c0c5b7f1 Fix gcplogs memory/connection leak
88623e101c Merge pull request #41293 from thaJeztah/19.03_backport_fix_getexecuser
705762f23c Merge pull request #41494 from thaJeztah/19.03_backport_aws_sdk_go
5f32bd9ced awslogs: Update aws-sdk-go to support IMDSv2
bd33bbf049 Merge pull request #41314 from thaJeztah/19.03_backport_fix_racey_logger_test
426396f438 Merge pull request #41451 from thaJeztah/19.03_update_buildkit
406dba269c Merge pull request #41446 from thaJeztah/19.03_backport_swagger_fixes
50b33bd3cd Merge pull request #41312 from thaJeztah/19.03_backport_pass_network_error
519462f3df Merge pull request #41334 from thaJeztah/19.03_backport_bump_golang_1.13.15
64fffefffa Merge pull request #40408 from thaJeztah/19.03_backport_update_containerd_1.3
8cf9d50fc0 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc
a4e96a486f swagger: fix MemTotal units in SystemInfo endpoint
9fe291827a Bump Golang 1.13.15
a15a770e1b update containerd to v1.3.7
9380ec7397 update containerd to v1.3.6
80cef48453 update containerd to v1.3.5
fc8f88dc14 update containerd to v1.3.4
89a4208757 update containerd binary to v1.3.3
490c45b756 Update containerd to v1.3.2
56d897347d Update containerd to v1.3.1
d4c63720e9 update containerd binary v1.3.0
ec14dc44d1 Fix log file rotation test.
a958fc3e65 Fix flakey test for log file rotate.
89da709cb7 Check for context error that is wrapped in url.Error
88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns
83baeafc3c oci: correctly use user.GetExecUser interface
dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e
7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes
22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock
8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit
eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1
168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903
9dc455dffb bump up rootlesskit to v0.10.0
c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests
9eade7d03c docs: API v1.39: move system version response to definitions
4685e9ef72 docs: API v1.40: move system version response to definitions
d8f22d0307 swagger: move system version response to definitions
32366de5f9 plugin: fix a double RLock bug
ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt
d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit
892c228219 Remove apt.dockerproject.org from test
a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates
765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e
2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup
b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14
4d9397c268 swagger: sync updates to v1.39
51bd95dc95 swagger: sync updates to v1.40
d5ba93575c docs: sync API v1.40 swagger formatting with current version
12b7746a84 docs: sync API v1.39 swagger formatting with current version
0c6bdf5974 docs: add example calculations to container stats API
630185b4ae swagger: add DeviceRequests to container create, inspect example
d7423180e7 swagger: move NetworkingConfig to definitions
c30ff6885e swagger: reformat, and wrap to ~80-chars
7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint
1608292c09 Bump Golang 1.13.14
1763b4e88b Bump Go 1.13.13
5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit
23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef
789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr
0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit
9d6053eda2 Revendor hcsshim to fix image import bug
589b07262c vendor: Microsoft/hcsshim v0.8.9
e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f)
a40b877fbb Merge pull request #41133 from roidelapluie/bsd2
7dd9fdcfbe Enable client on netbsd and dragonfly
9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork
abb5beffff Merge pull request #41088 from thaJeztah/19.03_backport_invalid_cpu_shares_fix
b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
d5a82971a4 Merge pull request #41082 from thaJeztah/19.03_backport_bump_golang_1.13.12
5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc
058ea43c5c Bump Golang 1.13.12
ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure
77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6
b47e742558 Merge pull request #41027 from thaJeztah/19.03_bump_criu
b85d75e29a Merge pull request #41009 from tiborvass/19.03-fix-dns-fallback-regression
c104a50de4 integration: Add TestDaemonDNSFallback
9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b
d4e12315cd hack: add more debugging to understand exit codepath
4c24512241 Dockerfile: bump CRIU 3.14
ad0f0b3970 Merge pull request #40978 from thaJeztah/19.03_backport_bump_golang_1.13.11
29796375c9 Bump Golang 1.13.11
c1cc6ec81a Merge pull request #40988 from thaJeztah/19.03_backport_fix_gotestsum_install
8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded
811a247d06 Merge pull request #40970 from AkihiroSuda/archive-40939-1903
4d1885fb94 Merge pull request #40964 from AkihiroSuda/rootless-requires-slirp4netns-040-1903
0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir
9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0
ab567a4327 Merge pull request #40955 from tonistiigi/19.03-buildkit-update
ee3f3ece72 Merge pull request #40951 from AkihiroSuda/rootlesskit-095-1903
a76633684b vendor: update buildkit to a7d7b7f1
0803200be9 Merge pull request #40946 from thaJeztah/19.03_backport_fix_selinux_enotsup
706008a1da bump up rootlesskit to v0.9.5
57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling
c4c6cf6b6a Merge pull request #40921 from cpuguy83/19.03_log_rotate_error_handling
7d4dd91a52 logfile: Check if log is closed on close error during rotate
edf2c49410 vendor: pkg/errors v0.9.1
1adcc64f40 Merge pull request #40877 from thaJeztah/19.03_update_buildkit
e7349349fd Merge pull request #40850 from thaJeztah/19.03_backport_criu_3.13
3677003554 Merge pull request #40782 from thaJeztah/19.03_backport_switch_to_s390x_ubuntu_1804
63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa
2fbb374ab7 Merge pull request #40863 from AkihiroSuda/rootlesskit-094-1903
946d0ff67e bump up rootlesskit to v0.9.4
70e7d6fe4a Update CRIU to v3.13 "Silicon Willet"
f432f71595 Merge pull request #40563 from thaJeztah/19.03_backport_fix_windows_file_handles
47a6d9b54f Merge pull request #40565 from thaJeztah/19.03_backport_fix_bip_subnet_config
6a0995e0d8 Merge pull request #40831 from thaJeztah/19.03_bump_swarmkit
e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e
25b82fa9b8 Merge pull request #40801 from thaJeztah/19.03_backport_update_go_events
e149ff62fe vendor: update go-events to fix alignment for 32bit systems
90a31c4829 Merge pull request #40809 from thaJeztah/19.03_update_libnetwork
aa98b4f5d6 Merge pull request #40803 from thaJeztah/19.03_backport_bump_golang_1.13.10
860e7e273d Merge pull request #40800 from thaJeztah/19.03_backport_api_docs_fix_link
a58b52b037 Merge pull request #40799 from thaJeztah/19.03_backport_fix_test_filter
a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17
282567a58d Bump Golang 1.13.10
b66813eb45 api docs: fix broken link on GitHub
edbb1d9e95 Merge pull request #40784 from thaJeztah/19.03_update_buildkit
9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli"
4275aec641 Merge pull request #40592 from thaJeztah/19.03_backport_bump_golang_1.13
4b040147cf Merge pull request #40417 from thaJeztah/19.03_backport_test_fixes
08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7
1e1caccb13 Merge pull request #40780 from thaJeztah/19.03_backport_map_sync
5ba2bf37a8 Bump Golang 1.13.9
f432a04243 Update Golang 1.13.8
81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
6e1d159680 Update Golang 1.13.6
4241093b63 Update Golang 1.13.5
162fd8b856 Bump Golang 1.13.4
05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596)
f8d4276a89 bump golang 1.13.1 (CVE-2019-16276)
7df2d881f3 Bump Golang version 1.13.0
fed832e224 Update to using alpine 3.10
4581499848 Switch to s390x Ubuntu 18.04
f34a5b5af0 builder: fix concurrent map write
0df114a8f8 Merge pull request #40779 from thaJeztah/19.03_backport_unify_apis
9f5a5da4cb docs: add API versions v1.30 - v1.37
037d5a9e9a Merge pull request #40769 from thaJeztah/19.03_backport_seccomp_time64
5ed8f9a203 Merge pull request #40681 from thaJeztah/19.03_backport_schema2v1_dep_notice_on_error_only
284bbde996 seccomp: add 64-bit time_t syscalls
43b0a73273 Merge pull request #40758 from thaJeztah/19.03_backport_arm_matching
89f296a534 Merge pull request #40562 from thaJeztah/19.03_backport_39353_subgid_subuid
d12b6d24d1 Merge pull request #40628 from cpuguy83/19.03_backport_39360_swarm_log_fill_rate
359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e
1454987253 Merge pull request #40617 from SamWhited/19.03
021258661b Update libnetwork and DNS library
1db5199ddc Merge pull request #40564 from thaJeztah/19.03_backport_apparmor_fixes
6ed0f6ab78 Merge pull request #40652 from thaJeztah/19.03_backport_fix_backingfs
100d240d86 Move schema1 deprecation notice
4a4b3ed37f Merge pull request #40558 from thaJeztah/19.03_backport_buster_or_bust
57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9
68db0c1739 Dockerfile: switch to iptables-legacy to match the host
4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages
a070874828 hack/make: ignore failure to stop apparmor
237843a059 Dockerfile: align consecutive COPY lines
400b2850ff Dockerfile: order COPY lines by change frequency
ddfeaf32ff Dockerfile: sort packages alphabetically
cb813faebf Dockerfile: use build-arg for vpnkit
0499db23d1 Dockerfile: use spaces for indentation
c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower
c6511ee4db bump vndr v0.1.1
0fa8a0c575 bump vndr v0.1.0 to support versioned import paths
f3009e2f51 Use build args to override binary commits in dockerfile
92ca652fc9 Revert "dockerfile: update vndr to 85886e1a"
fdad16840c go-swagger: fix panic
075e057de5 Dockerfile: set GO111MODULE=off
fe2a25a785 fix backingFs assignment
e6c9e2736f Fix rate limiting for logger, increase refill rate
911ecc3376 Set the bip network value as the subnet
08420b1c95 AppArmor: add missing rules for running in userns
fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database
1a830501b7 Use FILE_SHARE_DELETE for log files on Windows.
dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid
4076c57b50 Fix more signal handling issues in tests.
68e1150357 DaemonCli: Move check into startMetricsServer
b813c398bb Add `FromClient` to test env execution

No change to libnetwork or cli.

Tested on arm32 via cli.

Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-04-27 22:46:38 -04:00
Robi Buranyi
e7d1a444b6 lxc: change download folder 
The URI has been changed to 'https://linuxcontainers.org/downloads/lxc'
by the site maintainers recently. Updating the recipe to reflect the new
path.

Signed-off-by: Robi Buranyi <rburanyi@google.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2021-03-12 08:22:55 -05:00
Ricardo Salveti
74e0b8d2ac python3-docker-compose: upgrade 1.26.0 to 1.27.4 
Release notes for 1.27.4:
- Bugs
  - Remove path checks for bind mounts
  - Fix port rendering to output long form syntax for non-v1
  - Add protocol to the docker socket address

Release notes for 1.27.3:
- Bugs
  - Merged max_replicas_per_node on docker-compose config.
  - Fixed depends_on serialization on docker-compose config.
  - Fixed scaling when some containers are not running on docker-compose
    up.
  - Enabled relative paths for driver_opts.device for local driver.
  - Allowed strings for cpus fields.

Release notes for 1.27.2:
- Bugs
  - Fix bug on docker-compose run container attach

Release notes for 1.27.1:
- Bugs
  - Fix compose run when service.scale is specified
  - Allow driver property for external networks as temporary workaround
    for swarm network propagation issue
  - Pin new internal schema version to 3.9 as the default
  - Preserve the version when configured in the compose file

Release notes for 1.27.0:
- Features
  - Merge 2.x and 3.x compose formats and align with COMPOSE_SPEC schema
  - Implement service mode for ipc
  - Pass COMPOSE_PROJECT_NAME environment variable in container mode
  - Make run behave in the same way as up
  - Use docker build on docker-compose run when COMPOSE_DOCKER_CLI_BUILD
    environment variable is set
  - Use docker-py default API version for engine queries (auto)
  - Parse network_mode on build
- Bugs
  - Ignore build context path validation when building is not required
  - Fix float to bytes conversion via docker-py bump to 4.3.1
  - Fix scale bug when deploy section is set
  - Fix docker-py bump in setup.py
  - Fix experimental build failure detection
  - Fix context propagation to docker cli
- Miscellaneous
  - Drop support for Python 2.7
  - Add script for docs syncronization
  - Bump docker-py to 4.3.1
  - Bump tox to 3.19.0
  - Bump virtualenv to 20.0.30

Release notes for 1.26.2:
- Bugs
  - Enforce docker-py 4.2.2 as minimum version when installing with pip

Release notes for 1.26.1:
- Features
  - Bump docker-py from 4.2.1 to 4.2.2
- Bugs
  - Enforce docker-py 4.2.1 as minimum version when installing with pip
  - Fix context load for non-docker endpoints

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-11-03 16:30:29 -05:00
Bruce Ashfield
9d5d904f8a containerd: provide 'ctr' along with 'containerd-ctr' 
Historically we copied ctr into the install as containerd-ctr, but many
different guides expect 'ctr' to be present. So we make the copy and
then create a symlink to make both variants available.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-27 14:27:35 -04:00
Robert Yang
28fda6d848 kubernetes: Fix race issue for installing go2make 
The src/import/build/root/Makefile.generated_files are called several times
during the build, so the following target which installs go2make will also run
several times:

$(META_DIR)/$(GO_PKGDEPS_FILE): FORCE

It runs automatically when the Makefile is called because of:
sinclude $(META_DIR)/$(GO_PKGDEPS_FILE)

So there is a race issue of go2make when parallel build:
hack/run-in-gopath.sh: line 34: build/tmp-glibc/work/corei7-64-wrs-linux/kubernetes/1.18.8-r0/git/src/import/_output/local/go/bin/go2make: No suc h file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-15 10:57:12 -04:00
Bruce Ashfield
80d83eacda containerd: fix x86-64 build 
Since our oe-core go infrastructure insists on both -pie and static
builds (for the most part), and that is not recommended by many
packages, we end up with errors like:

     containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/git/src/import/cmd/containerd-shim
    cannot find package runtime/cgo (using -importcfg)
     containerd-opencontainers/v1.4.1+gitAUTOINC+e44e8ebeaa-r0/recipe-sysroot-native/usr/lib/x86_64-overc-linux/go/pkg/tool/linux_amd64/link:
    cannot open file : open : no such file or directory

In a similar manner to:

  https://www.yoctoproject.org/pipermail/meta-virtualization/2019-March/004084.html

We introduce '-a -pkgdir dontusecurrentpkgs' to mask/fix the problem,
and continue to work towards non-static builds.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-15 10:52:22 -04:00
Bruce Ashfield
ef00e949b7 containerd: package runc shims 
With the newer containerd, we need the runc shims in order to properly
start a container. So we add the v1 and v2 variants to our install and
packaging.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
68a9860fdc containerd: depreciate containerd-docker 
The containerd-docker fork has been abandoned for a while now. We take
the first step in removing it, but making it generate a warning if
someone attempts to use it.

Next release, we'll consolodate the .inc and remove the recipe.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
d3207bbd6f containerd: upgrade to 1.4.x 
Updating containerd to the 1.4.x release series, which contains the
following changes:

   97d690d20 Prepare v1.4.1 release
   42f387186 Always consume shim logs
   f247618a3 Report correct stats for windows containers
   cc5d1518f Update go list to respect build tags
   086e859d2 BUILDING.md: fix description about static builds
   16712ae49 bump cni version to v0.8.0
   1575c88cc seccomp: add `faccessat2` syscall.
   8bd2becea seccomp: add `openat2` syscall.
   4e3397e05 shimv1: downgrade poroccess missing log to debug
   d118c90d3 Ignore SIGURG signals in signal forwarder
   3ee6189fe Exit signal forward if process not found
   a1289d6b8 tasks: Monitor v2 tasks in initFunc as well
   1f823f76d seccomp: allow io-uring related system calls
   3d28944be seccomp: allow clock_settime when CAP_SYS_TIME is added
   e5cc7d527 seccomp: allow quotactl with CAP_SYS_ADMIN
   20273a803 seccomp: allow sync_file_range2 on supported architectures.
   357d10021 seccomp: allow personality with UNAME26 bit set
   0c9de6629 seccomp: allow syscall membarrier
   caa461167 seccomp: allow adjtimex get time operation
   2b80b7dc4 seccomp: allow add preadv2 and pwritev2 syscalls
   e71eccbca seccomp: move the syslog syscall to be gated by CAP_SYS_ADMIN or CAP_SYSLOG
   feff914af runtime: ignore ErrNotExist when remove rootfs
   23e0ea27b snapshots/devmapper: fix rollback
   d68ddb0c0 Prepare v1.4.0
   6be2eccd7 Update releases page for v1.4.0
   d469bffcd CI: disable crun on Vagrant to decrease flakiness
   77a33e3db systemd: add license header to systemd unit
   8d39722fe Vagrantfile: increase memory
   41469ed72 Update version for 1.4.0-rc.1
   60fa35f11 Fix DCO commit limit
   d2472ecc5 Add CRI release build
   1c7312e5d Update containerd systemd unit file
   ccda53760 Create etcd user in cloud init.
   e973719cc use containerd/project header test
   cb7ffd4b0 Fix indent in cni.template.
   3e03ba7aa Update deployment and integration test
   9c5451792 Add TaskMax=infinity
   523b0b3c6 Remove `noSnat`
   231d291b2 Use v2 config.
   1e1688d21 Use per-pod shim.
   87bd84a7b Add DefaultRuntimeName option.
   cfab98a5f Use ctr images import.
   5e3ac16cc Add `cri` as required plugin.
   5b9d8476e Use runc.v1 for now for debugging.
   e6e272e74 Enable runc.v2 as the default runtime in test.
   d19aa0fd2 Use local env to avoid writing to passed-in readonly env.
   ee6d69bbc Set default "" to extra runtime handler.
   474c79bd5 Expose vars to configure an additional runtime handler
   ce12477f4 Support docker 18.09 in the test script.
   146712101 Remove the unused `health-monitor.sh`.
   201ad4d3c Support netd in GCE bootstrap.
   5ce705750 Serve streaming on localhost by default to match k8s 1.11 default.
   b553fdaf3 Remove crictl on GCE for all cases.
   d8ce08fd9 Set stream server to serve on localhost on GCE.
   1629bab7f Make max container log line size configurable through cloud init.
   042378dcf Disable TLS streaming to work with new kubelet streaming proxy.
   37f2ecad9 Update cni.template
   b58b6fef8 Disable restart plugin on GCE.
   f938a166c Fix kube-container-runtime-monitor.
   91f8e61bd Use crictl installed in kube-up.sh
   5161f663e Add `unix://` prefix for socket addresses used by CRI remote client.
   1b995fcaf Add KUBE_CONTAINER_RUNTIME_NAME to fix fluentd support.
   48457a254 Try using preloaded containerd if no version is specified.
   c67a38b0b Add log level support.
   4453aac00 Improve gce bootstrapping in various ways.
   1bd3cdc57 Add cni config template support.
   d520fac50 Enable TLS streaming in all the setup.
   cdb4aec93 Use systemd service cgroup and oom score adj.
   af8bd8068 Fix for kube-up.sh and update several documments.
   005da4a9b Replace `ctrcri` with `ctr cri`.
   0e2bd216c Update GCE cluster bootstrapping and e2e test
   59e65e1f3 Enable container log rotation.
   85b4e69c9 Do not block on stream server close.
   2ea6584ca Add initial wait for health-monitor and use pkill -x.
   56b7ef2c4 The ENV is finalized as KUBE_KUBELET_EXTRA_ARGS.
   24a3a0a06 change crictl sandboxes to pods; other references to sandboxes
   8bc30e7a2 Update ocicni to main stream.
   a01071558 Add a separate CLI for cri-containerd `ctrcri`.
   a843a3064 Use registry-1.docker.io as backup
   ec649079a Put version into metadata so that version won't be changed across restart.
   7cbc1c8dc Set registry mirror.
   9f0816ac4 Configure container runtime cgroups for cgroup.
   be72f47ec Add runtime cgroup and fix a cli panic.
   680e21c43 Update all glog flags to `log-level`.
   d50b9dd64 Update containerd to 6c7abf7c76c1973d4fb4b0bad51691de84869a51.
   869ea6b0c Add document for kube-up.sh
   30cbfb62e Add OS and arch in release tarball.
   0512d1e0b Add `cluster` directory and health-monitor.sh.
   a1736f98a vendor: containerd/cri 4e6644c8cf7fb825f62e0007421b7d83dfeab5a1
   15fa7f378 vendor: update kubernetes v1.19.0-rc.4
   4a0ac319c vendor: golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4
   f80b4dc58 vendor: golang.org/x/net v0.0.0-20200707034311-ab3426394381
   5a9a6a145 vendor: golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
   aa40ebb41 vendor: json-iterator/go v1.1.10
   b4376e986 Update Vagrantfile for testing SELinux
   55c9eade3 Bump Golang 1.13.15
   e3e2c3946 update docs/rootless.md
   843360298 update runc to v1.0.0-rc92
   e20a5079e Add --cpu-quota, --cpu-period flag to ctr
   3cc2be2a8 Update cri-tools to v1.18.0-100-g2bf7674 for Go 1.15 compatibility
   628855923 Prepare 1.4.0-rc.0 release
   74e9aa7ab snapshots/devmapper: don't hardcord the platform strings
   adeba792f Add namespace query parameter for registry proxying
   5a190c707 Remove seccomp/Linux deps steps in GH Actions
   6988b4d64 remove `seccomp` buildtag
   362b7167a vendor: update cri (no more libseccomp cgo dependency)
   03b5a053e remotes: mark GetTokenScopes public
   b43a01a22 Change nodeset to `ubuntu-xenial-arm64-openlab`
   04b98bb0e Deprecate legacy shims
   b87023185 vendor runc library to v1.0.0-rc91-48-g67169a9d
   02afa9425 Add --cpus flag to ctr
   aa56cfc0a Import Windows manifest into test build, rather than copying by script
   5b1627410 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165
   1ec1e9eab Add Windows 10/Windows Server 2004 for integration tests
   faa4ff56e Usefully fail tests with unknown or bad Windows Build version
   3795dd41a Always report server log from verbose integration test runs
   4318f93f9 Add Spec() method to task
   3611efdce update cri to 8448b92d237e877bed1e4aa7a0baf0dee234
   1b320bcc2 update for cni config
   c2081369c Add doc about remote snapshotter
   403dc83a2 mount: retry executing the helper binary on ECHILD
   06fb93e0f Reject host-mode networking on Windows
   ca15cb0d8 Fix incorrect (cut-and-paste) method comment
   c8b14ae4c Set content labels based on content type
   d7b9cb001 shim: move event context timeout to publsher
   b97c660e1 cgroup2 CI: add RUNC_FLAVOR=runc
   1a7bbd1f7 vendor: update containerd/cri
   96099550b parseIDMapping: accept 32-bit IDs
   089672fff Bump Golang 1.13.14
   c383436af snapshots/devmapper: suspend a device to avoid data corruption
   71f11db8a Annotate bare ErrNotImplemented returns
   061d338ec CI: run CRI tests on Fedora 32
   decbb0499 RELEASES.md: fix a dead link
   b2ee43206 CI: add back shim v1 test
   c4418bb3a CI: remove an unreferenced variable
   212c29833 Updates to go-systemd and selinux
   b47c7ec27 Update to later version of critools with timing fix.
   7af3d7e17 Don't clash with GH Actions runner's containerd
   c520f819a Bump Go 1.13.13
   7119a2a15 platforms: don’t log arm variant error on darwin
   fc0448518 Update version to 1.4.0-beta.2
   cc493eba3 vendor: containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff
   7855b0a78 Make title similar with other CI workflow jobs
   852587cd1 [events/exchange_test] Fix deadlock in TestExchangeFilters
   d47c0392d Updating build doc to require Go 1.13
   09f453394 CI: {v1, v2} -> io.containerd.runc.{v1,v2}
   d7e59b141 enable removecontainer to forcibly remove containers
   963625d7b Update runc to v1.0.0-rc91
   c041970e9 update crun to v0.14
   a6dd1f27d update urfave/cli v1.22.1, go-md2man v2.0.0, blackfriday v2.0.1
   68b736ddf cio: should not open fifo for stderr if terminal
   57a9f0b50 Minor actions fixes/updates
   148cc8f71 [events] Fix deadlock in TestExchangeBasic
   aa191deff Change log for unknown mt to debug
   45c28f56b Add ability to use remapper labels versus remapping snapshot helper
   c76bf5504 Make unique snapshotter opt for label-assisted remapping
   331793118 allow user namespace remapping using snapshotters
   e977564a8 seccomp: allow 'rseq' syscall in default seccomp profile
   e7f069e2c describe content flow and dependencies
   b96f5f4b5 Fix deprecation warnings in CRI tests due to missing unix:// scheme
   fd99b6566 decrease log level of cgroup2 ToggleController error when running in UserNS
   2b0a994cc explicitly fail apparmor when !linux
   bebfbab03 vendor: update bbolt to v1.3.5
   1a83f9a63 Bump Golang 1.13.12
   03ab1b2ca Add config for allowing GC to clean unpacked layers up
   ee734e867 Add test case with backticks
   ea0687769 vendor: golang.org/x/text v0.3.3
   f1a469a03 shim v2 runc: propagate options.Root to Cleanup
   8897e1520 Add more test cases with single quotes
   cb91b1724 Add testcase containing mountpoint with escaped backslash
   87f9fdb06 Cope with double quotes in Linux Mountinfo
   4c49ff88c integration: assume TEST_RUNTIME to be io.containerd.runc.v2 by default
   785f4c5cd Bump CRI for 1.4x release
   730b7a932 Change the type of PdeathSignal
   d656fa38c restart plugin: support binary log uri
   0f831093c Update usage of whitelist in project
   d36810d66 overlay: use index=off to fix EBUSY on mount
   7213cd89d Process I/O: Fix goroutine leak
   ae08491bf waitForPid: fix goroutine leak
   8fcd5a1f2 Streamline hcs shim release flow
   ef0cf1264 Match version used in CRI project
   2be80f999 Add windows hcsshim to release pipeline
   3e95727f3 Make killing shims more resilient
   e64b14820 Revendor CRI to 62c91260d2f43b57fff408a9263a800b7a06a647
   3dd8242a6 Add host specific headers
   2f601013e cgroup2: implement `containerd.events.TaskOOM` event
   62fd1750e Revendor CRI to 8898550e348932e406049e937d98fb7564ac4e7a
   2bc4e90f6 Don't inadvertently clip release notes
   636c533d9 Add ctr subcommand to print default OCI spec
   230cf6ded Add unit test for func in remotes/docker/handler.go
   bb2b2825b Add release GH Action triggered by signed tag
   8f1ddb142 Update release for 1.4.0-beta.1
   c376f4f76 Move Windows testing to GH Actions
   322628347 Fix client tests to work on Windows.
   b8ccdcb07 Add `ctr` flags for configuring default TLS credentials.
   c5273930b Update CRI to 52c2c6b5df15790b671ebd6cbbc6039a4d30
   af131d725 cgroup2 CI
   e34bf08e5 riscv64 arch does not support -buildmode=pie
   0c9b05fa6 Fix image usage calculation error
   84619ee99 Fix configurations with no server provided
   06b0cd45b Fix nil pointer errors
   03755821d seccomp: remove the unused query_module(2)
   5765991f2 seccomp: Whitelist `clock_adjtime`
   db74d3115 unpacker: Fix data race and possible data corruption
   232518252 docker: fix data race on err
   d07a71b97 Bump Golang 1.13.11
   0207b7ff0 Enable running CodeQL on PRs that modify Action
   1a06884f1 Add CodeQL Analysis workflow
   563964e9d Trigger nightly builds on pull reuqest events
   77ab0104e Add release notes for 1.4 beta
   6eeed18cb vendor: opencontainers/go-digest v1.0.0
   7cdacdda8 Set codecov to not comment on PRs
   3e7bbb8a4 vendor: update containerd/cri, remove "docker/distribution" dependency
   9898dc2a6 Code about `task` in "README.md" is out of date
   f09e99909 vendor: containerd/go-runc 7016d3ce2328dd2cb1192b2076ebd565c4e8df0c
   d9d1d5b62 vendor: containerd/fifo f15a3290365b9d2627d189e619ab4008e0069caf
   c5078a5b7 vendor: containerd/continuity d3ef23f19fbb106bb73ffde425d07a9187e30745
   b437938d2 Transfer error to ErrNotFound when kill a not exist container, also add test case.
   2c77dc63a vendor: update containerd/cri to current master
   a4f8be1d4 vendor: kubernetes v1.18.2
   0d198fd09 vendor: roll docker/distribution back to latest (v2.7.1) release
   1b9640496 ConfigureHosts: remove deprecated DualStack option
   e9e765d6e Use tagged versions in vendor file
   bd3210d29 remove releases/*-beta.toml
   ed261720c Update ttrpc/typeurl to v1.0.1
   dc92ad652 Replace errors.Cause() with errors.Is()
   f212e7d1f vendor: github.com/pkg/errors v0.9.1
   63b7587cd snapshots/devmapper: fix race windown causing IO hangup
   24b331ad1 omit sudo when EUID eqto 0
   0088c2de8 sys: RunningInUserNS(): use sync.Once
   76c62f272 sys: simplify RunningInUserNS to original implementation
   6a9b94927 Remove remaining uses of libcontainer/system package
   37c839e59 sys/proc: remove GetSystemCPUUsage as it is unused
   1b66fecad Integrate sys.SetSubreaper, sys.GetSubreaper in sys/reaper package
   fffea312a move sys.Reap() into sys/reaper package
   295e74008 sys: remove custom setChildSubreaper const
   ec12d3042 vendor: sirupsen/logrus v1.6.0
   23aab35fd Remove libcontainer from containerd-shim
   ae7cdc814 vendor: update containerd/cri
   c1096864a Update to latest hcsshim - 0.8.9
   ea182aec8 vendor: sirupsen/logrus v1.5.0
   68f151593 vendor konsorten/go-windows-terminal-sequences v1.0.3
   046a520c9 vendor: update containerd/cri dc7afe8fbe53db06c3f883f6f8c9895a9dfb2314
   8e76d18ef remove if condition because it is handled by the sdNotify daemon func
   1a10211e3 WithLease: always return context and done fn
   98b30f469 Add commands to mount/unmount image from ref
   cd0e62f5c Allow more time for containerd to start for integration
   9687ba631 test: TestRuntimeWithEmptyMaxEnvProcs should cleanup
   b566859ac .zuul: update go version to 1.13.10
   32649fe30 Fix retrieval of golangci-lint specific version
   126e497e6 vendor: update ttrpc with 6e416eafd26e6e738df716b21d421d5b59702bb4
   0116352e1 runtime: ignore ttrpc.ErrClosed when delete task
   917e7646a Add binary IO tests
   9175401b2 Cleanup binary IO resources on error
   0dc7c8595 Don't use timeout package when stopping shim logger
   857408315 This config no longer exists, so remove from docs.
   e79d666cd vendor: update containerd/cri 61b7af7564602234662562a9d37e772f5a54facb
   61597b431 Disable Travis CI on master
   74ceb35f5 Small fixes to our Actions CI workflow
   7a252f3ca Build runc with selinux support
   041545cd6 Fix protobuild and CI check protos
   e3bc5c487 Use GH Actions CI status for badge
   49200a1dd CRI plugin needs selinux tag as well
   d97cca47e RELEASES.md: update release1.2 status
   4615111ba content/local: validate digest before calculating path
   a6828e8c3 CI: Some Go 1.13.10 updates that were missed
   7da1e13b5 Bump Golang 1.13.10
   35c14c6b5 sys/mount_linux: use pipe for communicating mount result
   f328f61b8 Update to selinux 1.5.1
   f7c2bf544 Migrate functions to actions
   d7c2513ff Update integration test timeout
   0caa23315 Rework shim logger shutdown process
   067aba732 Add test for default setup for host configuration
   d9a1c3f9e bugfix: add default host config if not set
   6d4429edd Setup dependencies between jobs
   e598e5e0c Add CRI tests
   4175ebf23 Move integration tests to Github Actions
   599547d9c Make binaries with Github Actions
   3968fb0a4 Revert "vendor: update go.etcd.io/bbolt v1.3.4"
   056d60224 vendor: update go-events to fix alignment for 32bit systems
   4fb3410f6 vendor: cilium/ebbf 4032b1d8aae306b7bb94a2a11002932caf88c644
   e822296fc vendor: runtime-spec v1.0.2
   3261fb5c4 vendor: containerd/cgroups b4448137398923af7f4918b8b2ad8249172ca7a6
   aa76d9537 Bump Golang 1.13.9
   ad090e67e man: move ctr.1, containerd-config to section 8, and fix generation
   356782cb4 Makefile: man page: rename containerd.1 to containerd.8
   547301cb0 Update ctr resolver to use new config package
   17b6050d2 Add Docker resolver configuration package
   dc131aa86 support loading certs from a directory
   c263c5b14 Add unit test for func in remotes/docker/handler.go
   c8d9c6f2a Add unit test for func in remotes/docker/handler.go
   fb9e3d9f2 vendor: update go.etcd.io/bbolt v1.3.4
   e4cbbc78b Move checks to Github actions
   c1a218195 Add docs for build tags used by cri.
   d654dbafa Allow the id for cgroup metrics to be changed
   78ab1d13d Correct logic of FIFO cleanup
   92a36dc10 Add version numbers for newly tagged repos
   0c78dacbc Move isFifo from process/io to sys/ and make public
   9529c69b8 seccomp: add 64-bit time_t syscalls
   ebd745f91 ctr: do not assume runc options by default
   e2269f2ae archive: skip chmod IsNotExist error
   bd2265300 Add devmapper configuration examples
   5ef66e48f ParseSignal: drop add'l check for numeric signals
   649f2aac6 add -v to shim binaries
   4ff9d6996 Increase golangci-lint timeout
   c00cf9a67 vendor: containerd/cri 92cb4ed9786a6cd271152ba1f862183d84701003
   488d6194f fix dial error when clean up a dead shim
   6e638ad27 Nit: fix use of bufio.Scanner.Err
   4326fc624 Update Golangci-lint v1.23.8
   4756258fa service_windows.go: remove unused "service" variable
   a9bd451ab Avoid duplicate imports of github.com/gogo/protobuf/types
   cad67b73f Update btrfs dependencies in docs for debian buster and ubuntu 19.10 * Fixes: #4090
   632023698 Partial revert of sys: windows: use golang.org/x/sys/windows
   0a7fd55f3 sys: deprecate EpollCreate1, EpollCtl, EpollWait
   7b06192f6 sys: windows: use golang.org/x/sys/windows
   1b7d1e81b vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0
   ddae905b8 Support NOTIFY_SOCKET
   b78dfbdfb vendor: golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf
   ba6796abd vendor: update kubernetes v1.18.0-beta.1
   f3d062423 vendor: sigs.k8s.io/yaml v1.2.0
   04c805e63 vendor: github.com/google/gofuzz v1.1.0
   12c7d6976 vendor: update containerd/cri 1a00c068864a59835ff442e0dddfa5a254be6bb3
   5607b23b0 vendor.conf: move some imports to match position with containerd/cri
   e3ab8bda6 Avoid allocating slice for finding Process
   1239f5403 export cgroups collectors
   8c9e84174 RELEASES.md: update release status
   e0a8fe7cb vendor: bump golang.org/x/crypto bac4c82f6975
   a687d3a36 Check error return from json.Unmarshal
   a3ca8a0df Add linux resource oci.SpecOpts
   00e6be9f4 Add ctr c info --spec flag to output spec
   3be12fe1c Do not loose snapshotter options
   8cddb5f91 Pass snapshotter opts during Pull
   a3685262f snapshots/devmapper: do not stop snapshot GC when one snapshot removing fails
   b6bf7b97c devmapper: async remove device using Cleanup
   c7eec0c17 Fix file header in builtins_cri.go
   f2edc6f16 vendor: update gotest.tools v3.0.2
   026e43806 Update to a released version of opencontainers/selinux (1.3.3)
   f8ade8deb Use named error return for service#StartShim
   985b26f2f AppVeyor: disable download progress on choco installs
   4105135e3 fix killall when use pidnamespace
   4dd75be2b Unify dialer implementations
   8e448bb27 vendor protobuf & grpc
   c134a9bef Use spec's mountLabel when mounting the rootfs
   1d888ad6a cleanup the image synchronously for Usage case
   18e581dd9 bugfix: cleanup dangling shim by brand new context
   fed8890e9 Enable CRI plugin for Windows builds as well
   84464b801 v2: Cancel shim log ctx when ttrpc is closed
   f3652d068 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382
   773adf7ab Remove the executable bit for api/*.txt files
   8e685f78c support building with BUILDTAGS="no_zfs no_aufs"
   61596169b Update .mailmap
   f44d36099 Update .mailmap with changes from release-branches
   499ab8a99 Update Golang 1.13.8
   246a560ed script: use github.com/kubernetes-sigs/cri-tools directly
   75d0c5f2e Fix incorrect comment from copy/paste of starting script
   0dd6d24d2 Fix reference to LICENSE in README.md
   89de113de Support 32-bit userspace on 64-bit ARM cores
   d8a0d29c2 Set octet-stream content-type on put request
   348e683ce Fix zsh autocomplete script
   263ab7014 vendor: bump gopkg.in/yaml.v2 v2.2.8
   4c3827889 vendor: update containerd/cri c0294ebfe0b4342db85c0faf7727ceb8d8c3afce
   f0652e143 Make tests less flaky
   bb8af922b Add support for custom wcow and lcow sandbox scratch sizes
   5e6d56ee2 Fix startup_delay within default configuration
   833701165 ctr events: do not exit on an error
   200241163 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1
   32ba75f0f Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
   e42110f32 Fix broken link to release-tool
   e2e07c9bc RELEASES.md update links to latest v1.2.11 and v1.3.2
   0dc69620b update dependencies of containerd/cri
   53ced5ffe update to latest containerd/cri (master)
   faf03c3d2 Pick up fix for CVE-2019-16884 in opencontainers/selinux
   923c05bed Bump to opencontainers/runc new version - v1.0.0-rc10
   e44d00865 Appveyor on_success field should be an array.
   a224937d2 Disable CGO for AppVeyor build steps
   75af17946 Pull: create image record after blobs download
   45a17cffb Vendor Microsoft/hcsshim with CGO removal
   94964b36d Update Golang 1.13.6
   22b73a9a7 vendor: bump containerd/btrfs to 153935315f4ab9be5bf03650a1341454b05efa5d
   1189cc40f snapshots: fix flaky TestMetastore
   35a8e6e58 sys: clean up process after test
   3eb57b01b Added IO metrics
   e859b8a92 gc: increase sleep time in test
   486d33631 test runtime v2 CPU settings
   66508589d fix: eventfd leak for v2 runtime with v1 cgroups
   9456040ac fix: eventfd leak
   2f0db8e2a vendor: bump prometheus/client_golang v1.3.0
   e10c91187 vendor: bump prometheus/client_golang v1.1.0
   845b91d6b vendor: bump prometheus/client_golang v0.9.4
   04506b87d vendor: bump docker/go-metrics v0.0.1:
   99911ea66 vendor: bump prometheus/procfs v0.0.8
   ed6ae8186 vendor: bump prometheus/common v0.7.0
   c02dc24ec vendor: bump prometheus/client_model v0.1.0
   77a3780c2 vendor: bump beorn7/perks v1.0.1
   e1221e69a revendor containerd/cgroups
   4d62d8795 bump microsoft/hcsshim to 0.8.7
   95fbf3dc2 Fix unpacker to pass use apply options
   3af3a7602 Fix filter errors
   7b52bc506 Add unit test for func in filter.go
   cd1cad9d5 Support disk usage in windows-lcow snapshot
   f3090ce80 ci: set pipefail in zuul script
   90cd777a6 platforms: fill default arm variant when parse platform specifier
   b553bc14a update docs/rootless.md
   94d499843 Add Makefile variable to skip test packages
   123af61c0 Add Cleanup to snapshot API
   465c11dc8 Fix build with gccgo
   52e477f94 Fix outdated comments
   b127b666a ctr: support $CONTAINERD_ADDRESS env var
   a4b423b19 overlay: test actual Opts
   067a66b90 .travis.yml: run test with crun
   1fb1d9321 v2: Fix missing ns when openShimLog on windows
   a18f77bea create local version of introspection service
   e739314ed mount: support FUSE helper
   87e2a9595 Fix a typo in task.go
   d82fa4319 v2: Call shim.Delete at first when create is failed
   493a36de9 Move label filter to snapshots package
   06f6ea099 switch nighly builds to Go 1.13.5
   c07e356d2 Update Golang 1.13.5
   072dfbaf3 Support pushing a specific platform of a multi-architecture docker image to a registry
   4ccb7aa22 Enable to propagate necessary information to snapshotter during unpack
   496836c09 Update containerd/console vendor for fix
   a057bfbd7 Add more adopters to ADOPTERS.md
   facedf898 Remove an empty line
   05d192929 Update checkImages to accept images.MediaTypeDockerSchema2Manifest
   c4ed3ff1e Replace ocispec.MediaTypeImageManifest with manifest.MediaType
   fbd46d709 runtime v2: Close platform in runc shim's Shutdown method.
   02dcf384b Disable criu tests in Travis CI
   62adc516d sys: mkdirAs: do chown if dir already exists
   49e7039a8 cpu metrics consistency
   b9d9bdf1f make cpu metrics consistent with v2 docs
   929ab521c fix system usage naming
   659c971ca task metrics fix
   23dbae3e7 Schema name fix
   17d61d6b7 Units fix
   f287bc229 Schema names fix
   6bfb24824 Fix prometheus metrics units
   b98cc7918 Added memory and cpu metrics for cgroupv2
   75efbaf67 Attempt to make device mapper snapshotter tests less flaky
   9eef69e3a Update after review comments
   43fca9eba metrics: rename pids_v2 to pids
   a022c2181 Improve host fallback behaviour in docker remote
   fa62b6d23 Use logrus instead of printf for warning
   08517e586 Allow empty scope authorization
   499fbb033 Improve install scripts
   e0011978f start.go: Improve help text
   9862cb8f8 support user remapping in ctr
   b02e20f12 cgroup2: enable controllers automatically
   8f870c233 support cgroup2
   caeacfce3 Correct grammar/typo in BUILDING.MD
   51a6813c0 Split uid and gid user ns remapping in oci
   30d92eff1 Defer layer download until unpack
   9d5a095b0 Bump containerd console for os.File changes
   cd23ad244 Bump go-runc for buffer race fix
   6a22a8fc9 Return the underlying images metadata
   787be0efe Modify ctr run to search for read-only flag instead of readonly
   cfb4f734d Make sure for next release branch appveyor runs
   f92470b3e Fix dependency in BUILDING.md
   a6b6097c9 Fix container pid.
   726dcaea5 update cpuinfo to make variant matches aarch64 and so on
   6fa9a42ea vendor.conf: sort imports alphabetically
   a44189d2f vendor.conf: pin all dependencies by git-sha
   55ea3dc9b vendor.conf: reformat to use columns
   8da434668 Fix cleanup error on content client test
   252d6550f Update cri and docker vendors
   8a66dc6ed bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def
   526c0db69 Support target snapshot references on prepare
   d1261b508 Update snapshot parent filter property to always exist
   11ef041ff Update golang.org/x/sys to recent commit
   afd33bce8 test add tests to spec_opts
   731e144a4 devmapper: update example base image size in README
   19f7f3ccc test: Do SynchronousDelete cleanup before testing ImageIsUnpacked
   0bb48aef0 Add `--log-file` flag for windows service.
   c56059162 Avoid deadlock in unpacker.
   32ef2e630 Update README
   82651d386 Cross build nightly builds (arm64, s390x, ppc64el)
   c479156b8 Add Github workflow for nightly builds
   856ea3055 Add client unpack opts
   3db1c3b8f Better support windows binaries.
   843423ec3 snapshots: return error if readSnapshot fails
   5bf2c6fc2 Fix panic on reference.Spec.Hostname()
   fda652be5 Update name for btrfs headers package
   a647407ca Fix dependency in BUILDING.md
   608791bfc Update to Golang 1.13.4
   cfb425fc1 Update .mailmap to reduce duplicates
   15669a1d3 Update to Golang 1.12.13
   8f74de9e9 ctr: allow specifying --runc-systemd-cgroup
   7f5d90076 ctr: allow specifying --runc-binary
   0f4374169 Add proto path /usr/include to Protobuild
   4c99c8132 mips: -buildmode=pie is not supported for the mips arch
   fdf7a795b Clarify requirements for identifiers validation
   76aa4e546 Use common identifiers package with less restrictive regex
   84879b7c4 Add CGO makefile flag
   7c016b655 add tests to server_test
   8f9eff4fe Support disk usage in windows snapshot.
   d21f0f116 windows process shim installer
   a2688b972 bring back aufs and zfs
   78be73662 Return not found error if no platform matched.
   d12b53a07 ppc64: -buildmode=pie is not supported
   5e5584196 Makefile: Drop vndr whitelist
   20e844a22 Use logrus trace support.
   66aa1d3ef Add snapshot walk implementations
   e8c14c07c Added filters to snapshots API
   f593efdf0 RELEASES.md: 1.1 EOL
   aaccfcbe2 Fix `containerd config dump`.
   c224edc5c apply: use naive applier when running in UserNS
   37b56cafc Add ctr metrics support for Windows/LCOW containers
   178469e2a Update Microsoft/hcsshim vendor
   3bf461ae8 Move autocomplete files to contrib/
   885232b72 bump google.golang.org/grpc v1.23.1
   6356e55be Update Golang 1.12.12 (CVE-2019-17596)
   074b453ac vendor: call vndr to remove useless pkgs and update vendor
   7177af84a Allow 202 response code for commit
   d52cbc19b snapshots/native: ignore xattr errors during CopyDir
   f8cca26f3 Handle large output in v2 shim with TTY
   d5b7bf51a Move flag.Parse in tests to TestMain
   54257bb5e Add local-fs.target to service file
   a6d3f4d30 Add device opts to ctr --privileged
   ffcb1cc9b Fix delete error code on the containerd daemon side.
   036db34f3 build: Fix manpage generation
   06be794cb Fix shim delete error code.
   901bcb223 Add distribution subpkgs to core
   eaef634ef version: use runtime.Version() directly
   25947db04 Add support for spec generation with host devices
   c0984941e adding go version to client description
   fe947e83d bump runc v1.0.0-rc9
   772032598 Fix flaky btrfs test
   e4e7e554d Make client's WithLease more flexible.
   18be6e371 Use cached state instead of `runc state`.
   f277665ed Bump runc to 1b8a1eeec3f337ab5d94f28980
   e33f70385 Add more detail on releases
   8ff5827e9 Update cri and cgroup packages
   b5fa55b0c ctr: Enable shell autocompletion
   45ce73567 Limit travis release script to a single build
   0cb7e4d5f Perfect documentations
   b172b7f9d Update release docs for 1.3.0
   394db03f1 Fix all media types in Accept header to match RFC
   90735a5d1 Update cri to 5d49e7e51b43e36a6b9c4386257c7d08c602237f.
   1b1b862eb Get CRI dependency versions from containerd vendor.conf.
   35d3bae1e AppVeyor: bump golang 1.12.10 (CVE-2019-16276)
   95dbbdc8c Bump runc for CVE-2019-16884
   62c2eea78 fix-up typo
   c5821baa4 Sync and stat btrfs loopback in tests
   5ea936362 Perfect documentation
   a0ae24b98 Word spelling correction
   85eac2550 Add release note for gc fix
   cbbb6a229 Update release note.
   fc31fa176 Update cri to 4ea022f82a55c449bf15bfc62ac8b0de968d81be.
   0b224ac7d Update metadata interfaces for containers and leases
   2a636f8c3 gen-manpages: Create man directory if it does not exist
   0a2129222 Check for more kill error types
   dd5122809 Don't search for state.json path
   6f31417d4 Generalize media types
   f3148d0b9 Add metrics type alias
   57b51b948 Move golangci-lint deadline to config file
   e84a84a5a Add function to set custom auth scope in context
   bca374aa1 Get media type key from context
   20d3fae3d Add Opt for modifying shm size
   83a72858f Makefile: increase deadline to 2m for golangci-lint
   b4211d94e fail on file not found for shim reconnect on containerd restart
   fd6299be9 Fix density spec generation
   3bc99755d Try set GOGC for golint
   19ecd49ed implement ctr -connect-timeout
   58892a3ba Skip darwin deploy
   5bb0281d1 Fix missing vendor packages
   5a656cacb Move manpage gen to separate binary
   6ed809168 Publish cri release to gs://cri-containerd-release.
   f997c30ec Skip cleanup in travis deploy and avoid gcs race condition.
   36c543a72 Remove extra CI testing on older Ubuntu
   4e8a49948 Encrypt the secret file in containerd/containerd.
   f3a5b8c0a Add command to generate man pages
   d1a12823b Update gcs cri release.
   424d33c5b Update go-runc to e029b79d8cda8374981c64eba71f28e
   3db5a5ad2 Fix darwin build for cri release
   1b4cec979 Update cri test to fix image reference test and fix gcs deploy.
   e3abd03ae Fix CRI release build.
   61f113e60 Automate CRI tarball release.
   c1fc21e92 ctr: use NewDockerAuthorizer instead of deprecated NewAuthorizer
   fa11147e5 Add --env-file to ctr
   5c576b026 Update and simplify mailmap
   c8cb864ce platforms: update known OS and arch values
   3d1fdaccc config_test: sort result before check
   8788af7f8 modify-document-duplicate-word
   d6a6e0b8b Support foreign and encrypted layers in the unpacker.
   a4482d9a6 Fix proxy plugin config validation
   01f726589 Support v1 configurations for config dump
   cd79e0edf travis: fix Xenial tests not being run on master
   555cb31fd Support configurable default platform in the client.
   c410f0eae Fix potential panic for task in unknown state.
   dd24d76a1 Fix potential containerd panic during graceful shutdown.
   fa546dc3e travis: don't run old Xenial LTS on pull requests
   94e4b6879 travis.yml: add TRAVIS_DISTRO env-var for easier identification
   214b8328d travis: add Bionic (Ubuntu 18.04 LTS) to test matrix
   b6c811b7a Update cri to 0165d516161e25e52b4ab52a404a00823f8f0ef6
   db3a71173 Add 'containerd config dump' subcommand
   779701b29 Add --seccomp flag to ctr
   86f8be86e Add sigprocmask to default profile
   f4927a298 fix mis-spelling in nvidia.go
   bc692cc59 Use default UNIX env when image has no environment
   a292bf0f2 bump containerd/zfs 2ceb2dbb8154202ed1b8fd32e4ea25b491d7b251
   97962976a Update ttrpc to 92c8520ef9f86600c650dd540266a00
   92a5b08a6 fix-grammar-mistake
   372472b5f archive: truncate modification time
   2d8a65b1b Export shim publisher functions
   6624a70d9 runtime/opts: move WithNamespaceCgroupDeletion from containerd to its own package
   8266a3c5e fix-up spelling mistake
   09b184c15 rootfs: use new ctx to cleanup instead of canceled one
   2f54a7cb6 bump containerd/ttrpc 9abb3e268010ea188f4e4051f77eb5aca49315fb
   eb7a6bf02 bump google.golang.org/grpc v1.23.0
   56bcc7767 Handle layers with the same digest in unpacker.
   6f8fb9ee5 add WithImageName container opt
   a40c3830d Add option to pull all metadata
   55f737bd3 bump hashicorp/golang-lru v0.5.3
   ed1df65c2 bump hashicorp/go-multierror v1.0.0
   cbb3a3790 bump hashicorp/errwrap v1.0.0
   5cab0d3f3 update the max if cur will be greater than max for setting the limit
   24b9e2c1a Merge configs section by section
   8ebffecbc Use map for stream processors
   aae2d0d75 delete unnecessary checks and fix a test
   9e183f5e5 add cli option to download all manifests
   ea6c749e3 Update config doc
   19cd0a4f1 Append slices when importing config files
   b5f03eacd Pin to libseccomp 2.3.3
   4d11bb36a devmapper: activate dm device if snap device marked as activated
   bca085753 Fix toml plugin decoding
   a1e3779ca Support config imports #3289
   6e2228df7 Vendor github.com/imdario/mergo
   6cf031e1e Pass ttrpc address to shim via env
   89eae6429 Cleanup: fix some typos in code comment
   d7e1b2538 Allow explicit configuration of TTRPC address
   03aafaa1c Update the integration test.
   60f73b6cf Support simultaneous image unpack.
   550518ab8 Read trailing data on apply
   348e9f7c3 Update release notes and mailmap
   8acf5a142 Update release note for CRI plugin for 1.3.
   041e9debb Revendor github.com/Microsoft/hcsshim
   21174cb49 Change bufferSize back to 32
   1073868e5 runtime: only check killall for init process
   64a0b2eb2 Revendor to remove unused dependencies
   7379fa663 Remove the process default ENV
   5023d96ad Remove Windows EventLog logging hook
   276363938 Try to preserve exit event order
   04caf1fc4 Ignore fifo error when using v2 multi-container shim
   9cbd18ac7 Update cri to f1d492b0cdd14e76476ee4dd024696ce3634e501.
   bcc4a146e Support applying with parent directories
   5a0ff41c8 Update continuity vendor
   80d31d15b Update fifo for typed errors
   6d0e355c6 cleanup code typos in leases.go
   bee4c1a8a Add retry and non-blocking send for exit events
   0d27d8f4f Unifi reaper logic into package
   bb4c92c77 Fix shim hung
   1c30d4d04 bugfix: override image.Env with process.Env, rather than be contrary
   7682acb9e AppVeyor: update to go 1.12.9
   81386df91 Add direct unpack support for overlay and aufs
   1b389b362 AppVeyor: update to go 1.12.8 (CVE-2019-9512, CVE-2019-9514)
   2e8ea9fd6 Allow timeouts to be configured in config
   a80db38c3 blkio.go: correct help message word spells.
   3ef26cd87 bump x/sys to fix riscv64 epoll
   2ff7183cc AppVeyor: update to go 1.12.7
   c017e0efe Use a child context for errgroup in dispatch
   75771c463 Add usage function to client
   b6fca48fe bump go.etcd.io/bbolt v1.3.3
   0dadef19c Add docs for stream processors
   d085d9b46 Remove encryption code from containerd core
   282b19efd remotes: remove useless line
   a3a30635e namespace: Copy ttrpc metadata before setting header
   04b7f1b59 Remove ppc64le from travis
   2fac3ee27 Add release notes for stream processor
   116140977 Limit multiple platform manifests to one for size check
   fe3638e88 Add UnpackOpts to RemoteContext
   d8322e38c cast Rdev of Stat_t to uint64 for mips
   af7b7cdb0 Save default namespace in the client.
   552a0b1be Handle stderr in stream processors
   3fded74bc Add unpack opts
   26b90619e Pass apply opts through rootfs/* code
   e1489f93c Use named pipes for windows processors
   134d3c815 Add windows apply code
   f867401c6 Use fds and pass Payloads over diff api
   366823727 Add server config for stream processors
   97a98773c Add StreamProcessor for apply
   0bc5df035 Clarify text on `ctr` support/inclusion
   0a3769eec pusher.go: error message typo correction
   635ccc067 Add cri release notes
   4667ee47a Update Microsoft/go-winio v0.4.14
   7792c23b1 Limit default matrix to runc v2 runtime
   9f0bc2b53 Add UUID and server info to introspection
   08483d18a v2: Close ttrpc connection when `Delete()`
   4b5dfaee1 Completely remove Windows v2 in-tree shim
   2398421d5 Fix travis matrix
   a5940da62 Remove `ctr cri load` and update cri-tools to v1.15.0
   0a4bf1bd1 Mark faulty devices
   c99961c6c Update cri to b213648c5bd0a1d2ee42709c10dff63fbfee3ad7
   4b4ce4a26 remotes: remove unnecessary string formatting
   d1b9ee543 travis: Enable travis CI for ppc64le arch
   bb9968891 Fix containerd on windows.
   3e52e2902 Fix bug in export named manifest option
   594f42319 protobuf: Bump Protobuf version to 3.7.0
   c965a6c4d Prevent push by tag for sub-manifests
   5cf79913e gpg: Use a Pipe() rather than a file
   6a2512879 gpg: Pass the passphrase to the gpg2 tool using a file
   3741fd859 Remove deferred flag when removing devmapper device
   b16e7c5de Update pkg/ttrpcutil with improved pipe dial logic
   daf12cd19 Improve error return from AnonDialer on Windows
   4d5a0e19e Mark faulty device in one transaction
   878a3205c Better error recovery in devmapper
   578216950 Add note about pb.txt files
   f68186e10 Improve custom cgroup test
   8a6190856 Add 1.3 beta release note
   612628c2f fix wrong spells in compression.go
   98ead46d1 Call Update of snapshotter plugin
   f543f2fbc Call CloseIO when stdin closes in ctr
   eb4b3e877 Fast path getting pid from task
   8cd480c23 Specify protocols in ctr encrypt recipients
   e3cc9c20c bug fix:#3448
   c27e48d66 fix mis-spelling in client.go
   22f44c44d Add garbage collection doc
   02826345c Add option to compress blobs on import
   9da7d3036 archive: return chtimes error with path information
   3d1fa6969 Implemented constructors for both encryption and decryption
   392668d00 ctr:Support deleting multiple tasks at a time
   05a2b63e8 Create CryptoConfig constructors in place of dcparameters
   1c7eab197 Allocate a conhost during Windows service startup
   364de4c35 Wrap creation of CryptoConfig in constructors
   51bc61533 Update releases doc for 1.1 release
   101d4b78e Add timeout to task state calls
   e097ab8bb Disable windows integration tests
   f055bdb0a Remove windows v1 runtime
   d531e7849 Modified image_enc_test to use a different image from other tests
   5e5ae23d8 test: Check manifest.Platform before dereferencing
   1945e26ac Add concurrent execs in stress tests
   ffa86b25f Add new shims for checking binary sizes
   c118c45f8 Change image_enc_test so that it more reliably delete images
   c6d437fd7 Corrected lease implementation
   c00517a94 Made fixes and optimizations to encryption GC
   725d3ad8c Add --device flag to ctr
   518be1cb0 Fix bug in setting request body
   dd0a45dfe Add flat GC label for leases
   dca17853d Add WithLinuxDevices Opt
   804ae89be errors: use errdefs errors in client and commands
   dde436e65 Crypto library movement and changes to content helper interfaces
   bf8804c74 Implemented image encryption/decryption libraries and ctr commands
   30c344394 Add crypto dependencies/vendoring
   a1f3ebaec Update cgroups to c4b9ac5c7601384c965b9646fc51588
   b72673fdc Makefile: allow custom base path to install
   fab016c7a runtime/v1/linux: ignore ErrCgroupDeleted in Task.Start
   ce0d2489a Fix regiression from #3403 with snapshot cmd
   0b29c9c37 Update resolver to handle endpoint configuration
   63ceaf877 Add testing log context
   f63eab32e Add testing log hook to context
   61d930ad5 Move specific errors to their respective packages
   82826df9b Small refactor due to CI linter changes
   ef7f46eb7 Fix linter errors
   2b521e25a Switch to golangci-lint
   abc152d14 fix name in containers file
   70b00a0fa fix variable name
   4988424fc * fix: view snapshot is deleted before diff
   db95af43f centralize harded-code message
   d643f1dc8 images: only fetch the best matched manifest info
   550a6f1d7 Fix integration tests
   1918ee4d1 Respect default snapshotter label
   47d2ac090 Improve default label handling
   4e2fc81ed Add aliases to namespaces subcommand
   2a92c2741 Bump travis to criu 3.12
   5ed1a3ce0 Add RELEASE note about config versioning
   6601b406b Refactor runtime code for code sharing
   7d2117245 Fix metadata content store to call writer digest after commit
   af93e4009 ctr: Add images tag subcommand
   ec8d9d3d7 shimv2: remove the dead task from runtime task list
   d3e1a51f8 vendor: bump go-runc
   46af8ccd2 Check exec log flags compatibility
   9fda4a5fe Bumps the version of go-winio.
   6b59b425e Support --log-uri for exec subcommand
   844c58102 Add cgroup delete opt for ns deletion
   3d3dbc8fb Handle RequestTimeout and TooManyRequests
   7dfc605fc Set shim OOM scores to +1 containerd daemon score
   719a2c594 Robust pid locking for shim processes
   2d0379115 docs: remove shim_no_newns in ops.md
   0886e4f1b No need to keep 2017 DockerCon doc
   650a7e5c1 Add hashsum for release archives
   cb4a8f51a bump runc v1.0.0-rc8-32-gf4982d86
   bb41ef87f bump libseccomp-golang v0.9.1
   174c4907d Fix shim's file IO logging
   1a8df3f23 Reserve exec id to prevent race
   245052243 Add timeout for I/O waitgroups
   12a14c442 fix: polish log to make more clear
   ec78305c4 Close the inherited socket fd
   fbf96d302 Fix path in LogFile creator
   63a8dee60 Switch to GitHub's new issue templates.
   341c7c144 Update dependency containerd/cgroups
   5e0d79380 Fix bugs in BinaryIO creator
   75f183887 Allow opts to flow to the backend snapshotter during snapshot creation.
   95f9bbf18 Add timeout in load shim v2
   62e9e1169 switch to a working link
   41e1bb832 Fix snapshotter getter in client code
   052551573 Ensure labels is not nil in differ
   67cf9f7f0 AppVeyor: Bump golang 1.12.6
   0b7abc02b ttrpc updates for interceptors, close, and metadata
   d15a06b19 docs: Fix typo to some markdown files in /docs.
   dd7c0aabc remotes: support cross-repo-push
   bca566736 Make newBinaryIO public
   31afff294 Fix backwards compat with v2 containerd configs
   bb0087280 Add user agent header to all requests
   9547d269a Add v2 server config support with plugin URIs
   9e0cd529d fix shim std logs not close after shim exit
   fb6b0ae4c Update x/sys, x/net and bbolt modules to support Risc-V
   ed308ea1e Unmount rootfs with separate Remove() in bundle
   cf7fb14ef Update timestamp atomic write
   4f6ba8286 Ensure close in content test
   faf925ba2 Handle EOF from ReadAt in content.ReadBlob
   fa6a9f063 Add ttrpc namespace support
   42f24b57e Update ttrpc to a5bd8ce9e40bc7c065a11c6936f4d032ce
   7531c66d5 Ensure that the rootfs dir is created in the bundle
   bf24fb0ca Close file r.log after used to release resources.
   5b9a43d2e Fix seccomp contributed profile for clone syscall
   cee19d1e6 Change restart delay for Windows service to 15s
   8a388d623 leases: support resource management
   ac4485c76 Add support to gRPC errdefs for context cancel/deadline exceeded
   bbe45e446 add Restart=always to unit file
   a274dbe82 Fix run with specified platform
   48b81e872 Do not return error when rootfs already exists.
   e0c4fe411 Forcibly sync writes on lcow layer.vhd after write
   5e2d7efd8 Use a single custom annotation for export
   41b7b0e0d Ensure namespaced writer commit has correct namespace
   7f79fbb24 Move ttrpc client to pkg/ttrpcutil
   5b7a327c4 Improve atomic delete
   fe6a2b03e Add shim cgroup support for v2 runtimes
   62609d66d Fix typo in description comment
   90c6c1af4 Pass options on shim create for v2
   690706286 ctr: make ctr shim command easy to use
   7b06c9a1c Add TTRPC client
   5e962dd8b Remove unused Resize method from initState
   66036d920 v1: Respect the `shim_debug` flag when load tasks
   a6a888cb5 Bump ttrpc
   fbb80b951 containerd-shim: redirect output into stdout fifo
   543d1e807 Add travis_wait to prevent vndr timing out
   00bc2f5cf Update to Golang 1.12, and prepare for ppc64le
   67b45aef4 Add WithoutRefreshed metadata
   ad25c1a9c Improve ARM platform matching
   bd27bef4a Move checkpoint and restore commands to new files
   cf6e00854 Fix fd leak of shim log
   6f463d350 test/snapshots: umount before committing snapshot
   388705317 snapshots/devmapper: deactivate thin device after committed
   bdd7dce31 Add OpenLab CI configuration
   660554d67 Fix error handling for task deletion.
   2ed8e60fa bump google.golang.org/grpc v1.20.1
   d1c59513d bump google.golang.org/grpc v1.12.2
   2f22d8e67 Fix broken link to containerd logo
   cb7c780af ctr images import: add --no-unpack option
   ee902afa5 Compute manifest metadata when not provided.
   5c9811ded Cleanup dead v2 shim.
   cfc36388b Remove redundant error checks
   38e369657 Use cancel on errors
   eded188f4 Fix misspells
   969035bcb Stop logging error on v2 multi shim log failure
   c7f067f27 Update vendor/ with new required vndr go.mod files
   8c5779c32 bump containerd/ttrpc 699c4e40d1e7416e08bf7019c7ce2e9beced4636
   dff745680 Return NotFound error for kill and delete in deleted state.
   5d17ed230 Update cri to 2fc62db8146ce66f27b37306ad5fda34207835f3.
   e5aab17a0 bump opencontainers/selinux v1.2.2
   dd85aea62 bump runc v1.0.0-rc8
   5b9bd993a differ: fix deadlock on commit error
   48f46516a Support disabling default setup of shim logger.
   c79c7921c bump docker/go-units v0.4.0
   dfa51c927 runtime-v1: kill shim in cleanupAfterDeadShim
   0376dd460 Don't write dumped stacks to file for ETW capture state
   e6fc0ed22 Convert Windows CI to use Microsoft MCR image urls
   06a3a480c bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f
   a333dbcfb Update x/crypto to 88737f569e3a9c7ab309cdc09a07fe7fc87233c3
   0fd02564a bump gocapability
   7718d060e Write stack dump to `os.TempDir()` as well
   a4942ca4f Fix error on pull hang in CI
   6bcf463b0 Move to sha-specified test image for nanoserver
   cfb8b5573 .mailmap: update Akihiro Suda's email address
   be2cbd0b2 Access to client's GRPC connection object
   78f3dc433 Allow dumping stacks via ETW capture state
   05dd66b2e Update go-winio in vendor.conf
   c9059c767 bump mistifyio/go-zfs f784269be439d704d3dfa1906f45dd848fed2beb
   63c7a879b Requeue events in the shim publisher
   fc167f957 Correct PusherFunc helper to match Pusher intf
   a7af3c13a Correct import path in services/server package
   9cc58781f Check task list to avoid unnecessary cleanup.
   97d247cd0 Rename `hrpc` to `tcpServer`
   047348e19 Add dialer for events service
   ae87730ad Improve shim shutdown logic
   a12f836d5 Use $TEST_RUNTIME for cri test.
   4b3b99ea1 Add support for required plugins.
   4ba756edd Fix API forward events for shims
   1a1f8f11a Set nofile to 1048576
   b911ae342 Add tcp service for grpc listeners
   a6f587e4c Use ttrpc to publish runtime v2 events
   a8a805cad Add ttrpc server to containerd
   c93d64543 Add GetOOMScore function
   ae5ca8177 Refactor mount path check and add comments
   7045801fd delete the ingest when any errors happen during resuming status
   dcf6023c4 Extend release timeline
   d5b770aa8 Introduce 'clean-test' target in Makefile
   2583d9e42 update gogo/googleapis v1.2.0
   a98df70da update containerd/btrfs af5082808c833de0e79c1e72eea9fea239364877
   aa8dccd22 update containerd/aufs f894a800659b6e11c1a13084abd1712f346e349c
   ed61d7f68 bump containerd/zfs and dependencies
   d667628ca bump github.com/pkg/errors v0.8.1
   68ef17835 bump github.com/BurntSushi/toml v0.3.1
   1978c0b74 bump gotest.tools v2.3.0, google/go-cmp v0.2.0
   2741dbe2c contrib: Dockerfile: bump go 1.12
   a84f87d84 contrib: Dockerfile: add a base stage
   a07e12cde contrib: Dockerfile: reformat, and use --no-install-recommends
   ba9e1ea23 contrib: Dockerfile: use build-arg for go-version
   4754d2aee Update image export to support Docker format
   74eb0dc81 Return event publish errors.
   10cf21dcf Export ExitStatus init func
   a73358749 Update cri to 6d353571e64417d80c9478ffaea793714dd539d0.
   de1da8be3 Update handling of registry errors
   8d1ae237e Always add compressed blobs to Docker import manifest
   c0f0b2131 Apply PR feedback
   2a5e4c4be Skip rootfs unmount when no mounts are provided
   abfc89ce0 Update CRI to master
   4730088cb Update runc to resolve selinux issues
   2d11f5e6d Regenerate protobufs
   830b0294c Update protobuf v1.2.0
   7c1365b46 bump sirupsen/logrus v1.4.1
   01310eaeb do not use unkeyed fields in compose literals
   90085a7ac Add empty file to prevent build from failing
   baf340343 Extend Applier's Apply() method with an optional options parameter
   8784eb630 Move snapshotters benchmark to a separate package
   adc4fa217 Use pkg/errors for all errors
   c22effb16 fix parseInfoFile does not handle spaces in filenames
   559dfa59a Add configurable plugin path
   d9526f5c4 Move CloudFormation template to contrib
   ae04c1660 runtime: guard Close() until both streams are complete
   e96ac2040 runtime: log IO error when copying output streams
   515be73c8 Add snapshotters benchmark
   872296642 fix shouldKillAllOnExit check for v2
   fa5f744a7 fix shouldKillAllOnExit check
   f7f6dd7b4 test: add custom cgroup test
   2b8df8309 bump containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1
   bc6ac0878 update opencontainers/runc v1.0.0-rc7
   808b22353 Fix race and panic.
   87289a0c6 devmapper: implement Usage
   010b4da36 devmapper: implement dmsetup status
   871094016 Windows: Build shim binary from Microsoft/hcsshim
   e16e99593 Vendor Microsoft/hcsshim@8abdbb82
   5d50b9c2b Extend adaptImage function with annotations case
   388c8a176 Fastpath opt and ExecProcess loading
   a84966451 Windows:ProgramFiles to ProgramData
   6034c1950 Windows:Create root/state with ACL
   7361b1987 Update Windows lcow differ to set NT VIRTUAL MACHINE\Virtual Machines SID
   4c9b5ef8e Update vendor github.com/Microsoft/go-winio
   d15832a4c Address review comments
   8f8fd3c3a seccomp: whitelist statx syscall
   908b77108 Add code to return message field of returned registry errors
   9a8727cf0 Allow to import an image for the default platform only.
   4506eb45b seccomp: whitelist io_pgetevents
   f3ff95ab7 decouple api.ContentServer implementation package from bbolt dependency
   14a050688 ctr: fix image cmd ArgsUsage
   bdd84abf0 Add additional capability handling opts
   a631796fd horten the unix socket path for shim
   b858cfb41 Makefile: allow overriding package name
   7ca2c3d68 contrib/nvidia: export helper binary path and list of Nvidia capabilities
   a7aeffc22 Update mailmap for cgroup authors
   e6ae9cc64 Shim pluggable logging
   506b81548 remotes: add distribution labels to blob data
   b8d40b353 update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
   09cf2a629 Extend metadata images test with fieldpaths for Annotations
   5124f9ee5 Write the Annotations map into the bolt db
   02cc1485d Prepare boltutil for reading and writing another map
   1e893b19c devmapper: add no_devmapper build tag
   79248fea2 Add test for ocispec.Descriptor Annotations
   34f377295 Allow WithNewSnapshot and WithNewSnapshotView to take in snapshotter options.
   aaae81189 Update checkpoint opts with runtime handling
   160737d2c Fix no pivot and keyring opts
   0b711d616 Copy annotations around where necessary
   4d2a26d75 BUILDING.md: update testing section
   6424a3603 ctr/commands/images/push: don't show progress if it is debug mode
   7cfb99ab9 Add content gc ref labels from containers, images, and snapshots
   f0d5dd3c8 Use unix.SignalNum in ParseSignal on unix platform
   1745951ba Vendor golang.org/x/sys d455e41777fca6e8a5a79e34a14b8368bc11d9ba
   e13a4b67e Update the snapshotter docs to refer to the snapshots package for WithLabels.
   277147135 Fix issue with NewFIFOSetInDir with Terminal true
   828f6eb84 Fix a bug in shim log on Windows that can cause 100% CPU utilization
   c6703d4c7 Add missing annotations map to Descriptor for gRPC transfer
   d2bec5422 Bump cgroups to dbea6f2bd41658b84b00417ceefa416b97
   208957ba3 devmapper: proper cleanup in pool device test
   734989c2a Update README
   fb8048371 docs: Add NAME section in all manpages
   95f0a4903 devmapper: rollback thin devices on error
   adf5c640f devmapper: don't create or reload thin-pool from snapshotter
   7efda48c5 devmapper: more precise way of checking if device is activated
   37cdedc61 devmapper: add linux tags, fix build
   0c6d194cc devmapper: add README and minor fixes
   2218275ec devmapper: register plugin
   cec72efc2 devmapper: add snapshotter
   3a7588252 devmapper: add pool device manager
   6e0ae68e1 devmapper: add snapshotter config
   fcd9dc274 devmapper: add pool metadata
   809e5fd3b devmapper: add dmsetup
   fe05e4d1a devmapper: add losetup
   d83e4e9b3 Vendor Microsoft/go-winio@v0.4.12
   e0d7ed12a Windows: Enable ETW logging
   cbc032ed3 Update go.etcd.io/bbolt to v1.3.2
   5e8406984 Update travis to xenial worker
   84a24711e Add runc.v2 multi-shim
   6bcbf88f8 Move runc shim code into common package
   fd6ac5d02 Vendor sirupsen/logrus@1.3.0
   b553a12be runtime: allow specifying supported platforms with config
   f6ac73d71 fixing typo and added a missing comment.
   4b3e0a8aa metadata: merge snapshot labels with metadata's labels
   88f19a90a Windows: Update stackdump event name
   14f7e5272 Unpack should set 0755 when the parent directory doesn't exist.
   a6f43b549 Add website update to release process
   17b2c8498 Update supported versions
   b87e9eef3 Add ExecID for StateResponse
   bfb266ab5 Fix some misspells in helpers_test.go
   dc09ed1e1 Add image handler wrapper
   a4f7b3758 Add support for TaskDelete event on exec in RuntimeV2
   00895670e Stop sending stderr with TTY on Windows
   6a21728fb Use defaults package for listing namespace labels
   14eaad0cd Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736)
   98766e863 Vendor opencontainers/runtime-spec 29686dbc
   225d9b120 Fix LCOW layer ordering
   0190e5f39 Removes the oci.test.exe binary.
   525802f9c Use distribution's reference.ParseDockerRef
   3538174e6 Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580
   2dacef07c Add shim skeleton code
   59ea134ce OCI Modifiers for Windows
   d25007e54 Add structure documentation for metadata
   823b7a8a0 Cleanup releases directory
   7bd8dcd0d Fix potential containerd panic.
   41f540621 Add release documentation
   f014adfa1 readme: fix example for checkpoint
   dfcc5942f Fix deadlock in Windows runhcs shim exec
   da2ab865e Add documentation for using namespace labels for configuring defaults.
   952d58297 Add a separate lock for pid.
   9777d7689 Revert "use state machine management for exec.Pid()"
   34323985a Use labels only when default namespace is provided and prefer given options.
   59432aaec Take default runtime and snapshotter from namespace labels
   6629f853a BUILDING: update BUILDING.md
   d7ed40307 Add image pull concurrency limit.
   7f5d7ff6b Update snapshots docs with garbage collector label
   34672d483 metadata/gc: remove the noop-loop for snapshot reference
   6ed293ba9 Fix bug in shim path lookup
   d63099c4a Allow matching shim path side by side with containerd
   764afa0d1 Include extension for shim binary format on Windows
   dfebb404c remove excessive []byte(s) conversion
   85aa8ad36 Move task events to runc v2 shim
   28f8a90bd Update cri plugin to 4dd6735020f5596dd41738f8c4f5cb07fa804c5e.
   bb32c0f61 Revendor github.com/Microsoft/hcsshim v0.8.4
   f44469698 Return out of windows signal handler
   26ab393e7 Use context.Background for `O_NONBLOCK` `OpenFifo`.
   7db569771 unix.UtimesNanoAt now supported on Darwin
   132ee9b82 fix: linter issue
   6468619d7 Implement the Runtime v2 Shim async task model for runhcs
   b444d7d50 Handle additional cleanups from prior PR
   4ef9bf5c8 Windows: Publish exit status correctly in TaskExit
   90caf6f6a Windows:NewDirectIOFromFIFOSet
   3aec9e7be bump up runc
   0befa457d Update ttrpc to support context timeout.
   946e40266 Update releases files
   c5a8c9fc1 Fix issue in runhcs shim CloseIO
   31616e794 Fix runhcs shim bug in Create with "len(Rootfs) == 0"
   bcd4cc51c Fixes a bug in runhcs shim Exec.Pid
   bc76e01a8 Update runhcs options to include CRI Sandbox support
   a79879e9d Add security audit report to README
   dee0945e1 Fix spurious ttrpc client shutdown error log on success
   64a004641 Update cri-tools to v1.13.0.
   b55c9c6c3 Update cri to 4b4b2abb2eb19ad6913a6c5d2a6869a0a43a3fc1.
   17b77aeb0 Fix annotation typo errors
   5137fc6f1 bugfix: support application/octet-stream during pull
   568b5be93 runtime: add Add/Delete method in PlatformRuntime interface
   7faaa64cf fix: miss remove temp file in createSnapshot
   4247f2684 metadata: define content sharing policy
   1be86af10 add test for WithImageConfigArgs
   36e4dc603 Ensure bundle removal is atomic
   723797d32 docs: remove website leftovers
   d4ecb00f6 checkpoint: return empty image if checkpointPath exist
   f2344db40 do not mutate defaults in replaceOrAppendEnvValues
   da9471fb1 fix oci.WithImageConfigArgs for windows
   897afeaf3 Revert "Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)"
   0ec6526fd Update the delete docs for Runtime V2 on Windows
   e20ba5fa5 test: add test for c/r without image
   40267382c fix ctr image export not found error
   8be05eb23 Fix freebsd build
   7b1e6f323 fix: use func args instead of build new one
   9baecf66b fix: fix defer in loop
   903abf33c Fix annotation typo error
   52de37170 Fix CI due to Golang 1.10.6 / 1.11.3 regressions (workaround)
   2d96aad77 bugfix: unpack should always set the snapshot gc label
   a2a424197 Add timeout and cancel to shim fifo open
   6f944e419 fix: SCHILY.xattrs should be SCHILY.xattr
   6ccb0d062 fix: remove dead code
   2db0c6c26 Explicitly stating utf-8 when fetching oauth token
   603e97a9e ctr/content: make editor flag is required
   7ac221e8d Adding ctr memory and cpu flags
   822ae18b1 Update cgroups to 1152b960fcee041f50df15cdc67c29db
   3ae8e8a30 Add shim config for shim binary options
   66c20f2b7 Update runc to 96ec2177ae841256168fcf76954f7177af
   79499980e Kill should still work in stopped state.
   27ba2db10 Revendor github.com/Microsoft/hcsshim to v0.8.3
   2d3a4f99e should no defer when detach
   70084ea6c Add /proc/asound to masked paths
   6daf8b778 Eliminate misuses of errors.Wrapf
   a404f27a0 Add more adopters
   6593399e9 cr: support checkpoint/restore without image
   996c60616 fix: fix error info start capitalized
   b4a642f6a Add dumpStacks support for containerd on Windows
   40d898a82 Windows: Allow running as a service
   97dd5df66 Update runc to v1.0.0-rc6
   09bf314bf Cache shim v2 exec.LookPath results
   fd16bf6d4 runtimev2: add image-path and work-path for c/r
   83ebcf999 runtimev1: add image-path and work-path for c/r
   f90e5d564 Move ctr run --isolation to Windows only
   bbc2a995f use state machine management for exec.Pid()
   461222dba fix: should get runtime name from container info
   2101b1362 add ctr delete --exec-id to debug DeleteProcess
   a2e8ab9ff remotes: avoid panic with default resolver conf
   7d91d631e Lock `KillAll`.
   9639db552 refactor: no need defer in closeAll
   e76a8879e fix pipe in broken may cause shim lock forever for runtime v1
   b3438f7a6 fix pipe in broken may cause shim lock forever for runtime v2
   956e49a36 Revert v2 dropped events
   1d4105cac Use named pipes for shim logs
   581a63ce4 Add build requirement doc on fedora/centos
   01f5aa387 add flag -d for ctr t exec to run a service in container
   51ad4d302 change args usage for ctr c create
   bd2a21985 fix container cmd args may parsed as ctr args
   90880078b Adding a --load-kmods flag to the NVIDIA OCI hook
   e1a59ba0f Update runc to 10d38b660a77168360df3522881e2dc2be
   8e25ca6bf Revendor github.com/sirupsen/logrus to v1.0.3
   0e7a70dbf skip already exists content
   6f2f4e434 checkpoint: add copts to checkpoint; save snapshotter to annotation
   40caece8d update tests
   4fdf720b8 move rw to opt; make snapshot opt; move to NewContainerOpts
   147208061 add image name and runtime name media types; remove task operation on checkpoint
   ce0673fd7 Restore take image
   0e4d9da75 remove task handling from Restore
   2d3db08da refactor spec and snapshot restore into opts
   45c700a95 refactor checkpoint and restore to client
   555ea3fb4 Ignore modprobe failures in ExecStartPre (systemd unit)
   abd971cfb Revendor github.com/Microsoft/hcsshim
   831a41b95 Fix process locking and state management
   c4feaa75c fix: fix failed to get container-shim relation with io.containerd.runc.v1
   c524b9ce4 Partially revert the event discard change in #2748.
   38d7d59e8 enhance: update v1/v2 runtime
   ce6d4c9a9 add docs/rootless.md
   dd0539b09 ctr: add --cgroup for oci.WithCgroup
   18363d0c9 Add ADOPTERS.md file
   354dab0ca Forward ctr.exe --debug as io.containerd.runhcs.v1 options
   a33ad4024 Implement io.containerd.runhcs.v1 shim log opts
   ec3dbd155 Add io.containerd.runhcs.v1 shim proto options
   7d70d2b78 Fix Makefile to run protobuild on paths with spaces
   83f4ab885 makefile: remove emoji on Linux
   8329a491b Build Windows V1 and V2 runtimes always
   124194b98 check task existence before new task
   a02f7cea8 bugfix: use skip-verify flag in ctr instead of insecure
   2bb7da843 Fix mingw version back to working version with Golang
   068880ff1 Add custom headers option to dockerResolver
   fa912a79b update link for slack invite
   7c85d873a fix typo in ResolverOptions.Credentials documentation
   232a06349 Increase reaper buffer size and non-blocking send
   00ba92364 bugfix: CloseIO should return correct status code
   1cc93460d Bump aufs for unsupported errors
   1301813f7 Update ZFS for unsupported warnings
   16aaf6c06 Change unsupported snapshot warnings to INFO
   07237e34e Bump to Go 1.11.x
   c206da795 optimize shim lock in runtime v1
   c5a0c7f49 Add build option "GODEBUG=1"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-14 20:34:04 -04:00
Bruce Ashfield
43a5cc7f03 docker: add more kernel-module RRECOMMENDS 
The kernel RRECOMMENDS, wasn't complete and in some minimal systems
we are missing modules to start dockerd.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-08 18:36:41 -04:00
Mingli Yu
d898bd1ca5 lxc: remove deprecated options in lxc*.service 
Remove deprecated options in lxc*.service to silence below warning:
 # systemctl status lxc
 [snip]
 /usr/lib/systemd/system/lxc.service:17: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether.
 /usr/lib/systemd/system/lxc.service:18: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-10-01 23:08:10 -04:00
Hongxu Jia
80058c0bee sloci-image: set CLEANBROKEN = 1 
Workaround rebuild failure

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-21 17:31:53 -04:00
Chen Qi
2711b81afd criu: backport patch to fix build failure for gcc-10 
Backport patch to fix build failure for gcc-10.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-02 16:30:44 -04:00
Bruce Ashfield
1dcd6c6406 podman: update to 2.0.7 
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-09-01 15:41:30 -04:00
Khem Raj
3fafab50cf lxc: Disable warnings as errors 
Instead of disabling particular warnings, its better to use configure
switch, since some of these warnings could be compiler specific

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-08-27 16:28:20 -04:00
Bruce Ashfield
65abc719f3 lxc: update to v4.0.4 
While we are updating, we refresh one patch to remove fuzz, otherwise
there are no significant changes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-08-18 13:53:25 +00:00
Bruce Ashfield
cc122f0f0a runc: update to 1.0.0-rc92 
Refresh patches for new context, drop CVE patch that has been integrated
into the main repository.

The following changes are part of this refresh:

   49a73463 Merge pull request #2547 from kolyshkin/moar-v2-tests
   9ada2e6d Merge pull request #2539 from kolyshkin/ext-pidns-nits
   b70de388 Merge pull request #2540 from kolyshkin/unify-test-inval-cgroup
   0509b5ba Merge pull request #2553 from AkihiroSuda/support-kernel59-caps
   6dfbe9b8 support CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE
   54c53b10 Merge pull request #2533 from XiaodongLoong/fix_cgMode_redundant
   a2d1f85b Merge pull request #2542 from AkihiroSuda/go1.15
   4c71a68c upgrade Go to 1.15
   dedadbf9 Merge pull request #2545 from kolyshkin/go-mod-vendor
   809dc640 Merge pull request #2548 from kolyshkin/int-cr-fix
   7f64fb47 use criu cgroup mode const from go-criu
   5026bfab tests/int: fix error handling and logging
   2de0b5aa libct/integration: enable some tests for cgroupv2
   985bd24f Makefile: fix go vet/fmt
   a340fa9b Merge pull request #2543 from mrunalp/release_1.0.0-rc92
   1ff1bf34 VERSION: back to development
   ff819c7e VERSION: release 1.0.0-rc92
   f6688549 Merge pull request #2499 from kolyshkin/find-cgroup-mountpoint-fastpath
   234d15ec Merge pull request #2520 from thaJeztah/bump_runtime_spec
   78d02e85 Merge pull request #2534 from adrianreber/go-criu-4-1-0
   637d54b7 cgroups/fs tests: unify TestInvalid*Cgroup*
   e54d1e47 libct: initialize inheritFD in place
   8b973997 libct: criuNsToKey doesn't have to be a method
   3de3112c Merge pull request #2525 from adrianreber/external-pidns
   6f4616dd Pass location of CRIU binary to go-criu
   267b7148 Upgrade go-criu to 4.1.0
   d6f5641c Merge pull request #2507 from kolyshkin/alt-to-2497
   46243fce Merge pull request #2500 from kolyshkin/fs-apply
   e0c0b0cf libct/cgroups/GetCgroupRoot: make it faster
   901dccf0 vendor: update runtime-spec v1.0.3-0.20200728170252-4d89ac9fbff6
   97b02cf9 Merge pull request #2531 from JFHwang/gomod_update
   59352963 Update go.mod
   67169a9d merge branch 'pr-2529'
   95a59bf2 devices: correctly check device types
   09e103b0 Tell CRIU to use an external pid namespace if necessary
   610c5ad7 Factor out checkpointing with external namespace code
   d65df61d Merge pull request #2521 from zvier/master
   92e2175d cleancode: clean code for utils_linux.go
   86d9399c Merge pull request #2524 from adrianreber/fix-travis
   b7683d6b Fix .travis.yml warnings
   f8749ba0 merge branch 'pr-2509'
   f9850afa Merge pull request #2518 from XiaodongLoong/redundant_chroot_param
   af283b3f remove redundant the parameter of chroot function
   b7d8f3bf Merge pull request #2516 from ide-rea/fix-typo
   47fbafb7 Merge pull request #2510 from kolyshkin/criu-el7
   76b05e6d fix small typo
   cf1273ab Merge pull request #2498 from kolyshkin/v1-code-cleanups
   545ebdd1 Merge pull request #2511 from kolyshkin/fedora-dnf-fix
   fbf047bf Merge pull request #2501 from XiaodongLoong/systemderror-fix
   f57bb2fe fix TestPidsSystemd and TestRunWithKernelMemorySystemd test error
   ce54a9d4 Merge pull request #2514 from rhatdan/windows
   6d5125f8 tests/int/checkpoint: don't remove readonly flag
   9806eb55 Merge pull request #2513 from lsm5/custom-PREFIX-in-Makefile
   d78ee471 Allow libcontainer/configs to be imported on Windows
   5517d1d7 Merge pull request #2505 from XiaodongLoong/redundant-copy-src
   ffe9f0b0 Vagrantfile.centos7: do not ignore script failures
   bc1a9c11 allow customizable PREFIX variable
   a73ce38d cgroupv1/FindCgroupMountpoint: add a fast path
   c27b8e7f tests/fedora32: retry dnf
   92f49821 tests/centos7: add criu
   98c7c01d tests/int/checkpoint: require cgroupns
   c1adc99a cgroup/fs: rework Apply()
   417f5ff4 tests/int/checkpoint: fds and pids cleanup
   819fcc68 merge branch 'pr-2495'
   2a322e91 cgroupv1: remove subsystemSet.Get()
   daf30cb7 cgroups/fs: rm getSubsystems
   2e225799 libct/cgroups/fs.GetStats: drop PathExists check
   11fb9496 cgroups/fs: rm Remove method from controllers
   30dc54a9 Merge pull request #2503 from giuseppe/cgroup-fixes
   3f811318 Merge pull request #2490 from kolyshkin/dev-opt
   32034481 cgroup, systemd: cleanup cgroups
   46a304b5 Merge pull request #2502 from tjucoder/master
   e638eda0 Merge pull request #2496 from kolyshkin/freeze-nits
   a4cb88f3 redundant souce code copy There is a docker -v flag for test in Makefile
   2deaeab0 cgroup: store the result of IsRunningSystemd
   ab35cfe2 make sure pty.Close() will be called and fix comment
   62a30709 cgroups/fs/path: optimize
   46b26bc0 cgroups/fs/Freeze: simplify
   cd479f9d cgroupv1/freezer: don't use subsystemSet.Get()
   3cb1909c Merge pull request #2493 from thaJeztah/bump_ebpf
   108ee85b libct/cgroups: add SkipDevices to Resources
   f49adb52 vendor: update cilium/ebpf v0.0.0-20200702112145-1c8d4c9ef775
   6f5edda9 merge branch 'pr-2491'
   d0e92896 VERSION: back to development
   24a3cf88 VERSION: release 1.0.0-rc91
   1b94395c Merge pull request #2476 from kolyshkin/cpt-err-log
   834c4573 Merge pull request #2482 from kinvolk/alban/integration-tests
   327284eb integration tests: fix typo in README.md
   0fa097fc merge branch 'pr-2481'
   dff7685c Merge pull request #2459 from tedyu/linux-cont-set-cfg
   e643db6e Merge pull request #2479 from haircommander/fix-systemd-version
   04806abd nsenter: fix repeat close() operations
   9748b487 Merge pull request #2229 from RenaudWasTaken/create-container
   861afa75 Add integration tests for the new runc hooks
   2f7bdf9d Tests the new Hook
   6a0f64e7 systemd: add unit tests for systemdVersion
   6369e388 systemd: parse systemdVersion in more situations
   819c40b3 Merge pull request #2478 from kolyshkin/get-pids
   89516d17 libct/cgroups/readProcsFile: ret errorr if scan failed
   406298fd Merge pull request #2466 from kolyshkin/systemd-cpu-quota-period
   12a7c8fc Merge pull request #2411 from kolyshkin/v1-specific
   ccdd7576 Add the CreateRuntime, CreateContainer and StartContainer Hooks
   e232a71a tests/int/checkpoint: fix checks, add logs
   a6ddabd6 tests/int/checkpoint: whitespace cleanups
   e751a168 cgroups/systemd: add setting CPUQuotaPeriod prop
   8c5a19f7 libct/cgroups/fs: rename some files
   cec5ae7c libct/cgroupv1/getCgroupMountsHelper: minor nit
   0626c150 libct/cgroupv1: fix TestGetCgroupMounts test cases
   0681d456 libct/cgroups/utils: move cgroup v1 code to separate file
   7db2d3e1 libcontainer/cgroups: rm FindCgroupMountpointDir
   d244b405 libct/cgroups: improve ParseCgroupFile docs
   5785aabc libct/cgroups: make isSubsystemAvailable v1-specific
   d5c57dce libct/criuApplyCgroups: don't set cgroup paths for v2
   52b56bc2 libc/criuSwrk: remove applyCgroups param
   142d0f2d libct/cgroups/utils: make FindCgroupMountpoint* v1-specific
   44b75e76 libct/cgroups: separate getCgroupMountsV1
   82d2fa4e Merge pull request #2453 from AkihiroSuda/vagrant-centos7
   3834222d libct/cgroups/utils: getControllerPath return err for v2
   55c77cb9 Merge pull request #2472 from kolyshkin/paths-nits
   dd2426d0 libct/cgroups: fix m.paths map access
   a77d7b1d libct: don't use GetPaths
   5b247e73 Merge pull request #2338 from lifubang/systemdcgroupv2
   c76af1d2 Merge pull request #2470 from katarzyna-z/kk-fix-numa-stats
   601fa557 Merge pull request #2414 from kolyshkin/criu-notif
   71e63de4 Fix #2469 omit memory.numa_stat when not available
   fdc48376 Merge pull request #2458 from kolyshkin/cpu-quota-II
   3ddb913a Merge pull request #2467 from mrunalp/save_state_atomic
   ed9d93e2 Merge pull request #2455 from AkihiroSuda/docs-cgroup2
   a4a306d2 Write state.json atomically
   499357d6 add Vagrantfile.centos7
   262ef563 update.bats: support systemd <= 226
   1f366c6a tests/rootless.sh: fix executing bats in non-root PATH
   6246bb11 spec.bats: avoid using `git -C`
   bd236e50 integration: skip checkpoint tests if criu binary not found
   b2163040 Merge pull request #2454 from AkihiroSuda/ci-fix-rt
   1b03e725 tests/int/update: more cpu period/quota cases
   a92b0327 cgroups/systemd: fix set CPU quota if period is unset
   1832bf0b tests/int/update: add cpu-quota -1 tests
   7c2b2349 tests/integration/update: enable cpu quota for v2
   32746fb3 update: do not overwrite old cpu quota/period
   4189cb65 cgroups: remove cgroup.Resources.CpuMax
   8b964677 cgroups/systemd: unify adding CpuQuota
   2ce20ed1 cgroups/systemd: simplify gen*ResourcesProperties
   9d275d32 Set configs back when intelrdt configs cannot be set
   4be54355 add integration test for ps/kill after the container stopped
   1b97c04f merge branch 'pr-2445'
   2a046695 merge branch 'pr-2446'
   79fe41d3 Replace sed with jq for more readable json manipulation in tests
   13865704 add cgroup v2 documentation
   10d1e1ed test "update rt period and runtime": fix up runtime and period
   0853956d Merge pull request #2452 from AkihiroSuda/silence-criu-not-found
   13020202 Merge pull request #2449 from katarzyna-z/kk-fix-2440
   9087f2e8 fix path error in systemd when stopped
   4ad326a3 silence "which: no criu"
   92f831bf Fix #2440 omit cpuacct.usage_all when not available
   d1ba8e39 (*initProcess).start: rm second Apply
   dbe5acad Merge pull request #2439 from kolyshkin/int-noswap
   332a8458 Merge pull request #2443 from kolyshkin/kmem-fixup
   0f7ffbeb Merge pull request #2416 from AkihiroSuda/exec-join-init-cgroup
   a30f2556 merge branch 'pr-2018'
   c91fe9ae cgroup2: exec: join the cgroup of the init process on EBUSY
   ed1f14af tests/int/events: skip oom test if no swap
   755b1016 test/int/update: simplify mem+swap presence check
   8d943633 test/int/update: simplify mem+swap checks
   e664e732 merge branch 'pr-2442'
   2679754a Merge pull request #2441 from kolyshkin/check-cpushares
   3fe6e045 cgroupv1/systemd.Set: don't enable kernel memory acct
   3249e237 cgroupv1: check cpu shares in place
   774a9e76 Merge pull request #2420 from tedyu/criu-proc-wait
   3ba3d9b1 Wait for criuProcess once
   0f3d6bec Remove pullapprove integration
   64dbdb86 Merge pull request #2437 from kolyshkin/remove-faster
   a78e21b5 tests/int/delete.bats: fixups
   0ac92aab cgroups/fs2: make removeCgroupPath faster
   4f0bdafc Merge pull request #2412 from lifubang/removecgpath
   a891fee8 Merge pull request #2434 from kolyshkin/cpu-quota-fix-minimal
   be546787 cgroupv1: minimal fix for cpu quota regression
   82fa1941 remove cgroup path recursively in cgroup v2
   1f737eeb Merge pull request #2426 from kolyshkin/mem-swap-unlim
   7673bee6 Merge pull request #2395 from lifubang/updateCgroupv2
   68391c0e use lazy-pages ready notification for criu >= 3.15
   7ab13298 libct/criuNotifications: simplify switch
   3c6e8ac4 cgroupv2: set mem+swap to max if mem set to max
   27515719 add testcase for enable all supported controllers in cgroupv2
   a67dab0a Revert "CreateCgroupPath: only enable needed controllers"
   3c8da9da Merge pull request #2422 from kolyshkin/criu-j
   d57f5bb2 cgroupv1: don't ignore MemorySwap if Memory==-1
   21cb2360 merge branch 'pr-2427'
   6a6ba0c0 Merge pull request #2423 from kolyshkin/systemd-v2-pids-max
   8cd84e35 Merge pull request #2333 from opencontainers/add-cii-badge
   59897367 cgroups/systemd: allow to set -1 as pids.limit
   95413ecd tests/int/update: add cgroupv1 systemd CPU checks
   06d7c1d2 systemd+cgroupv1: fix updating CPUQuotaPerSecUSec
   7abd93d1 tests/integration/update.bats: more systemd checks
   e4a84bea cgroupv2+systemd: set MemoryLow
   4fc9fa05 tests/int: simplify check_systemd_value use
   716079f9 Merge pull request #2406 from cyphar/devices-cgroup-header
   5b601c66 README.md: fix a dead link
   cd4b71c2 Merge pull request #2409 from adrianreber/go-criu-4-0-0
   28cd9d9c Merge pull request #2419 from tianon/buildmode-arch-toggle
   9a808dd0 Merge pull request #2424 from giuseppe/errno-ret
   944e0570 Update to latest go-criu (4.0.2)
   41aa1966 libcontainer: honor seccomp errnoRet
   510c79f9 vendor: update runtime-specs to 237cc4f519e
   236ec045 Dockerfile: speed up criu build
   be66519c Remove "-buildmode=pie" from platforms that don't support it
   b207d578 Merge pull request #2418 from AkihiroSuda/fix-bad-rebase-2413
   2fa3c286 fix "libcontainer/cgroups/fs/cpuset.go:63:14: undefined: fmt"
   f369199f Merge pull request #2413 from JFHwang/2392-spec-check
   53a46497 Merge pull request #2401 from kolyshkin/fs-cpuset-mountinfo
   825e91ad Merge pull request #2341 from kolyshkin/test-cpt-lazy
   67fac528 Merge pull request #2410 from lifubang/swap0patch
   5aa0601a validateProcessSpec: prevent SEGV when config is valid json, but invalid.
   7fc291fd Replace formatted errors when unneeded
   9ad1beb4 never write empty string to memory.swap.max
   dc9a7879 cgroups: add copyright header to devices.Emulator implementation
   3f1e8869 Merge pull request #2391 from cyphar/devices-cgroup
   2db3240f libct/cgroups: rm GetClosestMountpointAncestor
   f1603526 libct/cgroup: prep to rm GetClosestMountpointAncestor
   85d4264d Merge pull request #2390 from lifubang/threadedordomain
   4b71877f Merge pull request #2292 from Creatone/creatone/extend-intelrdt
   41855317 Merge pull request #2271 from katarzyna-z/kk-cpuacct-usage-all
   fe0669b2 don't enable threaded mode by default
   ba6eb282 tests: add integration test for paused-and-updated containers
   4438eaa5 tests: add integration test for devices transition rules
   b810da14 cgroups: systemd: make use of Device*= properties
   afe83489 cgroupv1: devices: use minimal transition rules with devices.Emulator
   2353ffec cgroups: implement a devices cgroupv1 emulator
   24388be7 configs: use different types for .Devices and .Resources.Devices
   60e21ec2 specconv: remove default /dev/console access
   b2bec980 cgroup: devices: eradicate the Allow/Deny lists
   859a780d cgroups: add GetFreezerState() helper to Manager
   a79fa7ca contrib: recvtty: add --no-stdin flag
   df3d7f67 Merge pull request #2393 from kolyshkin/criu-pi
   58bf0835 Merge pull request #2400 from kolyshkin/bats-1.2.0
   17aee8c4 Dockerfile: bump bats to 1.2.0
   2b9a36ee Merge pull request #2398 from pkagrawal/master
   867c9f5b Merge pull request #2386 from kolyshkin/gordian-knot
   ca1d135b runc checkpoint: fix --status-fd to accept fd
   4aa91014 Honor spec.Process.NoNewPrivileges in specconv.CreateLibcontainerConfig
   f0daf651 Vagrantfile: use criu from stable repo
   714c91e9 Simplify cgroup path handing in v2 via unified API
   2c8d668e Merge pull request #2387 from kolyshkin/g-knot-prepare
   1d143562 libct/cgroups/fs: access m.paths under lock
   51e1a084 libct/cgroups/systemd/v1: privatize v1 manager
   d827e323 libct/cgroups/systemd/v1: add NewLegacyManager
   fc620fdf libct/cgroups/fs: privatize Manager and its fields
   5935bf8c libct/cgroups/fs: introduce NewManager()
   24f945e0 libct/cgroups/systemd/v2: return a public interface
   63854b0e newSetnsProcess: reuse state.CgroupPaths
   9a3e6326 notify: simplify usage
   6621af89 merge branch 'pr-2381'
   828e4ad8 epbf: update github.com/cilium/ebpf
   b18a9650 test: update devicefilter tests
   128cb60f ebpf: fix big endian issue for s390x
   2b31437c Merge pull request #2281 from AkihiroSuda/rootless-systemd
   47a73431 Merge pull request #2373 from kolyshkin/logging-nits
   492cfd8b Merge pull request #2352 from lifubang/eventsv2
   bf15cc99 cgroup v2: support rootless systemd
   657407ff fix runc events error in cgroup v2
   64416d34 Merge pull request #2382 from thaJeztah/bump_selinux
   b48bbdd0 vendor: opencontainers/selinux v1.5.1, update deprecated uses
   407e9f9d Add reading of information from cpuacct.usage_all
   a57358e0 Merge pull request #2370 from lifubang/swap0
   96310f04 Merge pull request #2377 from thaJeztah/ticks_simplify
   402d645c Simplify ticks, as the value is a constant
   a0ddd02b Merge pull request #2378 from thaJeztah/bump_logrus
   12ba2a73 Merge pull request #2380 from thaJeztah/userns_sync_once
   9df0b5e2 libcontainer: RunningInUserNS() use sync.Once
   e8bece65 vendor: sirupsen/logrus v1.6.0
   609ba79f Merge pull request #2371 from kolyshkin/criu314
   6161d255 Merge pull request #2375 from tedyu/wait-lazy-close
   a70f3546 let runc disable swap in cgroup v2
   db29dce0 Close fd in case fd.Write() returns error
   f6439a84 Merge pull request #2372 from thaJeztah/improve_error_readability
   1b84a21c Don't print errors twice
   64ca5481 libcontainer: simplify error message
   2adfd20a libcontainer: don't double-quote errors
   c52a598d Remove fatalf()
   d2061ee5 Vagrantfile: install less packages
   e9e31f70 Vagrantfile: use criu 3.14 from testing
   9634a80c Dockerfile: bump criu to version π (3.14)
   dd8d48ed Merge pull request #2358 from kolyshkin/fs2-nit
   c3b0b13f cgroups/fs2: don't always parse /proc/self/cgroup
   051d6705 Merge pull request #2363 from AkihiroSuda/vagrant-f32
   85c44b19 Vagrantfile: use Fedora 32
   c18485ad Merge pull request #2359 from cyphar/terminal-docs-subreaper
   0a4dcc02 Merge pull request #2331 from lifubang/StartTransientUnit
   eea0fbfe docs: terminals: mention subreaper requirement
   bfa1b2aa check that StartTransientUnit and StopUnit succeeds
   80e2d1f1 Merge pull request #2357 from kolyshkin/makefile-2
   a1f007e0 Merge pull request #2340 from AkihiroSuda/fix-2339
   772d0909 Makefile: rm RELEASE_DIR and SHELL
   731947d5 Makefile: fix/clean install-man
   df72e898 Makefile: rm uninstall* targets
   a036e890 Makefile: add -mod=vendor to go test
   2fe9e31a Makefile: don't use -mod=vendor if GO111MODULE=off
   19ba7688 Makefile: test, localtest: no need to invoke make
   fc54f6d7 Makefile: rm $(SOURCES), mark targets as PHONY
   b7dadf0f Makefile: rm $(allpackages)
   60c647e3 fs2: fix cgroup.subtree_control EPERM on rootless + add CI
   53fb4a5e Merge pull request #2342 from kolyshkin/vagrant-rm-ct
   799d9481 intelrdt: Add Cache Monitoring Technology stats
   b19f9cec Merge pull request #2343 from lifubang/updateSystemdScope
   0fd8d468 Merge pull request #2318 from lifubang/linuxResources
   baa20026 Merge pull request #2327 from kolyshkin/cpt-err
   084144a6 travis: run vagrant tests on the host
   634e51b5 Merge pull request #2335 from kolyshkin/cgroupv2-cpt
   10ba72a6 add integration test for runc update with systemd
   49ca1fd0 Merge pull request #2347 from kolyshkin/v2-allow-all-devs
   78ff2797 Merge pull request #2334 from kolyshkin/makefile
   c420a3ec Merge pull request #2324 from kolyshkin/criu-freezer
   5b4bff96 Merge pull request #2336 from kolyshkin/bats-core-2
   44024426 Merge pull request #2330 from KentaTada/use-linuxnamespace-const
   fbeed522 Makefile: add -mod=vendor
   1fe709a0 Makefile: use $(FOO) not ${FOO}
   d09a6ea9 Makefile: split long lines
   64ec3557 Makefile: abstract go build flags
   55d5c99c libct/mountToRootfs: rm useless code
   20959b16 libcontainer/integration/checkpoint_test: simplify
   1d4ccc8e fix data inconsistent when runc update in systemd driven cgroup v1
   7682a2b2 fix data inconsistent when runc update in systemd driven cgroup v2
   dbe44cbb merge branch 'pr-2348'
   fb99bbc7 merge branch 'pr-2326'
   44747953 libcontainer: use x/sys/unix instead of the hardcoded value
   d4bc7c10 Dockerfile: use bats-core
   32d52a0f tests/checkpoint: enable for Fedora 31 / cgroup v2
   9280e356 checkpoint/restore: fix cgroupv2 handling
   00a2844a tests/checkpoint: add simple c/r test for cgroupns
   75a92ea6 cgroupv2: allow to set EnableAllDevices=true
   cdce577d Merge pull request #2332 from kolyshkin/cgroupv2-cr
   7376bdc1 Fix reference to badge
   d5e68ceb tests/checkpoint.bats: fix test hang/failure
   bf172ef4 tests/checkpoint.bats: consolidate requires checks
   e216457e tests/checkpoint.bats: simplify status checks
   69d599dd tests/checkpoint.bats: fix $? checks
   46be7b61 Merge pull request #2299 from kolyshkin/fs2-init-ctrl
   5c2a9782 Add CII Badge to README
   5b38ef71 Merge pull request #2320 from kolyshkin/vgr
   ab276b1c cgroups/fs2/Destroy: use Remove, ignore ENOENT
   992d5cad travis: enable fs2 driver test on fedora
   4b4bc995 CreateCgroupPath: only enable needed controllers
   bb47e358 cgroup/systemd: reorganize
   de113415 cgroups/fs2/CreateCgroupPath: nit
   b5c1949f cgroups/fs2/CreateCgroupPath: reinstate check
   813cb3eb cgroupv2: fix fs2 cgroup init
   60eaed2e cgroupv2: move sanity path check to common code
   dbeff894 cgroupv2/systemd: privatize UnifiedManager
   88c13c07 cgroupv2: use SecureJoin in systemd driver
   9c80cd67 cgroupv2: rm legacy Paths from systemd driver
   b6cc3975 travis: rm BUILDTAGS
   5f0424c9 Vagrantfile: rm disabling weak deps
   cd5f4fd9 Merge pull request #2325 from kolyshkin/nits-2
   3006db2b checkpoint: don't print error if --pre-dump is set
   3de86133 libcontainer: use consts of Namespace from runtime-spec
   480bca91 cgroups/fs2: move type decl to beginning
   353e9177 cgroups/fs2: do not use securejoin
   9ae21e8d MAINTAINERS: add Kir Kolyshkin
   58f970a0 cgroups/fscommon: use errors.Is
   af6b9e7f nit: do not use syscall package
   b3a481eb libcontainer: fix Checkpoint wrt cgroupv2
   bf0a8e17 Merge pull request #2322 from lifubang/forceCgroupNS
   d0f9b9ce default join cgroup namespace in runc example
   e4981c91 merge branch 'pr-2317'
   d2a9c5da using default allowed devices when linux resources is null
   7a978e35 Defer netns.Close() after error check
   9f6a2d4d Merge pull request #2305 from kolyshkin/fs2-fix-default
   191def70 Merge pull request #2308 from kolyshkin/exec-no-tty
   d1e4c7b8 intelrdt: add mbm stats
   56aca5aa Merge pull request #2295 from kolyshkin/integration-cgroups
   5c6216b1 Merge pull request #2278 from iwankgb/memory.numa_stats
   84583eb1 Enable integration tests in cgroupv2 env
   0965c970 tests/integration: disable swap tests for v2
   483f9a0c tests/integration: add some cgroup v2 tests
   3dfa5434 tests/integration/update.bats: simplify file creation
   b8b46419 tests/integration: rm kmem from upgrade tests
   ba3ee7fe tests/integration/update.bats: rm obsoleted comment
   3f6a31b7 tests/integration: simplify cgroup paths init
   3ae93580 tests/integration: check_cgroup_value: simplify
   13431e0e Merge pull request #2312 from tedyu/cgrp-path-rollback
   614bb966 cgroupv2/systemd: Properly remove intermediate directory
   939bed2a runc exec: don't enable terminal unless -t is set
   ccbb3364 Merge pull request #2304 from AkihiroSuda/travis-do-not-ignore-cgroup2-failures
   d65ba5fa Merge pull request #2303 from KentaTada/remove-unneeded-syscall-import
   ea36045f cgroupv2: fix fs2 driver default path
   16d21e2d travis: move `cgroup-v2` out of `allow_failures`
   e58a406b libcontainer: remove unneeded import
   7fa13b27 intelrdt: change parseCpuInfoFile to return struct
   9a93b737 Merge pull request #2288 from kolyshkin/mem-swap
   7fe0a98e Exposing memory.numa_stats
   5c15da9e Merge pull request #2300 from kolyshkin/fix-max
   568cd62f cgroupv2: only treat -1 as "max"
   c86be8a2 cgroupv2: fix setting MemorySwap
   d3fdacb9 Merge pull request #2296 from KentaTada/update-readme-for-go1.13
   a4bbc39d Merge pull request #2297 from giuseppe/cgroups-use-newstats
   8b7ac5f4 libcontainer: use cgroups.NewStats
   d5e91b1c Merge pull request #2289 from AkihiroSuda/fix-TestGetContainerStateAfterUpdate
   0c7a9c02 Merge pull request #2294 from tklauser/unused-consts
   6cda0eac Merge pull request #2293 from tedyu/restore-svr-close
   f8f03700 README.md: update Go version to build
   21d7bb95 Close criuServer so that even if CRIU crashes or unexpectedly exits, runc will not hang
   3e678c08 Remove unused consts testScopeWait and testSliceWait
   e4363b03 Merge pull request #2291 from kolyshkin/errors-unwrap-v2
   ec8c6950 Merge pull request #2235 from Zyqsempai/add-hugetlb-controller-to-cgroupv2
   b2272b2c libcontainer: use errors.Is() and errors.As()
   c39f87a4 Revert "Merge pull request #2280 from kolyshkin/errors-unwrap"
   4540b596 Fix TestGetContainerStateAfterUpdate on cgroup v2
   0c6659ac Merge pull request #2261 from AkihiroSuda/vagrant-kvm
   f8e13885 Merge pull request #2280 from kolyshkin/errors-unwrap
   6ca9d8e6 Merge pull request #2283 from tedyu/runc-path-in-prefix
   b26e4f27 Merge pull request #2284 from tedyu/criu-svr-close
   e3e26caf Merge pull request #2276 from kolyshkin/criu-v2
   22a2c9a4 Merge pull request #2282 from kolyshkin/cgroupv2-getpaths
   49896ab0 Avoid double close of criuServer
   d02fc484 isPathInPrefixList return value should be reverted
   8d7977ee libct/isPaused: don't use GetPaths from v2 code
   12e156f0 libct.isPaused: use errors.Unwrap
   272c83e1 libct/cgroups: use errors.Unwrap
   bd737f1e libct/cgroups/fs: use errors.Unwrap
   d2dfc635 libct/cgroups/fs2: use errors.Unwrap
   e4e35b8d libct/cgroups/fscommon.WriteFile: use errors.Unwrap
   66778b3c libct/setKernelMemory: use errors.Unwrap
   b8eed86e vagrant: switch from VirtualBox to KVM + increase HW resources
   fc840f19 cgroupv2: don't use GetCgroupMounts for criu c/r
   9ec5b03e Merge pull request #2259 from adrianreber/v2-test
   8221d999 Merge pull request #2279 from masters-of-cats/freezer
   92a3f80e Merge pull request #2203 from mrunalp/systemd_conn_cleanup
   2abc6a36 Actually check for syscall.ENODEV when checking if a container is paused
   3e99aa36 Fix checkpoint/restore tests on Fedora 31
   9a0184b1 cgroup2: use CRIU's new freezer v2 support
   d05e5728 systemd: Lazy initialize the systemd dbus connection
   33c6125d systemd: Export IsSystemdRunning() function
   4a9e1747 Merge pull request #2234 from thaJeztah/debian_buster
   dca34a04 Dockerfile: switch to "buster" variant (current stable)
   48bf88c4 Dockerfile: prevent busting build-cache for busybox rootfs
   a5963876 Dockerfile: sort dependencies, and cleanup apt cache
   c4821c2b Dockerfile: set DEBIAN_FRONTEND=noninteractive
   201152a9 Dockerfile: use build-args to allow overriding versions
   8df45c89 Merge pull request #2268 from AkihiroSuda/vendor-20200325
   ad6d577a travis: run `make verify-dependencies` with Go 1.14.x
   dfc1b0cd update vendor
   f1eea905 Merge pull request #2275 from kolyshkin/scan-nits
   53ad1d51 Merge pull request #2256 from kolyshkin/mountinfo-alt
   75ff40cd Merge pull request #2273 from kolyshkin/v2-untangle
   aab2c8ba libcontainer/intelrdt: optimize parseCpuInfoFile
   0af5cd20 Nit: fix use of bufio.Scanner.Err
   d4a6a1d9 Merge pull request #2258 from masters-of-cats/eintr-retry
   b45db5d3 libcontainer/cgroup: obsolete Get*Cgroup for v2
   a949e4f2 cgroupv2: UnifiedManager.Apply: simplify
   5406833a cgroupv2/systemd: add getv2Path
   cebef0ee Merge pull request #2272 from kolyshkin/cgroupv2-max
   ec1f957b cgroupv2: don't use getSubsystemPath in Apply
   6905b721 cgroupv2: use "max" for negative values
   96596cbb Merge pull request #2270 from kolyshkin/systemd-no-kmem
   a675b5eb cgroupv2: don't try to set kmem for systemd case
   be51398a Merge pull request #2193 from milkwine/fix-readSync
   a7ee31fa Merge pull request #2260 from adrianreber/leave-running
   7de5db3d Merge pull request #2263 from kolyshkin/nits
   cc183ca6 Merge pull request #2242 from AkihiroSuda/vendor-systemd
   4e6d8a0f Merge pull request #2267 from tedyu/runner-destroy
   3087d43b Merge pull request #1826 from jingxiaolu/fix_specconv_process_nil
   07bd2809 Merge pull request #2257 from kolyshkin/no-signal
   0a7762c6 Avoid duplicate calls to runner#destroy
   1797622f Merge pull request #2264 from kolyshkin/dockerfile
   dd7b3461 libct/msMoveRoot: benefit from GetMounts filter
   fc4357a8 libct/msMoveRoot: rm redundant filepath.Abs() calls
   dce0de89 getParentMount: benefit from GetMounts filter
   81d8452e libct/TestFactoryNewTmpfs: benefit from GetMounts
   c7ab2c03 libcontainer: switch to moby/sys/mountinfo package
   3147c320 Switch to golang 1.13, drop unsupported versions
   88a02447 Dockerfile: add -f to curl
   a572216f libcontainer/intelrdt: rm fmt.Sprintf
   5542a2c7 libcontainer/cgroups: GetAllPids: optimize
   12dc475d libcontainer: simplify createCgroupsv2Path
   648295be Skip test for cgroups v2
   f34eb2c0 Retry writing to cgroup files on EINTR error
   87712d28 checkpoint: remove error message with --leave-running
   34d47176 fix readSync
   0e062a78 Remove signalmap, use unix.SignalNum
   939cd0b7 Merge pull request #1737 from wking/remove-procConsole-comment
   88474967 Merge pull request #1974 from openSUSE/unreachable-code
   525b9f31 Merge pull request #2248 from AkihiroSuda/fix-cgroupv2-conversion
   492d525e vendor: update go-systemd and godbus
   981dbef5 Merge pull request #2226 from avagin/runsc-restore-cmd-wait
   a15d2c3c merge branch 'pr-2073'
   9167393c merge branch 'pr-2254'
   89c108b1 Makefile: add selinux and apparmor build tags
   69f6f32f README, travis.yml: rm ambient tag
   8615da6f Merge pull request #1999 from lifubang/rootlesspath
   167e33ca Merge pull request #1807 from giuseppe/notify-no-block
   25fd4a67 sd-notify: do not hang when NOTIFY_SOCKET is used with create
   aa269315 cgroup2: add CpuMax conversion
   64e9a979 cgroup2: fix conversion
   b477a159 Remove unreachable code paths
   7d6e091f fix error when there is --root and XDG_RUNTIME_DIR env
   0ff53526 Merge pull request #2252 from pkagrawal/2251-fix
   71dfb559 Merge pull request #2238 from tedyu/init-proc-err-ret
   89a87adb Changed hugetlb pagesizes info source
   d804611d Added failcnt stats
   62cfad97 specconv: add a test case to check null spec.Process
   5b2b138d Synchronize the call to linuxContainer.Signal()
   957da1f9 Use named error return for initProcess#start
   bbaba4c0 Merge pull request #2228 from cpuguy83/no_whiches
   2864bf46 Merge pull request #1877 from KentaTada/add-rootless-testpath-in-makefile
   777f97d8 Run verify-dependencies only on go1.x
   83f9b889 Don't add git utils to go.mod in CI
   f7edcc3a Remove refrences to vndr
   a08ab87f Make CI script to verify that vendor is in sync
   df583b4c Fix file permissions for mounts.bats
   38273546 Update spec test to use go.mod
   69e8fb2a Add support for GO Modules
   fc5759cf Merge pull request #2222 from cyphar/update-travis
   af3a81e4 Add rootless testpath in Makefile
   6503438f Merge pull request #2212 from Zyqsempai/2211-convert-blkio-weight-properly
   c4730fa6 Merge pull request #2230 from thaJeztah/update_selinux_v1.3.1
   42bfdf5f Use "command -v" shell builtin instead of "which"
   93e5c4d3 merge branch 'pr-2232'
   b6657fc3 Merge pull request #2231 from thaJeztah/nominate_akihiro
   d8953334 vendor: update opencontainers/selinux v1.3.3
   22e00ddc vendor: update golang.org/x/sys 52ab431487773bc9dd1b0766228b1cf3944126bf
   c295a633 vendor: update opencontainers/selinux v1.3.1
   3b7e32fe Merge pull request #2210 from Zyqsempai/2164-remove-deprecated-systemd-resources
   7f37afa8 Added HugeTlb controller for cgroupv2
   98de8426 libcontainer: dual-license nsenter/cloned_binary.c
   bc43c4bd MAINTAINERS: add Akihiro Suda to maintainers
   688cf6d4 merge branch 'pr-2223'
   0f32b03d merge branch 'pr-2192'
   13b1603f Merge pull request #2224 from kolyshkin/systemd-props
   4b8134f6 Convert blkioWeight to io.weight properly
   1cd71dfd systemd properties: support for *Sec values
   2a81236e Document using annotations to set systemd props
   4c5c3fb9 Support for setting systemd properties via annotations
   81ef5024 Merge pull request #2213 from Zyqsempai/2166-convert-cpu-weight-poperly
   7c439cc6 Added conversion for cpu.weight v2
   269ea385 restore: fix a race condition in process.Wait()
   f27c4e15 Fix the value corresponding to rlimitmap [key]
   dc7d0bfa travis: update configuration
   3b992087 Fix skip message for cgroupv2
   e6555cc0 merge branch 'pr-2184'
   e0385902 README.md: modify the explanation of make flags
   ff107ee0 merge branch 'pr-2190'
   7d23d1e1 Update README.md
   0061cad8 Adding .pdf of audit
   2b5730a5 Merge pull request #2221 from inductor/feature/fix_path_security
   e4c4935a Merge pull request #2217 from cyphar/release-rc10
   ed4a3e9b Apply review
   c8ba9853 Fix path for security report line
   e4de2b25 VERSION: back to development
   dc9208a3 VERSION: update to 1.0.0~rc10
   2fc03cc1 Merge pull request #2207 from cyphar/fix-double-volume-attack
   3291d66b rootfs: do not permit /proc mounts to non-directories
   f6fb7a03 merge branch 'pr-2133'
   5b96f314 Exchanged deprecated systemd resources with the appropriate for cgroupv2
   cf9b7c33 Fix MAJ:MIN io.stat parsing order
   709377ca Merge pull request #2198 from AkihiroSuda/criu-master
   55f8c254 temporarily disable CRIU tests
   5c20ea14 fix merging #2177 and #2169
   5cc0deaf Merge pull request #2169 from AkihiroSuda/split-fs
   2b52db75 Merge pull request #2177 from devimc/topic/libcontainer/kata-containers
   a88592a6 Merge pull request #2185 from liggitt/exec-race
   8541d9cf Fix race checking for process exit and waiting for exec fifo
   52951a7c Fix race in tty integration test with slow startup
   8ddd8920 libcontainer: add method to get cgroup config from cgroup Manager
   cd7c59d0 libcontainer: export createCgroupConfig
   7496a968 merge branch 'pr-2086'
   201b0637 merge branch 'pr-2141'
   e1b5af06 Merge pull request #2161 from AkihiroSuda/makefile-overrride-docker
   ec49f98d fs2: support legacy device spec (to pass CI)
   88e8350d cgroup2: split fs2 from fs
   5e636953 merge branch 'pr-2174'
   8bb10af4 Merge pull request #2165 from AkihiroSuda/travis-f31
   41a20b58 Expose network interfaces via runc events
   48b055c4 Makefile: allow overriding `docker` command
   c35c2c9c merge branch 'pr-2172'
   42690e68 Make event types public
   2186cfa3 Merge pull request #2168 from AkihiroSuda/ebpf-fix-rlimit
   faf1e44e cgroup2: ebpf: increase RLIM_MEMLOCK to avoid BPF_PROG_LOAD error
   46def4cc Merge pull request #2154 from jpeach/2008-remove-static-build-tag
   b133feae Merge pull request #2145 from AkihiroSuda/ebpf
   ccd4436f .travis.yml: add Fedora 31 vagrant box (for cgroup2)
   faf673ee cgroup2: port over eBPF device controller from crun
   e57a7740 Merge pull request #2149 from AkihiroSuda/cgroup2-ps
   d239ca84 Merge pull request #2148 from AkihiroSuda/cg2-ignore-cpuset-when-no-config
   03cf145f Merge pull request #2159 from AkihiroSuda/cgroup2-mount-in-userns
   f04fb998 Merge pull request #2160 from AkihiroSuda/cgroup2-no-proc-cgroups
   74a3fe5d cgroup2: do not parse /proc/cgroups
   9c81440f cgroup2: allow mounting /sys/fs/cgroup in UserNS without unsharing CgroupNS
   13919f5d Remove the static_build build tag.
   c4d8e168 Merge pull request #2140 from crosbymichael/fs-unified
   792af40d Merge pull request #1929 from kkallday/patch-1
   8790f243 Merge pull request #2147 from AkihiroSuda/iov2-remove-v1-code
   2cd9ba23 Merge pull request #2146 from AkihiroSuda/doc-not-prod-ready
   dbd771e4 cgroup2: implement `runc ps`
   9996cf7d README.md: clarify cgroup2 support is not ready for production
   d918e7f4 cpuset_v2: skip Apply when no limit is specified
   033936ef io_v2.go: remove blkio v1 code
   a610a848 criu: Ensure other users cannot read c/r files
   4e370170 Merge pull request #2139 from rst0git/desc-permisions
   b28f58f3 Set unified mountpoint in find mnt func
   f017e0f9 checkpoint: Set descriptors.json file mode to 0600
   c1485a1e merge branch 'pr-2134'
   1b8a1eee merge branch 'pr-2132'
   ba16a38b Merge pull request #2135 from mrueg/security
   4be50fe3 SECURITY: Add Security Policy
   2111613c VERSION: back to development
   d736ef14 VERSION: update to 1.0.0-rc9
   cad42f6e Merge pull request #2130 from cyphar/apparmor-verify-procfs
   d463f648 *: verify that operations on /proc/... are on procfs
   9aef5044 vendor: update github.com/opencontainers/selinux
   28e58a0f Support different field counts of cpuaact.stats
   e63b797f Handle ENODEV when accessing the freezer.state file
   84373aaa Add SCMP_ACT_LOG as a valid Seccomp action (#1951)
   3e425f80 Merge pull request #2129 from crosbymichael/proc-mount
   331692ba Only allow proc mount if it is procfs
   7507c64f Merge pull request #2041 from jburianek/notify-socket-permissions
   bf27c2f8 Merge pull request #2126 from flynn/fix-nsenter-unsupported
   af7b6547 libcontainer/nsenter: Don't import C in non-cgo file
   6c055520 Merge pull request #2125 from giuseppe/mount-cgroups
   267490e3 Merge pull request #2010 from lifubang/checkpointrootless
   e7a87dd2 Merge pull request #2098 from adrianreber/master
   718a566e cgroup: support mount of cgroup2
   a6606a7a Merge pull request #2029 from thaJeztah/bump_dependencies
   115d4b9e bump golang/protobuf v1.0.0
   85c02f3f bump coreos/go-systemd v19, godbus/dbus v5.0.1
   21498b8e bump mrunalp/fileutils 7d4729fb36185a7c1719923406c9d40e54fb93c7
   eb86f603 bump syndtr/gocapability d98352740cb2c55f81556b63d4a1ec64c5a319c2
   1150ce9c bump urfave/cli v1.20.0
   8e4f645f bump docker/go-units v0.3.3
   0fc06623 bump cyphar/filepath-securejoin v0.2.2
   414a39de bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f
   de24d733 bump github.com/pkg/errors 0.8.1
   4be3c48e Reformat vendor.conf and pin all deps by git-sha
   0fd4342a Merge pull request #2028 from thaJeztah/bump_golang_versions
   92ac8e3f Merge pull request #2113 from giuseppe/cgroupv2
   524cb7c3 libcontainer: add systemd.UnifiedManager
   ec111368 libcontainer, cgroups: rename systemd.Manager to LegacyManager
   1932917b libcontainer: add initial support for cgroups v2
   92d851e0 Merge pull request #2123 from carlosedp/riscv64
   4316e4d0 Bump x/sys and update syscall to start Risc-V support
   51f2a861 Merge pull request #2122 from AkihiroSuda/cleanup
   0bc069d7 nsenter: fix clang-tidy warning
   b225ef58 nsenter: minor clean up
   dd075602 Merge pull request #2120 from rhatdan/master
   e4aa7342 Rename cgroups_windows.go to cgroups_unsupported.go
   c61c7370 Merge pull request #2103 from sipsma/cgnil
   68d73f0a Merge pull request #2107 from sashayakovtseva/public-get-devices
   f061842f Merge pull request #2119 from KentaTada/fix-proc-settings
   c740965a libcontainer: update masked paths of /proc
   3525edde Merge pull request #2117 from filbranden/detection1
   f7b65885 Merge pull request #2116 from filbranden/running1
   518c8558 Remove libcontainer detection for systemd features
   4ca00773 Update vendored dependencies to remove go-systemd/util
   588f040a Avoid the dependency on cgo through go-systemd/util package
   afc24792 Make get devices function public
   9c822e48 cgroups/fs: check nil pointers in cgroup manager
   1712af0e man: fix man-pages
   2e943784 Merge pull request #2094 from sipsma/2093-nodotudev
   44f9ec13 Merge pull request #2089 from anx-astocker/master
   f08cdaee Skip searching /dev/.udev for device nodes.
   808e809f doc: First process in container needs `Init: true`
   80d35c7c Merge pull request #2082 from AkihiroSuda/blkio-kernel50
   dd8b9b14 Merge pull request #2081 from AkihiroSuda/criu312
   9ae79017 Merge pull request #2080 from zhlhahaha/pr_id
   5e0e67d7 fix permission denied
   351bfb4b integration: remove blkio.weight (unavailable in kernel 5.0)
   7e678625 Bump CRIU to 3.12
   68cc1a77 Update busybox source and fix runc exec bug
   6cccc176 Merge pull request #2075 from KentaTada/fix-bash-completion
   371d13c9 Update bash completion for v1.0.0 release
   f4982d86 Merge pull request #2074 from odinuge/dep/libseccomp-golang
   652297c7 Update dependency libseccomp-golang
   7a9ffa89 Change the permissions of the notify listener socket to rwx for everyone
   e7831f2a Update to Go 1.12 and drop obsolete versions
   2e8efc1b add prompt when rootless users have no read access to runc bin
   472fe623 criu image path permission error in rootless checkpoint
   056909bd Adds note about user ns for rootless containers
   d71b3f53 libcontainer/sync: Drop procConsole transaction from comments

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-08-18 03:01:05 +00:00
Bruce Ashfield
68e4f545a6 docker-moby: update to 19.03 latest 
Updating to the latest 19.03 commits:

   88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns
   dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
   93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e
   7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes
   22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock
   8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit
   eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1
   168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903
   9dc455dffb bump up rootlesskit to v0.10.0
   c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests
   9eade7d03c docs: API v1.39: move system version response to definitions
   4685e9ef72 docs: API v1.40: move system version response to definitions
   d8f22d0307 swagger: move system version response to definitions
   32366de5f9 plugin: fix a double RLock bug
   ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
   cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
   e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt
   d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit
   892c228219 Remove apt.dockerproject.org from test
   a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates
   765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e
   2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup
   b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14
   4d9397c268 swagger: sync updates to v1.39
   51bd95dc95 swagger: sync updates to v1.40
   d5ba93575c docs: sync API v1.40 swagger formatting with current version
   12b7746a84 docs: sync API v1.39 swagger formatting with current version
   0c6bdf5974 docs: add example calculations to container stats API
   630185b4ae swagger: add DeviceRequests to container create, inspect example
   d7423180e7 swagger: move NetworkingConfig to definitions
   c30ff6885e swagger: reformat, and wrap to ~80-chars
   7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint
   1608292c09 Bump Golang 1.13.14
   1763b4e88b Bump Go 1.13.13
   5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit
   23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef
   789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr
   0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit
   9d6053eda2 Revendor hcsshim to fix image import bug
   589b07262c vendor: Microsoft/hcsshim v0.8.9
   e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f)
   a40b877fbb Merge pull request #41133 from roidelapluie/bsd2
   7dd9fdcfbe Enable client on netbsd and dragonfly
   9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork
   b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
   ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure

And the following cli changes:

   80fd48bcb Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14
   e5e227672 Bump Golang 1.13.14
   79a6c494e Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13
   5e05ef345 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save
   64d25cc6e Bump Golang 1.13.13
   1b96aa29c Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates
   aaf117052 Handle errors on close in config file write.
   14010c88b config: preserve ownership and permissions on configfile
   3d64a5d4b Move circle.yml to .circleci/config.yml
   d0b656088 CircleCI: update docker versions used in CI
   b0a78cc1a Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole
   ab8bd02fc vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a
   18d6f8f6b Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info
   7498d9cc4 docs/builder: add note about handling of leading whitespace
   cb59cafc3 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes
   541f050e1 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps
   ac7723056 docs: fix example output for docker plugin ls
   9c9ff4369 list state `ready` for filtering in stack_ps.md
   e3b981c18 vendor konsorten/go-windows-terminal-sequences v1.0.3
   ec276f3a6 vendor: mitchellh/mapstructure v1.0.0
   c9125cc39 vendor: beorn7/perks v1.0.1
   0ed913b88 Merge pull request #2592 from thaJeztah/19.03_backport_logout_config_out_of_sync2
   5a12f90b4 Don't filter out registries to logout from with config file contents

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-08-17 20:49:34 +00:00
Bruce Ashfield
85b92e0b48 docker-ce: update to tip of 19.03 
This update comprises the following commits:

   ff3fbc9d55 Merge pull request #655 from tiborvass/bump_19.03.13-beta2
   475484e351 Bump VERSION to 19.03.13-beta2
   321dc6b4bd Merge component 'engine' from git@github.com:moby/moby 19.03
   9b85caeb7c Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns
   b82e19207e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202
   69223588df [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e
   32c58830e3 Merge pull request #654 from tiborvass/bump_19.03.13-beta1
   f2cad45d0a Merge branch '19.03' of github.com:docker/docker-ce into 19.03
   a2fa6c7fb3 Merge component 'engine' from git@github.com:moby/moby 19.03
   1015e8af79 Merge component 'engine' from git@github.com:moby/moby 19.03
   1d7d9d001f Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes
   3087b3114f Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock
   520fc10363 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit
   120511a214 Merge pull request #642 from tiborvass/19.03-switch-to-moby
   a4f55cdbab [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1
   bee145aad2 Merge component 'engine' from git@github.com:docker/engine 19.03
   b768eabf04 Merge component 'engine' from git@github.com:docker/engine 19.03
   4e9725b988 Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903
   c13dfa3f39 bump up rootlesskit to v0.10.0
   b714998077 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests
   009eca42ef docs: API v1.39: move system version response to definitions
   4f25b9eed4 docs: API v1.40: move system version response to definitions
   0ea6312f6d swagger: move system version response to definitions
   9f4029e6dc plugin: fix a double RLock bug
   dff89f8092 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt
   95599eb2e6 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt
   81bd78b07a swagger: fix type for BuildCache CreatedAt and LastUsedAt
   d9cb8734cf Merge component 'engine' from git@github.com:docker/engine 19.03
   820098ff18 Merge pull request #41269 from thaJeztah/19.03_update_buildkit
   0994e492c5 Remove apt.dockerproject.org from test
   a49a4f288a Bump VERSION to 19.03.13-beta1
   a89cfd520d Merge component 'engine' from git@github.com:docker/engine 19.03
   dcaed39807 Upstream-commit: a7e309944b3bdefbca4186ce41a8374784133be2 Component: engine
   422fa1b13e [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e
   81dab2018b Merge component 'engine' from git@github.com:docker/engine 19.03
   1490b1df51 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup
   c6c4809630 Merge component 'engine' from git@github.com:docker/engine 19.03
   9eea25a62f Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14
   f224762af0 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03
   0850d19f24 Merge pull request #485 from thaJeztah/19.03_backport_remove_eoan
   5ba0889c4a swagger: sync updates to v1.39
   7d189e5b0b swagger: sync updates to v1.40
   047a3b6ca8 docs: sync API v1.40 swagger formatting with current version
   d5a51018d4 docs: sync API v1.39 swagger formatting with current version
   69aae6c1db docs: add example calculations to container stats API
   bf77a77bab swagger: add DeviceRequests to container create, inspect example
   d43b66d55c swagger: move NetworkingConfig to definitions
   c210a26d28 swagger: reformat, and wrap to ~80-chars
   0d1edc403c swagger: clarify the meaning of Image field in ContainerInspect endpoint
   f3b514426e Merge component 'cli' from git@github.com:docker/cli 19.03
   07d59f4164 Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14
   289eec988f Remove Ubuntu 19.10 "Eoan" (EOL: 2020-07-17)
   eeec8d3ba5 Remove Ubuntu 19.04 "Disco Dingo" (EOL: 2020-01-23)
   02ab061844 Remove Fedora 30 (EOL: 2020-05-26)
   391d22f0e0 Bump Golang 1.13.14
   a033b71571 Bump Go 1.13.13
   03ae74b5b7 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03
   20042180c1 Bump Golang 1.13.14
   aaf10aa9c6 Merge pull request #482 from thaJeztah/19.03_backport_bump_golang_1.13.14
   fc9fece6e1 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03
   d552a52dbb Bump Golang 1.13.14
   887f0eb7c6 Merge pull request #479 from thaJeztah/19.03_backport_bump_golang
   8a9e1bdc07 Merge component 'engine' from git@github.com:docker/engine 19.03
   ab25bbca2f Merge component 'cli' from git@github.com:docker/cli 19.03
   f56046026b Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13
   bbdb18fa3a Merge pull request #41222 from thaJeztah/19.03_bump_buildkit
   a48c990d07 Merge component 'cli' from git@github.com:docker/cli 19.03
   e1e647a270 [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef
   021a6048e6 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save
   a6c6dce3a6 Bump Golang 1.13.13
   a252aaae7a Merge component 'cli' from git@github.com:docker/cli 19.03
   f19d902423 Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates
   4e3a5637b4 Handle errors on close in config file write.
   19d2ee3b78 config: preserve ownership and permissions on configfile
   08fd87da44 Move circle.yml to .circleci/config.yml
   45b3865643 CircleCI: update docker versions used in CI
   c6012e45cc Update Golang 1.13.13
   3a19c4a1df Merge component 'engine' from git@github.com:docker/engine 19.03
   b636594b37 Merge pull request #41192 from ameyag/19.03-hcsshim-vndr
   177165b75d Merge component 'engine' from git@github.com:docker/engine 19.03
   d2e020dbd1 Merge component 'cli' from git@github.com:docker/cli 19.03
   d0a4b67aee Merge pull request #41185 from thaJeztah/19.03_bump_buildkit
   d4e6d9b301 Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole
   06d576d294 Merge component 'cli' from git@github.com:docker/cli 19.03
   80e9882cdf vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a
   e0c24158ad Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info
   d7e86d9c77 Revendor hcsshim to fix image import bug
   14ab1c306d vendor: Microsoft/hcsshim v0.8.9
   03a47bb4c5 [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f)
   fd33ebfc36 Merge component 'engine' from git@github.com:docker/engine 19.03
   fb095d16b8 Merge pull request #41133 from roidelapluie/bsd2
   d0a8d03b7b docs/builder: add note about handling of leading whitespace
   b56ef36968 Merge component 'cli' from git@github.com:docker/cli 19.03
   d2a8fe0e12 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes
   e453c06e79 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps
   dac7a0fe9a docs: fix example output for docker plugin ls
   8c8b82eeb3 list state `ready` for filtering in stack_ps.md
   055ee582e3 vendor konsorten/go-windows-terminal-sequences v1.0.3
   037e7383ec vendor: mitchellh/mapstructure v1.0.0
   2f446000e0 vendor: beorn7/perks v1.0.1
   8f8179e576 Enable client on netbsd and dragonfly
   5b2eac44f7 allocateNetwork: fix network sandbox not cleaned up on failure
   f620b6de75 components: use moby/moby instead of docker/engine

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-08-17 20:44:04 +00:00
Bruce Ashfield
535a3e8279 k8s: fix 32bit ARM build 
Remove the remaining 'go' calls, and replace them with $GO. We also
must explicitly pass "GO='go'" on the host side build call.

This avoids the gnu-stubs header file issues, since the 'go' binary
cannot use the sysroot.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-08-12 13:03:46 -04:00
Bruce Ashfield
00b472ca43 kubernetes: update to release 1.19-rc3 
In preparation for the fall release, update to the 1.19 release
branch of kubernetes, so that the change can soak and we can work
through the rc's

No unexpected build or patch issues with this bump and basic
sanity testing passed. Once ore components are updated, extended
testig will occur.

Sanity built and tested on x86-64 and arm64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-31 19:01:25 +00:00
Ming Liu
65c40e6e57 conmon: uprev 2.0.11 > 2.0.18 
Also drop useless SRC_URI[md5sum], SRC_URI[sha256sum] and FILES_${PN},
and add SRCPV to PV.

Signed-off-by: Ming Liu <ming.liu@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-24 13:09:01 -04:00
Bruce Ashfield
fd3d5ff379 sloci-image: fix variant quoting 
Bash doesn't deal very well with the quoted "variant" in the
output of the oci-image-index. We can calculate the string at
the top of the function, and just use it as a whole to avoid
needing to figure out the quote escaping.

No changes in the output, except a properly quoted "variant"
when a variant is defined.

We also adjust the definition of "S", since it really wasn't
correct before, and now that we have patches, it is more
important.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-19 22:26:14 -04:00
Bruce Ashfield
55b15a06e5 kubernetes: fix ARM64 build 
The first part of the kubernetes build generates some host/build files.
These use the build/host compiler and not the cross infrastructure.

It was working by luck on x86 build / target matches, but blows up on
an ARM64 build.

We fix the CC/CFLAGS settings for the host part of the build to use
the host/build flags and then restore the cross settings for the
rest of the build.

Tested on arm64 and x86-64.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-10 14:52:05 +00:00
Wang Mingyu
98f86a681d lxc: upgrade 4.0.2 > 4.0.3 
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-06 16:28:00 -04:00
Martin Jansa
87b9e054ff docker: move docker.init back to files directory to use it from docker-moby 
* it was moved for some reason in:
  http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=929372946aeb85953d1ca6acc428d73fbac52a56

  but docker-moby uses it as well and now started to fail with:
  ERROR: docker-moby-19.03.12+git9dc6525e6118a25fab2be322d1914740ea842495-r0
  do_fetch: Fetcher failure: Unable to find file file://docker.init
  anywhere. ..

Signed-off-by: Martin Jansa <martin.jansa@lge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-02 12:09:10 -04:00
Martin Jansa
70d832f37a docker-ce: remove unused docker-registry.service file 
Signed-off-by: Martin Jansa <martin.jansa@lge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-02 12:09:10 -04:00
Ming Liu
a1d06c7470 python3-docker-compose: uprev 1.25.5 > 1.26.0 
The major changes include:
d4451659 Bump 1.26.0
3d94f442 Bump 1.26.0-rc5
1386a855 Merge pull request #7485 from ulyssessouza/fix-https-daemon
8034c96d Bump docker-py
48d09369 Fix flake8 errors
28bf47ce Pin wcwidth==0.1.9
d279b7a8 Bump 1.26.0-rc4
83371df2 Merge branch 'master' into 1.26.x
9c5351cf Merge pull request #7389 from ulyssessouza/general-bumps-for-1_26
836e2b7c General bumps
266d287e Merge pull request #7390 from ulyssessouza/remove-unused-resources
d64f3f39 Remove unused files
4e310a94 Merge pull request #7386 from ulyssessouza/bump-python-dotenv-1_13_0
d52b51e8 Bump python-dotenv from 0.11.0 to 0.13.0
64a6a48b Merge pull request #7345 from docker/dependabot/pip/certifi-2020.4.5.1
0979c7a1 Merge pull request #7380 from joehattori/simplify-code
ce782b59 Simplify code in compose/config/config.py
b7d6dc79 Bump certifi from 2019.11.28 to 2020.4.5.1
c22a2510 Merge pull request #7374 from ulyssessouza/fix-distro-guess
a62a1e1d Add "distro" package
afc5d205 Merge pull request #7371 from ulyssessouza/bump-openssl-111f
4d2afc07 Merge pull request #7372 from ulyssessouza/update-changelog

Have verified on arm/arm64/x86_64 against:
https://docs.docker.com/compose/gettingstarted

Signed-off-by: Ming Liu <ming.liu@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Bruce Ashfield
14a9247a10 riddler: fix 32bit ARM build 
With oe-core commit c23f9e80492e4b [tcmode-default: use
go-binary-native by default], we must explictly call the proper
cross go binary, versus just the go-native variant.

These builds were working by luck, since the go compiler was capable
of building the target binaries previously (in its build-from-source
creation). We fixup the calls and we no longer see fpu build issues:

  fatal error: gnu/stubs-soft.h: No such file or directory

    7 | # include <gnu/stubs-soft.h>
      |           ^~~~~~~~~~~~~~~~~~

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Bruce Ashfield
f567afae0a oci-runtime-tools: fix 32bit ARM build 
With oe-core commit c23f9e80492e4b [tcmode-default: use
go-binary-native by default], we must explictly call the proper
cross go binary, versus just the go-native variant.

These builds were working by luck, since the go compiler was capable
of building the target binaries previously (in its build-from-source
creation). We fixup the calls and we no longer see fpu build issues:

 fatal error: gnu/stubs-soft.h: No such file or directory

    7 | # include <gnu/stubs-soft.h>
      |           ^~~~~~~~~~~~~~~~~~

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Bruce Ashfield
cc5e41ffb0 docker-distribution: fix for GO cross compilation 
With oe-core commit c23f9e80492e4b [tcmode-default: use
go-binary-native by default], we must explictly call the proper
cross go binary, versus just the go-native variant.

These builds were working by luck, since the go compiler was capable
of building the target binaries previously (in its build-from-source
creation). We fixup the calls and we no longer see fpu build issues:

 fatal error: gnu/stubs-soft.h: No such file or directory

    7 | # include <gnu/stubs-soft.h>
      |           ^~~~~~~~~~~~~~~~~~

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Bruce Ashfield
929372946a docker-ce/docker-moby: fixup GO compiler calls 
With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native
by default], we must explictly call the proper cross go binary, versus
just the go-native variant.

These builds were working by luck, since the go compiler was capable of
building the target binaries previously (in its build-from-source
creation). We fixup the calls and we no longer see fpu build issues:

fatal error: gnu/stubs-soft.h: No such file or directory

    7 | # include <gnu/stubs-soft.h>
      |           ^~~~~~~~~~~~~~~~~~

This commit also moves the docker-ce patches from "files" to a named
directory to reduce confusion.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Bruce Ashfield
9726c5d164 docker/moby: update to v19.03.12 
Updating moby to the latest 19.03 release, which comprises the
following commits:

moby:

   b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
   5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc
   058ea43c5c Bump Golang 1.13.12
   77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6
   c104a50de4 integration: Add TestDaemonDNSFallback
   9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b
   d4e12315cd hack: add more debugging to understand exit codepath
   4c24512241 Dockerfile: bump CRIU 3.14
   29796375c9 Bump Golang 1.13.11
   8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded
   0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir
   9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0
   a76633684b vendor: update buildkit to a7d7b7f1
   706008a1da bump up rootlesskit to v0.9.5
   57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling
   7d4dd91a52 logfile: Check if log is closed on close error during rotate
   edf2c49410 vendor: pkg/errors v0.9.1
   63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa
   946d0ff67e bump up rootlesskit to v0.9.4
   70e7d6fe4a Update CRIU to v3.13 "Silicon Willet"
   e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e
   e149ff62fe vendor: update go-events to fix alignment for 32bit systems
   a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17
   282567a58d Bump Golang 1.13.10
   b66813eb45 api docs: fix broken link on GitHub
   9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli"
   08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7
   5ba2bf37a8 Bump Golang 1.13.9
   f432a04243 Update Golang 1.13.8
   81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
   6e1d159680 Update Golang 1.13.6
   4241093b63 Update Golang 1.13.5
   162fd8b856 Bump Golang 1.13.4
   05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596)
   f8d4276a89 bump golang 1.13.1 (CVE-2019-16276)
   7df2d881f3 Bump Golang version 1.13.0
   fed832e224 Update to using alpine 3.10
   4581499848 Switch to s390x Ubuntu 18.04
   f34a5b5af0 builder: fix concurrent map write
   9f5a5da4cb docs: add API versions v1.30 - v1.37
   284bbde996 seccomp: add 64-bit time_t syscalls
   359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e
   021258661b Update libnetwork and DNS library
   100d240d86 Move schema1 deprecation notice
   57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9
   68db0c1739 Dockerfile: switch to iptables-legacy to match the host
   4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages
   a070874828 hack/make: ignore failure to stop apparmor
   237843a059 Dockerfile: align consecutive COPY lines
   400b2850ff Dockerfile: order COPY lines by change frequency
   ddfeaf32ff Dockerfile: sort packages alphabetically
   cb813faebf Dockerfile: use build-arg for vpnkit
   0499db23d1 Dockerfile: use spaces for indentation
   c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower
   c6511ee4db bump vndr v0.1.1
   0fa8a0c575 bump vndr v0.1.0 to support versioned import paths
   f3009e2f51 Use build args to override binary commits in dockerfile
   92ca652fc9 Revert "dockerfile: update vndr to 85886e1a"
   fdad16840c go-swagger: fix panic
   075e057de5 Dockerfile: set GO111MODULE=off
   fe2a25a785 fix backingFs assignment
   e6c9e2736f Fix rate limiting for logger, increase refill rate
   911ecc3376 Set the bip network value as the subnet
   08420b1c95 AppArmor: add missing rules for running in userns
   fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database
   1a830501b7 Use FILE_SHARE_DELETE for log files on Windows.
   dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid
   4076c57b50 Fix more signal handling issues in tests.
   68e1150357 DaemonCli: Move check into startMetricsServer
   b813c398bb Add `FromClient` to test env execution

libnetwork

   8565f0b1 log error instead if disabling IPv6 router advertisement failed
   153d0769 bridge: disable IPv6 router advertisements
   fdaaa027 Resolver: fix error handling if we didn't receive a response
   b09f24d1 Fix NPE due to null value returned by ep.Iface()
   8068671f Fixes a panic in the DNS resolver
   536ae722 Dockerfile: update to Go 1.13.8
   dcd95280 Fix gofmt in preparation of Go 1.13 update
   f0b038ea regenerate protobufs with debian buster
   34c8de58 Dockerfile: switch to debian "buster"
   96600117 Dockerfile: update to Golang 1.12.17

libcli

   5a12f90b4 Don't filter out registries to logout from with config file contents
   6cb678f16 vendor: golang.org/x/text v0.3.3
   4515c5187 vendor: golang.org/x/text v0.3.2
   cfa1fd9ac Don't loose additional metadata fields
   31d338dd3 Bump Golang 1.13.12
   936d328da Use consistent name for errors
   2ee798198 ssh: avoid setting flags through hostname
   e90b6bcb6 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect
   97afb7295 docs/extend: fix broken link and some markdown touch-ups
   c280cdfd6 docs: fix broken link in dockerd.md
   0f59532a1 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...)
   95df3499b Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests
   2d1476c6f Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine.
   936e9717e Bump Golang 1.13.11
   489c7e9cd docs: more Markdown touch-ups
   9a57ea886 Update some uses of errors.Cause() to errors.Is()
   345b0e79e vendor: pkg/errors v0.9.1
   62a9babca vendor: k8s.io/klog v1.0.0-2-g4ad0115
   dbc73eafc docs: fix, and touch-up "docker context" docs
   e06fc01c1 Update dead link and add missing info on COPY
   8434242c7 config: don't call homedir on init()
   65c37227a docs: update usage output for dockerd (19.03)
   55a5ab0f0 docs: fix order of flags in usage, and fix missing quote
   c150ba2b8 builder: fix broken link
   81909d70f docs: fix links, and minor markdown touch-ups
   cf663b526 cli: perform feature detection lazily
   c44c18e08 docker build: check experimental --platform on pre-run
   25f04876d app-214 Load Client info in getter function
   4ad65fc35 fix panic on single-character volumes
   83d4cb900 vendor: bump gopkg.in/yaml.v2 v2.2.8
   0cfe29431 service update: fix service create example
   2dc593f67 Add container_iface_prefix option to documentation
   4fe6b837b bump gotest.tools v3.0.1 for compatibility with Go 1.14
   a8454a4d9 update vndr v0.1.1
   950dcedd9 bump vndr v0.1.0 to support versioned import paths
   0d26cbf5b yamldocs: add description to base command
   d4e4fa3b4 experimental/vlan-networks: markdown touch-ups
   de12dbfb1 docs/reference: explain "colon"
   7ae77e51f docs/extend: reformat notes
   733ae82da docs/builder: touch up markdown, and some minor rephrasing
   9a1ba7d39 docs/reference/run.md: touch-up markdown
   6ba9a3e4c reference docs: reformat notes
   96eb0888f reference docs: fix broken links and markdown touch-ups
   2676c603f Adding missing title in builder.md
   365bae4f8 Add clarification when using USER UID:GI
   c38b26007 improve "network prune" output to mention custom networks only
   fd9eedce3 Add "host-gateway" to tests for extra_hosts / --add-host
   365118982 Skip IPAddr validation for "host-gateway" string
   a0f0ed1f5 vendor: update go-events to fix alignment for 32bit systems
   de6a5fa44 Bump Golang 1.13.10
   19ccd4f5d CI: update notary test certificates
   f8fc68f17 Bump Golang 1.13.9
   22cbf9161 Update deprecation policy to 1 stable release
   288cdec29 Include deprecation policy on deprecated features page
   ffffc1ed4 remove unneeded comment from reference files
   9fd323afd Fix whitespace that caused short-format in generated YAML
   c936ea969 Fix yamldocs generator to accomodate nested subcommands
   d484456c2 Fix naming of reference docs files
   6a02465f4 docs: update code-hints for compatibility with "rouge"
   6e07d210a Update Golang 1.13.8

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Bruce Ashfield
f64cb9f5d3 docker: update to v19.03.12 
Bumping docker-ce to pickup engine and libnetworking changes
as follows:

docker:

   62af9260f7 Bump version to 19.03.12
   936779c56d Don't filter out registries to logout from with config file contents
   c5052816e1 Add MOBY_DISABLE_PIGZ to dockerd environment variable docs
   fcb50896d6 Split up environment variable documentation between cli and dockerd
   a8985be19b Fix broken link
   efc8054c3e vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch)
   a01cfb62a8 vendor: golang.org/x/text v0.3.3
   b6c18bda19 vendor: golang.org/x/text v0.3.2
   5ff139ae19 Don't loose additional metadata fields
   c7821b2eff Bump Golang 1.13.12
   80212697cc int-cli/TestRunInvalidCPUShares: fix for newer runc
   6812565155 Use consistent name for errors
   7df914b706 Bump Golang 1.13.12
   42e35e61f3 Bump version to 19.03.11
   f1aa3eed9f vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6
   411bf397cb Bump version to 19.03.10
   8c9977e182 ssh: avoid setting flags through hostname
   e002ed9b22 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect
   9c06987b4f docs/extend: fix broken link and some markdown touch-ups
   e0305a0d5d integration: Add TestDaemonDNSFallback
   0b5e7e9157 vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b
   e18049ede6 hack: add more debugging to understand exit codepath
   9b224f2a82 Dockerfile: bump CRIU 3.14
   060380053a docs: fix broken link in dockerd.md
   bf5af5d807 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...)
   9ff792b4b1 Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests
   ddc55e5dae Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine.
   830231a085 Bump Golang 1.13.11
   09dc8edc28 Bump Golang 1.13.11
   90e25f2053 Fix bug in gotestsum installer causing dependencies to not be downloaded
   a36b2dcf99 pkg/archive: escape ":" symbol in overlay lowerdir
   eef871ea69 Add 19.03.9 Changelog
   08289ce2b7 dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0
   e86a81ae52 vendor: update buildkit to a7d7b7f1
   d64ef9e79f docs: more Markdown touch-ups
   7a62f198f7 bump up rootlesskit to v0.9.5
   085915af4b Update some uses of errors.Cause() to errors.Is()
   6a461fe7db vendor: pkg/errors v0.9.1
   dab9e682ae SELinux: fix ENOTSUP errors not being detected when relabeling
   61b260f95e vendor: k8s.io/klog v1.0.0-2-g4ad0115
   3e7fc6b34b docs: fix, and touch-up "docker context" docs
   55cac16b19 Update dead link and add missing info on COPY
   98b86525c7 config: don't call homedir on init()
   d4a9c8b0ff Bump Version to 19.03.9
   9854078c74 logfile: Check if log is closed on close error during rotate
   ba985fa151 vendor: pkg/errors v0.9.1
   b7053372f9 deb: use DEBIAN_FRONTEND=noninteractive for all dockerfiles
   29f7b93a38 docs: update usage output for dockerd (19.03)
   4105fc6eeb docs: fix order of flags in usage, and fix missing quote
   9efc9eb996 Jenkinsfile: use docker/docker instead of docker/engine
   dc09faf67a Remove Ubuntu 18.10 "cosmic", as it reached EOL
   229ba25b29 Add rhel for s390x
   f63e79f08f Add Fedora 32, remove Fedora 29
   16cea5e8af CentOS: fix failing repository on aarch64 (arm64)
   09b724c472 Fix CentOS 8 build
   5f18965a2d Undo baseurl string replace for altarch
   d9d139d449 Add Support for Centos-8
   d3673fb117 remove fedora 28 because it is eol
   3a5d16fc01 Makefile: remove SOURCE_FILES, SOURCES variables
   1807473253 rpm/Makefile: use DISTROS intermediate variable, similar to deb
   cd431fd2bd rpm/Makefile: remove parameterization of Dockerfile
   6d5a139b67 Enable Ubuntu Focal in Jenkinsfile
   782cbb1279 Add Ubuntu 20.04 Focal Fossa
   3bfab8878a Add build target for ubuntu-eoan
   f1510b7e2e deb: add missing format version
   02ec900b6e Update README to include Ubuntu 19.10
   2a11310df0 deb: remove unused DOCKER_GOPATH variable
   eea48a1e84 Add LICENSE (copy of docker/docker's Apache-2.0 file)
   4668185399 Makefile: chown engine dir during cleanup
   f957acd1a7 update list of reviewers in unir config
   76caab9e0f Remove more remnants from image-based engine
   ca19008e19 Makefile: enable buildkit when building images
   5084dc0eeb Remove some remnants related to image-based builds
   ec06e50ff4 Remove image-based build (for docker engine activate)
   a00d1a3e8c Dockerfiles: re-use DISTRO, SUITE build-args where possible
   5137026e84 deb: Only recommend aufs-tools on amd64
   ffd08c257e Re-order common env variables
   5ad37075fa ADDED gomodules=off to docker-ce-packaging files
   b54abb7962 Update packages list
   c1b70372fa plugins: remove (now) redundant .gitkeep
   e04831b31a Dockerfiles: remove unused GO_VERSION
   beb28205b6 Makefile: rely on targets in deb/rpm
   2b8e543708 rpm/Makefile: simplify and fix
   c6c1776bc3 deb/Makefile: simplify and fix
   4e553fe39f builder: fix broken link
   550ea4a513 [19.03] vendor: buildkit v0.6.4-5-g59e305aa
   5bcd2b4368 docs: fix links, and minor markdown touch-ups
   5d14c92bcf cli: perform feature detection lazily
   0060d37eff docker build: check experimental --platform on pre-run
   86b614aec2 app-214 Load Client info in getter function
   1eae0fe109 fix panic on single-character volumes
   63a0f1b5da vendor: bump gopkg.in/yaml.v2 v2.2.8
   d0c4d1bb7d service update: fix service create example
   a2811833ab Add container_iface_prefix option to documentation
   b90b044e91 bump up rootlesskit to v0.9.4
   33201484aa Update CRIU to v3.13 "Silicon Willet"
   296f651e6c Use "buster" variant of Go images
   1e9d8254a7 bump gotest.tools v3.0.1 for compatibility with Go 1.14
   00802b8595 Bump Golang 1.13.10
   4f45952397 Update Golang 1.13.9
   10944a9554 Update Golang 1.13.8
   ad04f7c12f plugins/buildx: force go modules to use vendor mode
   d5e9bda107 update vndr v0.1.1
   c69ca2c5e7 bump vndr v0.1.0 to support versioned import paths
   36c6db1980 yamldocs: add description to base command
   df84528c7a experimental/vlan-networks: markdown touch-ups
   828d4770b6 docs/reference: explain "colon"
   aa6083444d docs/extend: reformat notes
   bfd17cb063 docs/builder: touch up markdown, and some minor rephrasing
   db5c1e4e51 docs/reference/run.md: touch-up markdown
   5631277cc4 reference docs: reformat notes
   299fb4e282 reference docs: fix broken links and markdown touch-ups
   26605e5a3b Adding missing title in builder.md
   838d67c5a0 Add clarification when using USER UID:GI
   c05754a365 [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e
   d7b734a61f vendor: update go-events to fix alignment for 32bit systems
   d88786fb81 improve "network prune" output to mention custom networks only
   62e46c2b66 Add "host-gateway" to tests for extra_hosts / --add-host
   3199cd1856 Skip IPAddr validation for "host-gateway" string
   e9eeb762f5 vendor: update go-events to fix alignment for 32bit systems
   870586b77d Bump Golang 1.13.10
   2e46b1e331 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17
   650989cffa CI: update notary test certificates
   d68161f5ca Bump Golang 1.13.10
   3f6cbafb87 api docs: fix broken link on GitHub
   03a2b6f3e5 Fix TEST_FILTER to work for both "integration" and "integration-cli"
   386205e278 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7
   825df7e593 Bump Golang 1.13.9
   5ceee878a0 Bump Golang 1.13.9
   f9e55973fd Update Golang 1.13.8
   6239c3658e Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919)
   ca646694e0 Update Golang 1.13.6
   5df7607049 Update Golang 1.13.5
   ba70026a0f Bump Golang 1.13.4
   5d41640c38 Bump Golang 1.13.3 (CVE-2019-17596)
   0ce2031f1d bump golang 1.13.1 (CVE-2019-16276)
   03ea68926d Bump Golang version 1.13.0
   f2377417ee Update to using alpine 3.10
   cdcca890cc Switch to s390x Ubuntu 18.04
   330f0aec13 builder: fix concurrent map write
   17a1f3f112 docs: add API versions v1.30 - v1.37
   e83446f765 seccomp: add 64-bit time_t syscalls
   7a88b57398 [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e
   0adbd79f8a Update libnetwork and DNS library
   30e89b9771 Update deprecation policy to 1 stable release
   d444120281 Include deprecation policy on deprecated features page
   9ea6bbb5fe remove unneeded comment from reference files
   a1c631a95d Fix whitespace that caused short-format in generated YAML
   ee8847c1ae Fix yamldocs generator to accomodate nested subcommands
   240eda98bf Fix naming of reference docs files
   c2de31670c docs: update code-hints for compatibility with "rouge"
   3fe5e22b5d Move schema1 deprecation notice
   d071a64684 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9
   773359a601 Dockerfile: switch to iptables-legacy to match the host
   3b64f62c34 Dockerfile: switch golang image to "buster" variant, and update btrfs packages
   0c599907a5 hack/make: ignore failure to stop apparmor
   14461409c2 Dockerfile: align consecutive COPY lines
   f422d243fe Dockerfile: order COPY lines by change frequency
   60af9b2b9c Dockerfile: sort packages alphabetically
   edc3150b30 Dockerfile: use build-arg for vpnkit
   c3939550e0 Dockerfile: use spaces for indentation
   bf61271ddc [19.03] Dockerfile: move CRIU_VERSION lower
   30c60fc2a3 bump vndr v0.1.1
   9ac5b25cb5 bump vndr v0.1.0 to support versioned import paths
   21e7bfd059 Use build args to override binary commits in dockerfile
   c37bec6230 Revert "dockerfile: update vndr to 85886e1a"
   c7b33768a6 go-swagger: fix panic
   d69a049009 Dockerfile: set GO111MODULE=off
   63369ad083 fix backingFs assignment
   6bf8bed5fc Fix rate limiting for logger, increase refill rate
   680fd72af7 Update Golang 1.13.8
   194ea663d9 Set the bip network value as the subnet
   b9b1b0b8f0 AppArmor: add missing rules for running in userns
   20666c2d62 AppArmor: remove rules for linkgraph.db SQLite database
   64e3e12354 Use FILE_SHARE_DELETE for log files on Windows.
   af7196a03b Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid
   bb990f060a Fix more signal handling issues in tests.
   188bdab73b DaemonCli: Move check into startMetricsServer
   72f7e5a414 Add `FromClient` to test env execution

libnetwork:

   8565f0b1 log error instead if disabling IPv6 router advertisement failed
   153d0769 bridge: disable IPv6 router advertisements
   fdaaa027 Resolver: fix error handling if we didn't receive a response
   b09f24d1 Fix NPE due to null value returned by ep.Iface()
   8068671f Fixes a panic in the DNS resolver
   536ae722 Dockerfile: update to Go 1.13.8
   dcd95280 Fix gofmt in preparation of Go 1.13 update
   f0b038ea regenerate protobufs with debian buster
   34c8de58 Dockerfile: switch to debian "buster"
   96600117 Dockerfile: update to Golang 1.12.17

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-07-01 12:43:16 -04:00
Ming Liu
4344c3db40 podman: uprev 1.8.1 > 2.0.1 
Updating to 2.0.1 to pickup bugfixes and security changes. The
following commits comprise this update:

a11c4ead1 Bump to v2.0.1
6a541f680 Merge pull request #6780 from mheon/even_more_201_backports
f7b16d017 Update release notes with further v2.0.1 changes
8bb986137 Fix inspect to display multiple label: changes
2ad9dcc07 Set syslog for exit commands on log-level=debug
723a9e308 Friendly amendment for pr 6751
68543bbec podman run/create: support all transports
c69ce171a systemd generate: allow manual restart of container units in pods
9de1581e9 Revert sending --remote flag to containers
dc22350be Print port mappings in `ps` for ctrs sharing network
48ce67fb5 Merge pull request #6776 from vrothberg/2.0-vendor-common
6eefff647 vendor github.com/containers/common@v0.14.3
0b9143df8 Merge pull request #6758 from mheon/v2.0.1_backports
915f8698f Update release notes for v2.0.1
8e428fa4e utils: drop default mapping when running uid!=0
eb9fd40d2 Set stop signal to 15 when not explicitly set
6594d5d65 podman untag: error if tag doesn't exist
639b809c8 Reformat inspect network settings
01bc6bdda APIv2: Return `StatusCreated` from volume creation
1cc603c1f APIv2:fix: Remove `/json` from compat network EPs
d26662484 Fix ssh-agent support
d94644d35 libpod: specify mappings to the storage
f425aede4 APIv2:doc: Fix swagger doc to refer to volumes
ddf78b2ba Add podman network to bash command completions
bfd303e16 Fix typo in manpage for `podman auto update`.
9a4517b37 Add JSON output field for ps
61bd64573 V2 podman system connection
f81ad0058 wip
cd0b18c24 image load: no args required
8fbfffc08 Re-add PODMAN_USERNS environment variable
0b4dcc7a3 Fix conflicts between privileged and other flags
7ea37dfe1 Bump required go version to 1.13
36d8b6979 Add explicit command to alpine container in test case.
03f952cfa Use POLL_DURATION for timer
07f535d8b Stop following logs using timers
dbce3468e "pod" was being truncated to "po" in the names of the generated systemd unit files.
5d9ec1ce7 rootless_linux: improve error message
37abb88aa Fix podman build handling of --http-proxy flag
27120bfba correct the absolute path of `rm` executable
4af208142 Merge pull request #6711 from lsm5/v2.0-custom-GO_BUILD-backport
0ac4061bd Makefile: allow customizable GO_BUILD
13924bac1 Merge pull request #6695 from cevich/update_v2.0
bade38c32 Merge pull request #6697 from mheon/bump_v2.0.0
c866e584d Update release notes to reflect we are now v2.0
f458c5968 Bump to v2.0.1-dev
eec482cae Bump to v2.0.0
64ba72363 Merge pull request #6694 from mheon/release_notes_2.0
5bda75cfd Update release notes for v2.0.0
89dbd1a91 Merge pull request #6674 from jwhonce/issues/6670
ed91524ae Merge pull request #6637 from jwhonce/issues/6574
ea8e61e4e Fixes #6670
bda4a6982 Correct logic for demux'ing channels
1a2eb3e61 Merge pull request #6677 from baude/pollOnEvents
33a602761 Merge pull request #6690 from vrothberg/fix-6687
f46664546 Poll on events for file reading
bba433ed9 podman images --format json: pretty print
5ec29f8d4 Merge pull request #6684 from vrothberg/fix-ci
334d3b1ef CI: force registry:2.6
a2661b1c2 Merge pull request #6673 from ashley-cui/master
4dc934080 Fix remote docs
e6b9b3ab2 Merge pull request #6656 from mheon/recursive_init
2e621aece Merge pull request #6662 from containers/dependabot/go_modules/k8s.io/apimachinery-0.18.4
1099ad6ac Merge pull request #6669 from vrothberg/unflake-rmi
b20619e5b Allow recursive dependency start with Init()
ec7822795 Bump k8s.io/apimachinery from 0.18.3 to 0.18.4
59cd8a0cf unflake rmi tests
3eb0ad04a Merge pull request #6663 from containers/dependabot/go_modules/k8s.io/api-0.18.4
ad33b2363 Merge pull request #6661 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.5
b5f7afd04 Merge pull request #6658 from mheon/experimental_no_more
d0b3035c3 Merge pull request #6611 from lsm5/fix-Makefile-for-varlink
5d161c8ca Bump k8s.io/api from 0.18.3 to 0.18.4
16dbc160c Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
6472b44c3 Merge pull request #6654 from rhatdan/keepid
6e410ede7 Merge pull request #6647 from rhatdan/caps
43ead88e8 Podman system service is no longer experimental
fe69aa9ba Handle dropping capabilties correctly when running as non root user
7b00e49f6 Merge pull request #6560 from mheon/fix_exec_logdriver
daabbc1a1 Merge pull request #6657 from mheon/bump-2.0.0-rc7
c385e6d36 Don't ignore --user flag in rootless --userns keepid
4b08d9ea5 Bump to v2.0.0-dev
5460ea87d Bump to v2.0.0-rc7
7b5073b46 Merge pull request #6655 from TomSweeneyRedHat/dev/tsweeney/b1_15_0
30c0fc9f1 Makefile: install.varlink needs to create dirs
a76bf114d Merge pull request #6620 from jgallucci32/api-logs-separate
70f6cf7ff Merge pull request #6634 from baude/v2buildfixes
fde8040fa Bump Buildah to v1.15.0
fd184fa4a Merge pull request #6522 from mheon/unless-stopped
585b14a9f Move logs functionality to separate file for APIv2
5694104c2 Merge pull request #6644 from jgallucci32/revert-log-follow
d97b5b04a Merge pull request #6630 from ashley-cui/master
96b442172 Merge pull request #6641 from vrothberg/harden-units
6645e0d6f Merge pull request #6648 from vrothberg/vendor-image
e5c343294 generate systemd: `ExecStopPost` for all units
f29360648 Merge pull request #6631 from rhatdan/hooks
03e99c9b4 Revert #6591 to fix issue with failed tests
ac4f4b148 vendor github.com/containers/image/v5@v5.5.1
6f1440a3e Add support for the unless-stopped restart policy
0e171b7b3 Do not share container log driver for exec
1acd2adcc Merge pull request #6640 from edsantiago/fix_flaky_logs_test
78ad57ebd Merge pull request #6636 from mheon/add_warnings
200afe7a9 Merge pull request #6583 from mheon/inspect_ctr_before_img
65c3a5660 fix misc remote build issues
38391ed25 Merge pull request #6622 from goochjj/podman_fix_init
6d5a432c2 "streaming output" logs test: fix flake
0d2b5532c Merge pull request #5852 from baude/v1prune
241326a9a Podman V2 birth
88c6fd06c Merge pull request #5837 from vrothberg/ignore
57f389728 Merge pull request #5848 from jwhonce/wip/options
8b178f12c Merge pull request #5839 from rhatdan/troubleshoot
1d93d2125 V2 Enable rootless
5def21140 Merge pull request #5842 from baude/v2bloat2
a8a61d976 Add SELinux volume information to troubleshoot.md
8c4d4b58e Merge pull request #5597 from sujil02/systemd-updates
ba430bfe5 podman v2 remove bloat v2
c1bafb8b5 Merge pull request #5844 from baude/apiv2filteridfix
e154249b4 allow filters to work when listing containers
8857ba20a Merge pull request #5835 from containers/dependabot/go_modules/github.com/containers/common-0.9.1
a037d9cd4 Update podman-generate-systemd man page
155a7d661 Merge pull request #5826 from cevich/gate_pip
09e821a8e Merge pull request #5690 from rhatdan/selinux
04e83f63a .gitignore: ignore v2 remote
084cfb81d Merge pull request #5834 from rhatdan/version
897847ccc Bump github.com/containers/common from 0.9.0 to 0.9.1
62803f8d3 Add version to podman info command
d6b3bc18f Merge pull request #5752 from mheon/pod_inspect_structs
c7d17613e Merge pull request #5827 from baude/v2bloat
0f7162d79 Merge pull request #5817 from rhatdan/selinux1
82ce9703e Add basic structure of output for APIv2 pod inspect
30d2964ff v2 bloat pruning phase 2
3500a8bc3 Merge pull request #5830 from baude/v2runtime
c4ca3c71f Add support for selecting kvm and systemd labels
6e9622aa9 Merge pull request #5775 from sujil02/v2-container-prune
ac94a96a7 Fix up SELinux labeling
195cb1127 Merge pull request #5671 from edsantiago/swagger-check
693a8039c Merge pull request #5776 from vrothberg/au
bbc0c4a97 podmanv2 fix runtime assignment
97bded830 Merge pull request #5823 from mheon/update_readme_19
337e8d6d2 Merge pull request #5786 from containers/dependabot/go_modules/github.com/containers/common-0.9.0
e394ff407 Cirrus: Fix gate container build failure
2aca1b7f9 logformat: handle apiv2 results, add anchor links
ef297d466 Merge pull request #5767 from edsantiago/logformat_add_anchors_and_apiv2
9b78bf929 Merge pull request #5770 from baude/v2events
d522755b5 Update README to reflect that latest version is v1.9.0
cc9b78f07 Merge pull request #5820 from mheon/bump-1.9.0
ec4060aef Ability to prune container in api V2
4489440aa Bump to v2.0.0-dev
d98572350 Bump to v1.9.0
37ed662f3 Merge pull request #5814 from baude/v2specgenprunelibpod
165aef776 podmanv2 events
a756161e8 Merge pull request #5813 from baude/v2edtests2
ffcb99d83 Merge pull request #5818 from vrothberg/fix-nil-deref
123158e83 podmanV2: fix nil deref
d83213634 test case added for image prune cache image
1e8e4bb33 note for skipping cache image added.
9dc9f5cf4 image prune skips images with child images.
714718794 v2specgen prune libpod
60dde457f More system test fixes on regressions
f0b6cdede Merge pull request #5812 from jwhonce/wip/options
d51727642 Add support for the global flags and config files
ba26c763c swagger-check: new CI tool to cross-check swagger
0d01f09bf Merge pull request #5811 from mheon/bump-1.9.0-rc2
bf97e803d Bump to v1.9.0-dev
443aab15e Bump to v1.9.0-rc2
a6caae0b5 Merge pull request #5808 from baude/v2psformat2
01c5915a5 Merge pull request #5809 from mheon/release_notes_1.9.0_rc2
246ee9320 Merge pull request #5801 from baude/v2mount
548645e75 Update release notes for v1.9.0-RC2
1be617891 Merge pull request #5445 from sujil02/podFilter-new
d1c26af14 apiv2 add bindings for logs|events
e87fe4dbb Merge pull request #5550 from giuseppe/rootless-hidepid
fea5f913e Don't include SUBDIR in windows.zip
1091440e5 rootless: fix usage with hidepid=1
68a5a85cc Bump github.com/containers/common from 0.5.0 to 0.6.1
fbe743501 V2 podman command
bd9386dda Merge pull request #5542 from rhatdan/vendor
464a1cd48 Merge pull request #5540 from jwhonce/issues/5531
d66d54282 Merge pull request #5544 from baude/apiv2serveswagger
c9c95a7e0 Merge pull request #5543 from edsantiago/swagger_fixes
52c835053 serve swagger when present
f557cf91d swagger: more consistency fixes
67d0d1e50 Vendor in containers/buildah v1.14.3
45e7cbfef Merge pull request #5480 from vrothberg/auto-updates
651ddd356 Reduce CPU usage when --timeout=0
81005f463 New test: man page cross-ref against --help
e89c6382a Add inspect for exec sessions
118e78c5d Add structure for new exec session tracking to DB
f138405b4 Populate ExecSession with all required fields
d9eb078e2 Merge pull request #5532 from baude/filetimeoutflake
de43a00b5 Merge pull request #5533 from mheon/bump-1.8.2-rc1
f08b992f3 Merge pull request #5536 from giuseppe/avoid-conmon-zombie
a6f5b6a48 podman: avoid conmon zombie on exec
15326f051 Filter pods through pod list api
e9846b962 Bump to v1.8.2-dev
c617484c1 Bump to v1.8.2-rc1
f3a28de32 Merge pull request #5528 from mheon/fix_master_vendor
d47dc63cf Fix vendoring on master
14186ca28 fix timeout file flake
bcdcfeb3e Merge pull request #5529 from mheon/release_notes_182_rc1
7c5ffe377 Update release notes for v1.8.2-rc1
83d2686f4 Fix vendoring on master
8f1ce4bdd Merge pull request #5524 from rhatdan/vendor
f4e873c4e auto updates
68ef7aa4f Fix path of tmp_dir
9ef5d2875 Merge pull request #5449 from baude/manifests
c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer
8081d9c74 Update containers/storage to v1.16.5
a255d7986 pkg/systemd: add dbus support
cc57b88f7 config: make warning clearer
2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes
da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4
83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0
300338478 Four small CI fixes:
67a985ddb Merge pull request #5514 from vrothberg/fix-ci
bfa1ba588 fix systemd generate tests
abbbeacd6 apiv2 addition of manifests
412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param
5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir
759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo
4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix
af1ac85da Merge pull request #5508 from baude/buildaddarchos
9ca4b6c6f add os|arch attributes when building
9128ef85c Missing double quotes in troubleshooting guide.
194723f31 force run container detached if container CreateCommand missing the detach param
8b07ad113 Merge pull request #5496 from baude/preemptive
16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9
4f497991b Merge pull request #5327 from baude/apiv2hc
c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer
8081d9c74 Update containers/storage to v1.16.5
a255d7986 pkg/systemd: add dbus support
cc57b88f7 config: make warning clearer
2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes
da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4
83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0
300338478 Four small CI fixes:
67a985ddb Merge pull request #5514 from vrothberg/fix-ci
bfa1ba588 fix systemd generate tests
abbbeacd6 apiv2 addition of manifests
412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param
5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir
759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo
4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix
af1ac85da Merge pull request #5508 from baude/buildaddarchos
9ca4b6c6f add os|arch attributes when building
9128ef85c Missing double quotes in troubleshooting guide.
194723f31 force run container detached if container CreateCommand missing the detach param
8b07ad113 Merge pull request #5496 from baude/preemptive
16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9
4f497991b Merge pull request #5327 from baude/apiv2hc
a95e9e5b4 Bump github.com/containers/common from 0.4.2 to 0.5.0
40ac4779e Bump k8s.io/api from 0.17.3 to 0.17.4
e7e5d125f Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9
e6fba1e44 eat signal 23 in signal proxy
2099643aa add apiv2 healthcheck code
c9f148fb1 Merge pull request #5470 from containers/dependabot/go_modules/github.com/containers/storage-1.16.3
d586e16ad Merge pull request #5484 from baude/bindingsnocolor
ac6c8fb68 Merge pull request #5482 from baude/removeimagefilter
9215eb033 Cirrus: Disable non-docs release processing
194759b96 turn off color-mode for bindings
3aa58ccd0 remove imagefilter for varlink remote client
925da7411 Bump github.com/containers/storage from 1.16.2 to 1.16.3
9c7481dbd Merge pull request #5474 from giuseppe/detect-containers-rootlessport-child-exit
235f36786 Merge pull request #5469 from giuseppe/no-size-create-container
358578087 run --rmi test: make it work
19f5d557b Merge pull request #5468 from Akasurde/5244_follow_up
647dc33e1 rootlessport: detect rootless-child exit
8741eb8a9 create: do not calculate image size
eb2d0a228 Follow up changes from #5244
78e090092 Merge pull request #5458 from baude/apiv2eventslibpod
9cfcf5692 Merge pull request #5460 from edsantiago/man_page_xref
9bc27118b Merge pull request #5372 from sujil02/podstatus
dbb3de990 Merge pull request #5459 from mheon/bump_readme_181
3d1bff6db man page cross-reference fixes: part 2
29c071d4f Update version in README to v1.8.1
da9d21635 Merge pull request #5457 from mheon/bump-1.8.1
216a6091d [CI:DOCS]Add libpod event endpoint
8877fed86 Bump to v1.8.2-dev

Testing has been performed across x86-64/arm/arm64 via cli and
podman-compose.

Signed-off-by: Ming Liu <ming.liu@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-06-30 04:01:03 +00:00
Dan Callaghan
d75bc44886 docker: enable docker.socket instead of docker.service 
The docker daemon supports systemd socket activation. If we enable
docker.socket (and not docker.service) then the daemon will be started
when it is first used.

Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-06-05 15:32:34 -04:00
Martin Jansa
aa558c7824 singularity: fix build with python3 
* Fix python3native inherit added in:
  https://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=a1e3f5c92cdee7c4259b7be643bd829ce7c1efa3
  to actually work
* also remove the work arounds for /usr/bin/python being python3
  on the target device
* I haven't tested this in runtime - I don't use it, it was just
  showing that do_configure error in "bitbake world" builds, the
  scripts might need some changes to be really compatible with
  python3, but it was broken already, now it at least builds
* upgrade to new version with
  3c05f06e6a
  would be nice by someone who actually uses this

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-05-21 22:10:19 -04:00
hongxu
05dd164818 lxc: fix compile failure on gcc10 
Since oe-core is upgrading gcc to 10.1, there is
a compile failure
...
|../../../lxc-4.0.2/src/lxc/cgroups/cgfsng.c:2100:10: error: writing
1 byte into a region of size 0 [-Werror=stringop-overflow=]
| 2100 |   *slash = '\0';
...

Add gcc option `-Werror=stringop-overflow' to workaround the issue

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-05-19 17:18:53 -04:00
Bruce Ashfield
a38cc34a4c kubernetes: update to 1.18 release branch 
Bumping k8s from 1.17 to 1.18 release tracking. Outside of the
kubernetes core changes the kublete and kubeadm conf files have
been removed from the main repo. We add the releases repository
to our SRC_URI and copy them in the same way as we did with the
existing reference files.

A full changelog follows:

   fe3ac3e3883 fix backoff manager timer initialization race
   25e2829552b Restore cache-control header filter
   4f633afbdec kube-scheduler: compatibility with ServerSideApply
   ff43875cb67 bugfix: initcontainer wasn't considered when calculate resource request
   b03bb751c21 Revert "stop defaulting kubeconfig to http://localhost:8080"
   7b6b53c8cbf Update CHANGELOG/CHANGELOG-1.18.md for v1.18.2
   2913f32b21c Release commit for Kubernetes v1.18.3-beta.0
   52c56ce7a82 Release commit for Kubernetes v1.18.2
   5ca8d60f319 Fix Node initialization for GCP cloud provider
   b4c61594923 Simplify unregistration of csiplugin
   f2e37956203 Unregister csiplugin even if socket path is gone
   1c73483c5de Move PSP tests behind a feature tag
   34726e1b50d kube-openapi bump to release-1.18
   f2de2d35086 Preserve int/float distinction when decoding raw values
   6fb6533170d Fix GCE ILB for large clusters
   4e644d0b484 Restore the ability to `kubectl apply --prune` without -n flag
   ea49e94be8a Fix client watch reestablishment handling of client-side timeouts
   35235970cdf Fix priorityClass typo, add numeric priority to static pods
   906513a06f6 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.1
   5dd22057dc7 Release commit for Kubernetes v1.18.2-beta.0
   7879fc12a63 Release commit for Kubernetes v1.18.1
   0d2cdc3b6d5 Test dropped round-trip annotations in HPA conversion
   7909fe2d9f1 Drop round-trip annotations in HPA conversion
   23c6b68f842 Skip updating cache on pod update if the node was deleted
   e9e1ea490f8 Check Annotations map against nil for ConfigMapLock#Update()
   f46ea4ddec9 Ensure Azure availability zone is always in lower cases
   0dee03d1bd2 Even with build error, kubectl apply should apply all valid resources
   b427784213a fix: update max azure disk max count
   7444c1e865b Ensure diff doesn't persist patches
   4860841aa06 Fix CSINodeInfo startup
   22f39eaae5f Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init
   1cf2fd183b7 Fix permissions for endpointslice controller
   b5470e1d649 Clean up event messages for errors.
   26a2c61bf2b Allow list-resources.sh to continue if a resource fails to list
   0c78c1e66e3 fix a bug where spn: prefix is unexpectedly added to kubeconfig apiserver-id setting
   262bdad7b9d Adds integration test for apply failures when applying multiple resources
   7e4d0319e3a Fixes problem where kubectl apply stops after first error
   203b1ddfdf7 fix cpu resource metric type by changing to counter
   dd7fb533d03 fix concurreny issue in lb creation
   1b15cefcc91 Kubeadm: fix Ready condition check
   bd9b7920920 kubeadm: add missing RBAC for getting nodes on "upgrade apply"
   ac62906c24d Check that ImageInspect pointer is not nil
   d2e35c7a6a7 Fix bug about unintentional scale out during updating deployment.
   38eea6b3926 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0
   5e251a7e39b Release commit for Kubernetes v1.18.1-beta.0
   9e991415386 Release commit for Kubernetes v1.18.0
   0630031f85b bump k8s.io/utils package
   dd342d7579d Simplify dual or single port logic
   2ca708d2c2b fix kubectl port-forward for services with explicit local port
   3c1d9790882 build/dependencies: Remove bazel WORKSPACE go_version check
   374e61893b9 deps: Update to Golang 1.13.9
   28a7bb5c7a7 build: Remove kube-cross image building
   e67d0822c96 Label Windows test as Serial.
   a98c208613e Fix the VMSS name and resource group name when updating VMSS for LoadBalancer backendPools.
   0c34f5e431c bump k8s.io utils
   3f81059b691 Do not reset managedFields in status update strategy
   bb673d80280 Use discovery to test apply all status
   cf790a8d209 Updating vendored files
   d28d6765656 Update vendored MountSensitive code for Windows
   d333dee452a add unit test for addTopology()
   fbbfad9f465 make filteredZones order predictable
   a3ec1a91bf8 Restore orphaning check in gc test
   d5444327df0 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-rc.1
   dbbed780668 Release commit for Kubernetes v1.18.0-rc.1
   2d981b36c98 Fix isCurrentInstance for Windows by removing the dependency of hostname
   8f07cdcc91e Revert "Cleanup CHANGELOG/README.md for release-1.18 branch"
   7e5745380c9 Revert "Delete extraneous CHANGELOG-*.md files on branch."
   2a095f434ba e2e wait until controller manager pod ready
   1d84a6cb533 Add missing article in prominent release note
   068963fc062 add testing
   d527a091927 add ExternalTrafficPolicy support for External IPs in ipvs kubeproxy
   efc4b121862 add ExternalTrafficPolicy support for External IPs in iptables kubeproxy
   df9a567f3f7 add feature gate ExternalPolicyForExternalIP for the bug fix
   4d6af4d8d8f Set unschedulable Condition after setting nominated Node
   334d46eed5d fix logging on e2e metrics grabber test
   23c358d883b Fix unbound variable error in gce/configure.sh
   4734543888c CHANGELOG: Update directory for v1.15.11 release
   89532ac2f0f CHANGELOG: Update directory for v1.16.8 release
   ce88e65ddaf CHANGELOG: Update directory for v1.17.4 release
   c957b2509fd Bump Cluster-Autoscaler to 1.18.0
   a68d712f129 Removing ConfigMap as suggestion for IngressClass parameters
   a35ca04dd66 Remove kubectl column output test
   e03385d6ac2 build/release-images.sh: remove possible duplicate targets
   66491d2d892 Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints
   366dd4af44e EndpointSlice and Endpoints should treat terminating pods the same
   ced2948fdeb Remove wait.Until for running Kubelet Bootstrap
   6be4d0a705b Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1
   4361f8f0521 wait until /metrics are ready on e2e test
   462b75388f2 let image cache do sort on write instead of on read to avoid data
   2c26e109b43 CHANGELOG: Update directory for v1.18.0-beta.2 release
   a9f834d17dc Implement noopWindowsResourceAllocator
   21b51a1bb6c Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.2
   49dfa869048 Release commit for Kubernetes v1.18.0-beta.2
   fa12441ab99 Preserve target apiVersion when decoding into unstructured lists
   ce3644ca593 Fix VMSS cache content
   c26653ced91 kubelet: Also set PodIPs when assign a host network PodIP
   b1c1187cca7 e2e: wait for controller manager pod to be ready
   e053fdd08ae Add NodeCIDR for detect-local-mode
   6b8fc8dc5ea Move TaintBasedEvictions feature gates to GA
   d80981b6574 test: Detect flakes caused by container teardown races on CRI
   df58c042a8a metaproxier logging for endpoints ipfamily
   23d9ffd4c8f Add metaproxier unit tests
   d8abacba40a client-go: update expansions callers
   4c034278f4e client-go: add context/options to expansions methods
   e93c6a67d5a Use go-bindata built from vendor/
   04a72d5ef91 client-go metadata: update callers
   b7c2faf26c2 client-go dynamic client: add context to callers
   4134494fa51 /readyz should start returning failure on shutdown initiation
   cb4ee9334b7 client-go metadata: plumb context
   6fa54d715fb client-go dynamic context
   b19dc3a474e client-go dynamic client: update DeleteOptions callers
   161b7513f73 client-go dynamic client: pass DeleteOptions by value
   d0890533a99 Updated files after rebase
   73611a473ff Fix expected version for csidriver
   c6fd25d1003 Updated CSIDriver references
   726af6bd7f2 Moved CSIDriver to GA
   1e78fc0bf03 generaetd
   bac9351c646 refactor egress dialer construction code and add unit test
   fbb1fb8902c add metrics and traces for egress dials
   ef3d66b98bb Parallelize attach operations across different nodes for volumes that allow multi-attach
   6fd748e2c56 exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly
   723761aa887 Don't try to create VolumeSpec immediately after underlying PVC is being deleted
   eb9cf777dce Disable HTTP2 while proxying a "Connection: upgrade" request
   06abedb0631 Allow both GRPC and http-connect mode to be toggled
   1bb6ed9bdc0 Checks error for loading audit webhook config to prevent panic
   5231c6815c7 managedfields: Update Apply time if neither object nor managedfields have changed
   df41fd932be Bump sigs.k8s.io/structured-merge-diff to v3
   7120abe6989 fieldmanager: Add failing test for no-op apply actually writing to etcd
   39681aa5800 fieldmanager: Move ManagedFields update logic into its own class
   76f85943787 more artisanal fixes
   aaf855c1e69 deref all calls to metav1.NewDeleteOptions that are passed to clients.
   c58e69ec791 automated refactor
   86bd06c8820 update clients
   d9671045ff5 update client gen
   aee9fde751c Add e2e test for validating JWTs as OIDC tokens
   1d7006c38d0 Add Extenders to scheduler v1alpha2 component config
   912f05bafbb ingress: add alternate resource backend
   da988294ec5 Work-around for missing metrics on CRI-O exited containers
   c7b098ac6c2 Renaming: "Change" -> "Add" for consistency with underlying method
   8a1b6032098 Fix queued request accounting, extended queueset test
   1fab27502b2 Disallow use of Plugin or PluginConfig when using Policy
   13fa48e5924 Disallow duplicate PluginConfig in framework creation
   af0e1319c35 Allow container visitor to operate on selected container types
   8c35e32a402 test: Properly detect container runtime flake in e2e test
   bb318ea84aa Update to latest node-cache image
   e931e30647e ingress: allow wildcard hosts in IngressRule
   7d86217043c Use the v0.0.8 network proxy images
   834331088fa Use versioned autoscaling API group in code-generator examples
   2cd6abece45 dynamic certs: pass valid object to event recorder
   3bc918e4842 dynamic certs: use correct name with event recorder
   86a5993007e dynamic certs: do not copy mutex via shallow copy of tls.Config
   0551d408ace Bug fix for TM none policy
   b1329596875 Start adding tests for verifying correct modes
   4baa1d967d6 Check for nil cpuManager
   1f9b1af1adb Fix Bazel build
   773b890b059 Show kubectl describe ingress error
   4a4852ca9a1 Hopefully plainer test strings
   c52d4bf32f5 Implement changes into volume plugins for skipping chown
   053baaf1437 Update generated files
   f7509d277ef Define new type for storing volume fsgroupchangepolicy
   3ee30343cc1 Fix log formatting for skipper. "INFO" is already logged by Logf, and it wasn't in the format syntax.
   8943e443e81 kubeadm: deprecate the flag --use-api for cert renewal
   bacc2c49605 Set field manager for kubectl diff --server-side.
   e8b09d36440 Add AnyVolumeDataSource feature gate
   389dd0a499e Don't log "SHOULD NOT HAPPEN" errors more than once per second
   167d6a2c8b0 Use the same default namespace across event recorders
   8bc5cb01a9c kubelet: Clear the podStatusChannel before invoking syncBatch
   8722c834e5e kubelet: Never restart containers in deleting pods
   2364c10e2e4 kubelet: Don't delete pod until all container status is available
   ad3d8949f08 kubelet: Preserve existing container status when pod terminated
   6d98b0a0f4f Test that an always-fail container can't report the pod Succeeded
   e5b655938e5 Add kubectl debug alpha command
   9044fbfc5d7 Update VolumePVCDatasource to GA for 1.18
   b93e3d18e9f fix scheduler.TestCoSchedulinngWithPermitPlugin and test scheduler.PermitPlugin
   9fabafdbb11 Windows specific kubelet flags in kubeadm-flags.env - Uses correct pause image for Windows - Omits systemd specific flags - Common build flags function to be used by Linux and Windows - Uses user configured image repository for Windows pause image
   61565b3f6c7 e2e-topology-manager: Wait for SR-IOV device plugin
   212190e25e1 Utilerrors.Aggregate: Allow using with errors.Is()
   98b9c7b5e8f Fix GCE PD snapshot flakiness
   2e97d3c8732 Generalized NonResourcePolicyRule.NonResourceURLs impl
   16d221e4078 Promote GMSA to GA
   076132e38a5 cleanup: move the test of TaintBasedEvictions features to sig-node
   b2677b1e572 client-go: use klog.V(3) for the cert-rotation controller start/stop
   5ceecd3ba3f Update agnhost to test OIDC validation of JWT tokens
   401b85e547f Add FromFile and FromExistingClassName support for SnapshotClass in external storage e2e test
   db3392ed124 Always include remoteAddr in source IP list for audit (#87167)
   3784438b566 Prevent CephFS from logging senstive options
   548b297a003 Prevent AzureFile from logging senstive options
   727582311f6 Fix MountError Test
   22e8189f40f Update dep k8s.io/utils to 0a110f9eb7ab
   f38904d6f48 Adding PathType to Ingress
   9dcbc0bf909 update override behavior for kubectl --tls-server-name
   02cd65d7bb5 Squash pkg/describe/versioned/ into pkg/describe/
   37c81ed79ac Support TLS Server Name overrides in kubeconfig file
   07dc17ffd9a Provide more verbose empty config error based on the context
   6de140567b3 Changed kubectl cluster-info dump to not display "Cluster info dumped to standard output" message when output is stdout
   472a9352943 Update Cluster Autoscaler version to 1.18.0-gke.0
   413960e49be cleans up dynamiccertificates package
   4144a2a1cf5 Add unit tests for IsKubeletClientCSR and IsKubeletServingCSR
   c2367bd5da6 Extend client-go csr package to invalidate CSRs based on signerName
   ef5c9203259 bandwidth: use regexp to handle tc output fix newly-added 'chain N' output from 'tc filter show dev XXX'
   c77b297babc Hide kubectl.kubernetes.io/last-applied-configuration in describe
   9dac1699bfd Wire --filename flag to exec
   49b11b5431d Implement simple endpoint slice batching
   f535a9c9ed4 Make some metrics finer-grained, add dispatch counts, note immediate reject
   81f46b64a35 add a new generic filter goaway
   9902021ccd0 Fix a PodTopologySpread e2e flake
   2a98cb7f8b2 Use GRPC mode for network proxy
   3af671011ad Generated API
   674e539fcad test/e2e/framework: remove dependencies to internal APIs
   efe35b9a9aa move eparis and zmerlynn to cluster/ emeritus_approvers
   904c2d8bc0a add bentheelder to cluster/ approvers
   83a223f5ee3 Support intermediate certificate in certificate store
   60da52a24ab Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs
   73ad38593a0 Add default constraints to PodTopologySpread
   0989770135c Update network proxy to v0.0.7
   b19ad9e7a78 stop defaulting kubeconfig to http://localhost:8080
   929b1559a0b Add ReloadCertFromDisk flag to rest.Config and to kubeconfig which allows the provided client certificate files to be reloaded from disk (currently on every use)
   1ede096465d Enable topology-manager-e2e tests to run on MultiNUMA nodes.
   4abbce4549e Refactor CPUMananger-e2e-tests so that it be reused by topology-manager-e2e-testsuite.
   09598d48f65 Improve plugin args JSON tags
   f96c75bca29 Bump csi-driver-host-path version to get fixed block snapshots
   a4b59a5d7c1 Currently SRIOV detection logic is reporting error if it fails to detect SRIOV device on the system. This patch aims to fix the same.
   1cb42445d76 hack/update-vendor.sh
   dbe84361440 Replaced uber atomic with sync atomic, removed unneded "blank import"
   104db4f01b2 Fix block snapshot tests
   afcbb683865 Fix unit test to fail with proper final gRPC code
   85367871333 Add unit tests
   c11427fef5b Call NodeUnstage after NodeStage timeout
   f6fc73573c7 Call NodeUnpublish after NodePublish timeout
   86a5bd98b64 Add uncertain map state to block volumes
   da3c3432d83 Add context and options to scale client
   e8538d9b76a Add mutex to Topology Manager Add/RemoveContainer This was exposed as a potential bug during e2e test debugging of this PR.
   1e613e5a4c0 Update TopologyManager Feature Gate: - Alpha to Beta. - True by default. - Remove redundant validation checks.
   b60c0b5c24a small cleanup for ipvs readme
   e79f49ebba9 validate configuration of kube-proxy IPVS tcp,tcpfin,udp timeout
   132d2afca07 Adding IngressClass to networking/v1beta1
   4c54241c3df Support token authentication for network proxy
   b5cdb6e6cb5 test/e2e/:remove // TODO: write a wrapper for ExpectNoErrorWithOffset()
   b63be6a46da test/e2e/framework/service/:simplify function CreateTCPService
   f92c55a4769 Make sure we fail the job and log more details when it does
   bdea23380ba Move conformance image to debian:stretch-slim
   7f270038d3c Remove unused function aggregateGoroutinesWithDelay
   0f4cfe58d8e Switch to UpdateVMs() for updating VMSS backend address pool
   c0bad80e5b4 Factor-out metrics related logic from authentication logic.
   f205e3dd596 Use only v1 CRD resources in e2e tests
   9bfe818229e Fixed golint issues in RBD code
   4ea52da628f Remove prometheus references from pkg/controller/endpointslice
   2af26dca978 Add UpdateVMs() for VMSS client to allow update multiple VMSSVMs by sequential sync requests and concurent async requests.
   3eec87cd915 update WithPlugin comment, in case remove function
   b67a033de22 Refactor: move generic functions of integration test to util directory
   c6b94e4606f refactor volume binder
   aa12e1f8c42 e2e_node add test for PodOverhead feature
   002c75442d7 storage: confirm that paging and predicate filtering work together
   61fa4e6c098 Address comment and remove if condition
   7b214c96b01 Hide deprecated --server-dry-run for kubectl apply
   7638aae77ee Update README.md
   10049500c18 Update README.md
   2c1b7437669 Promote block volume features to GA
   3fbb549fb7f Promote the egressselector API to beta
   aa07992a441 update kube-controller-manager and kube-scheduler to match kube-apiserver defaults
   2f5468f1ae5 update map keys api doc with validation requirements
   5b3b4de972c scheduler_perf: do not override throughput labels
   2e187415fd5 extend CRD map and set validation
   be6ac856f13 Deprecate --generator flag from kubectl create commands
   cb477d3cc17 fix: remove conflict comment of taint "Value"
   347d8419488 Bump CSI hostpath driver
   06062b15e96 test images: ARG instructions should be first
   2e7ce8cea01 bazel update
   6329b17d2f6 volume scheduler: introduce special string type
   6eb0b034ac9 volume scheduler: move reason strings into volume code
   21f78f33487 Added non-randomized tests of matching FlowSchema rules
   ce30d2d5c85 test images: Skip building manifest list if no image was pushed
   cd57b830c14 audit webhook use network proxy
   1b38199ea8b pass Dialer instead of egressselector to webhooks
   d318e52ffe0 authentication webhook via network proxy
   97e8bf5f84a Fix default regular expressions in conformance tests runner
   e398302dc77 Add OWNERS and testing to external extender/v1 api
   711c1e17209 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness.
   ccd9e4e2de3 Don't save managedFields if object is too large
   57ea7a11a64 Remove global variable dependency from runtimeclass admission
   991909fdfbb PodOverhead: remove feature gate override in tests
   4637991632d Update PodOverhead feature gate for beta
   18ffaf56084 Move scheduler extender API V1 to staging k8s.io/kube-scheduler
   d5dae048983 certificates: update controllers to understand signerName field
   d7e10f98697 Add Certificate signerName admission plugins
   da8453af6eb fix unsupported bug
   567cb6c6050 fix: azure disk remediation issue
   acf84351e42 test images: Rebases nautilus and kitten images
   117cbda4870 Image Promoter: Allows images to be pushed immediately after being built
   a983356caa9 Add signerName field to CSR resource spec
   fb7209486e2 fix: azure file mount timeout issue
   11656478be9 register metrics from comp-base
   1f9f2390cb5 Add block cloning tests
   2327934a860 Rename GetTopologyPodAmitHandler() as GetAllocateResourcesPodAdmitHandler(). It is named as such to reflect its new function. Also remove the Topology Manager feature gate check at higher level kubelet.go, as it is now done in GetAllocateResourcesPodAdmitHandler().
   e26fff5cbc2 Update to golang@1.13.8
   a9c61295779 Device Manager - Update unit tests - Pass container to Allocate(). - Loop through containers to call Allocate() on container by container basis.
   cb9fdc49db8 Device Manager - Refactor allocatePodResources - allocatePodResources logic altered to allow for container by container device allocation. - New type PodReusableDevices - New field in devicemanager devicesToReuse
   0a9bd0334dd CPU Manager - Updates to unit tests: - Where previously we called manager.AddContainer(), we now call both manager.Allocate() and manager.AddContainer(). - Some test cases now have two expected errors. One each from Allocate() and AddContainer(). Existing outcomes are unchanged.
   467f66580b9 CPU Manager - Add check to policy.Allocate() for init conatiners If container allocated CPUs is an init container, release those CPUs back into the shared pool for re-allocation to next container.
   709989efa2a CPU Manager - Rename policy.AddContainer() to policy.Allocate()
   0d68bffd03f Change GetTopologyPodAdmitHandler() to be more general
   b6b60f7fa50 test images: Temporarely exclude Windows test images
   c57f20b7129 tests: Replaces dnsutils image used with agnhost (part 4)
   2543598628d Fix etcd issues on ARM
   b2528654797 kubelet: Avoid sending no-op patches
   ef786c9fa2d Setting a Pod's nodeAffinity instead of setting .spec.nodeName directly
   505dff6d20a Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly.
   517a41fe849 Fix an "index out of bound" issue in scheduler preemption e2e
   7346579a032 Update etcd debian base image to v2.0.0
   e64169d6b51 build: Enable kube-cross push/pull from K8s Infra GCR
   bb0d9c9f239 build: Add justaugustus as reviewer
   23b69a97c6d build: Add OWNERS on build-image/
   ee00896712c add support for single stack IPv6
   fd5b298c508 Test PodTopologySpread.PreScore instead of internal pre-processing.
   0e46803e778 Test PodTopologySpread.PreFilter instead of internal pre-processing.
   ca5d394f6a2 fix the coredns preflight check for unsupported plugins
   10805e04522 [refactor] fold PreemptionExecutionPath into the existing top-level SIGDescribe
   e8245d6fd91 Add unit test for framework plugin configuration
   79680b5d9bf Fix pkg/controller typos in some error messages, comments etc
   07c4982245f Add unit and integration tests for multiple profiles support
   bf605043653 fix import formatting in gce_utils.go
   2a056134809 gce: remove duplicate patch service method
   ed0e0350854 Add documentation around plugins
   b342818361f Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1
   c431b5444a6 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1
   f2d7577e318 Release commit for Kubernetes v1.18.0-beta.1
   5a6435ad768 fix: corrupted mount point in csi driver
   d71829a1fc3 e2e: avoid setting NodeName for CSI driver deployments
   7d59ea8394e Reorder conditions in FindMatchingVolume to avoid checking NodeAffinity in trivial cases.
   c80dcf56ee2 Ensure webhook/quota/deny admission comes last
   6a337276323 Adding AppProtocol to Service and Endpoints Ports
   2bcf99f05fd Improve rate limiter latency logging and metrics
   7b2a0a42601 update bazel
   5da37d5b5ef Fix a scheduler e2e bug on PodTopologySpread scoring
   c6c0bb254af Update version of GCE PD CSI Driver deployed in tests
   33ef66b9275 Updating OWNERS for Windows+Azure tests
   d44d5b35f3d Add show-hidden-metrics-for-version to kubelet
   8cb84feef3d test images: Updates agnhost guestbook
   ea45da7e52a apiextions: add list-type: map|set CR validation
   23340d7522c [UseNetworkResourceInDifferentTenant] Fix bug of setting incorrect subscription id on azure network resource clients.
   7e1ec59fe2e Remove AlgorithmSource from v1alpha2
   c0488584712 Support multiple scheduling profiles in a single scheduler
   08473a49497 remote patch.go and patch_test.go files
   bd8ed0a2a7d Add BenchmarkSchedulingWaitForFirstConsumerPVs benchmark
   98df9d9db60 Make sig-scalability reviewers / approvers of cluster/gce
   6739bde9ca1 Create OWNERS file for cluster/log-dump
   34206a610a1 Don't rely on contents of optional Condition fields in CSI mock test
   1c0a78a4fdb Use servicePatch methods from cloud-provider repo in service-controller
   60f3ebe6b54 Remove alpha feature test for EvenPodsSpread
   c261d12bbf7 kube-proxy: fix confusing default value for healthz and metrics bind address, deprecate healthz-port and metrics-port flag
   bdc54eb18a5 Use compute v1 api to specify network tier
   d578c02975b Fix pkg/registry typos in some error message, variable names etc
   a3f6627ce80 scheduler: deprecate deprecated metrics in 1.19
   388ebfe7d0e append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign.
   45d69b3a5a1 test: don't use hardcoded pod count for memory limit test
   2683b1065c0 Update the conformance list and doc generation logic
   cb12e8a059b update corefile-migration library to 1.0.6
   a980cb7ead3 update coredns to 1.6.7
   886214f48c6 Fix recent context change after rebase
   4eb06577dc5 Fix golint issues for `core/v1/validation`
   63ff616aa8d Adding Windows CPU limit tests
   19acf7d0515 Fix cpu resource limit on Windows
   b50f60c98fd scheduler_perf: allow to override the default benchtime
   0f3e0b40f68 scheduler_perf: describe how to run BenchmarkPerfScheduling manually
   9e71741d066 Add Profiles to kubescheduler.config.k8s.io/v1alpha2
   1b710a4c56c kubeadm: modify how component volumes are printed
   0f31bef94c4 Default grace period to 0 when --force is used to delete an object
   87d0e826c15 Remove the unsupported CloudProviderBackoffMode from Azure cloud provider config.
   a8c41ae5fb9 Deprecate service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset
   109f5db5a33 kubeadm: allow creating a cluster with ECDSA keys
   b38ed0467f9 Support cluster using network resources (VNet, LB, IP, etc.) across AAD Tenants.
   64c4876ccd0 Add e2e session affinity timeout test
   e268f033b67 Revert "Mark session affinity tests as [Flaky]"
   457c05feb87 deflake e2e session affinity tests
   2e23f847458 kubeadm: fallback to a known etcd version if an unknown k8s version is passed
   0e3b7a7aea3 fix test failure
   e5bb6af4756 fix: add remediation in azure disk attach/detach
   8c633356df9 move well known cloud provider taints to k8s.io/cloud-provider/api
   b873cbbed58 Fix: pkg/apis Typos in comments, function name, error message
   5362e8b6cb1 Fix initialization bug in `FakeImageService`
   ed9492ad69f use ControllerClientBuilder from k8s.io/cloud-provider in cloud-controller-manager
   8067dd84700 kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster
   fdec0ee1214 tests: Create pod for Windows test
   a6dc7ba1387 Add release-1.18 publishing rules
   d10e3da92d3 Fix typos in some error messages, comments
   0acaf5c3e93 Fix kubectl describe ingress annotations not sorted
   5db45e12d54 fix kubectl create deployment image name
   ea5bea2b9fc Respect ignore-volume-az option in admission plugin
   190a72392ae Refresh discovery server resources for memCacheClient in parallel
   78b18ed6f4e Swith to mock clients for route/routetable/networkinterface tests
   8c6956e5bb4 Refactor handling of local traffic detection.
   a54a52c5de3 Enable field management for all new objects
   c811fc58ef0 check ip family for node port connectivity test
   684d6fb0ade Instrument DEK cache fill and request inter-arrival times.
   68b7564e7ee fix alias for stack protector kernel config.
   1d896db61cc e2e-scheduling: add basic PodOverhead test
   2568b552c84 Fix aws provider to return no error when instance is not found for InstanceExistsByProviderID
   cd5cf567d88 Avoid adding labels to nodes in CSI mock driver
   c20e6043777 Revert "log-dump.sh: allow to dump extra log files"
   bb0a5ab016b tests: Fixes Hybrid cluster network test
   4cb28f64ea2 Fixes for the `No ref for container` in probes after kubelet restart
   7c3f6fa3234 test/e2e/framework/node/:remove TODO and make some functions private
   91dc590cde7 test images: Adds building README
   b71fbdb3643 Image Promoter: Adds Windows build nodes for Windows test images
   fe15a46939c test images: Use multiple Windows nodes to build images
   3cdb7a89cbb test images: Adds multiple Windows channels support
   296464d968b test images: Adds Windows support (part 1)
   a4ceb143ddb images: Changes the image naming template
   25b7a138644 images: Configurable BASEIMAGE hierarchy
   efcdb929dec images: Adds linux/ prefix to BASEIMAGE entries
   22a5fbcfa98 test images: Bumps image versions
   e5760015d20 e2e-framework-node: add runtimeclass to dedup code
   54be6ca6794 Update API doc for feature PodTopologySpread (a.k.a EvenPodsSpread)
   d44a30f0edd Moving Windows RunAsUserName feature to GA
   f90726a6a6f fix get-kube authorization headers
   86ead631585 update golang.org/x/crypto
   78e98da1dbc test/e2e/framework/log: optimize PrunedStack()
   d798ccbba16 Add tests for egress selector
   a980a1fa24b Add e2e test to test Except clause in NetworkPolicy
   907ab25b6fc vendor network proxy client
   55b89a6451d Support empty root CA for konnectivity
   725d2b6a8fd Network Proxy: GRPC + HTTP Connect with UDS
   64904d0ab8b e2e: topomgr: extend tests to all the policies
   bdc4e2fd17d Support injecting errors for `FakeImageService`
   c43b9405860 log-dump.sh: allow to dump extra log files
   03ecc20b199 empty_dir: Check if hugetlbfs volume is mounted with a correct pagesize
   3e59a0651f1 kubeadm: optimize the upgrade path from ClusterStatus to annotations
   b140c5d64b5 kubeadm: remove `ClusterStatus` dependency
   a249b93687a e2e: topomgr: address reviewer comments
   44e6a506b9b fix: check disk status before disk azure disk
   97fc3e6139f Fix typos in apiclient util
   e6b9a7a3098 Fix golint errors in pkg/controller/garbagecollector
   aecce98a542 wait for pruned CR to be invisible from API
   e2c733a702e test: export a fake Azure cloud Via the exported GetTestCloud(), we can reuse the code for the unit tests in Azure related CSI drivers.
   a9ec444d743 Add --dry-run to more kubectl commands.
   ad8bf3c1397 kubeadm: do not pin unit tests to a version
   22319019abc kubeadm: update constants for 1.18
   98ad7416faa Start deprecation process for StreamingProxyRedirects
   fdd7424d191 add logging for csr being approved and issued.
   74718adf109 fix data races for other usage of Q
   92759ea6429 NetworkPolicy e2e test should wait for Pod ready
   833519f80b6 e2e: topomgr: properly clean up after completion
   7c12251c7a6 e2e: topomgr: add multi-container tests
   8e9d76f1b95 e2e: topomgr: validate all containers in pod
   ddc18eae67c e2e: topomgr: autodetect NUMA position of VF devs
   0c2827cb504 e2e: topomgr: remove single-numa node hack
   bb6beb99e5a e2e: topomgr: early check to detect VFs, not PFs
   882d6e93afd Implement tests for multiple sizes huge pages
   0eb65bd7da2 Implement support for multiple sizes huge pages
   76847b3a6eb Cleanup CHANGELOG/README.md for release-1.18 branch
   b410f77d314 replaced tokenaccessreview with tokenreview
   7e33feec572 fix data races in scheduler unit tests
   a024ac14ef1 Add init containers to dump info
   0ec85320cff podlogs: include node name in prefix
   f85e079147b optimize kubectl version help info
   a1523a049ff homogenize metrics naming
   6d3a18b0be4 test images: Image Promoter sed fix
   da6f89217d3 adding response headers
   f7942290af0 tests: Replaces images used with agnhost (part 4)
   7f56c753b31 Make MetricCollector configurable for scheduler benchmark tests
   5b7ae34eada Switch EndpointSlice to use discovery v1beta1 api
   fdefdff2225 add delays between goroutines for vm instance update
   1208bc34c4e kubemark: move a channel send out of critical section
   d9f7a1f3114 Don't call delete for already deleted volumes
   af9e0be163a kubelet: Record kubelet_evictions when limits are hit
   ae0e1b0ca29 Update default cos image to include runc-1.0.0-rc10
   b757ca16e2b Add more E2E tests for the ../poddisruptionbudgets endpoint
   89bb7d84541 Honor the RevisionHistoryLimit in StatefulSetSpec
   d221d82eaf3 run permit plugins in the scheduling cycle
   ca399e63157 Add a README describing behaviors
   b7dcc4ac298 Release commit for Kubernetes v1.18.0-beta.0
   fac4a09f9ee Delete extraneous CHANGELOG-*.md files on branch.
   c8377ef7dbc Add BuildArgs to interpodaffinity plugin
   0dfe0c793b5 rest: remove connection refused from the list of retriable errors
   6846a0a6b62 Implement ItemBucketRateLimiter
   9eb45d22a43 Fix wrong alpha version for ValidateProxyRedirects
   fd81f04036d Update Go modules
   1ade9476980 chore: move caches to a separate package
   b6511788491 fix incorrect configuration of kubepods.slice unit by kubelet (issue #88197)
   70a28579988 test/e2e/node: fix selinux test failure
   e77df88200f Present more concrete information about pod readiness
   119f4df9c5c test/e2e/framework:remove unused code and move const
   a31ccc7b99b kubeadm config images list: test structured output
   23e4d05083b kubeadm config images list: implement structured output
   be7e5b47fe2 kubeadm config images list: update output API
   9c8d4bedccc test/e2e/framework:remove TODO and make func private
   073d0b23407 Add getPublishDir and getVolumePluginDir
   51d44af1866 Fix route conflicted operations when updating multiple routes together
   53cda47913f update bazel configuration
   6a773fb9c2d fix: update max azure disk max count
   8fd0d8028fe Remove `FilteredNodesStatuses` argument from `PreScore` interface
   d97169f59ad Clean up --dry-run values.
   c93dffdfc44 E2E tests for PodTopologySpread
   5fcd9c7c7ec Error if --local and --dry-run=server are passed
   4454ce6f373 fix shellcheck failures in health-monitor.sh
   d827f2634ac update stale pause image comment
   8ba86728e3d bump pause to 3.2 in kubectl test data
   53da837872a bump pause to 3.2 in hack/
   3fb71832153 bump pause to 3.2 in test/
   583f804652f Do not dereference qcAPI which maybe nil
   2fd62ad72ad added nodeSelector to constrain it to Linux only
   0e178f93414 rename to sharedLimitWriter
   1631825e447 bump pause to 3.2 in kubelet
   a00a1e39ef6 bump pause to 3.2 in kubeadm
   12abf03f6b4 Shrink mutation detection critical section
   b142868eaf4 Version the API Priority and Fairness FieldManager values
   51120d133ce Report scheduler_perf integration test kube-scheduler metrics into artifacts dir
   6068ce96b1f fix: get azure disk lun timeout issue
   c1383e99af5 Add deletion interfaces for VM, VMSS and interface clients
   bb770c0325a e2e: getCurrentKubeletConfig: move in subpkg
   8b825d15111 Add show-hidden-metrics-for-version to scheduler
   a20ae3953b5 Remove optional from core docs for 'Type' (#88029)
   932500c0151 Remove deprecated rolling-update command
   3342e4a09a9 Extend CPUManager e2e tests to run on MultiNUMA node with/without HT
   6e933199c9e Change line terminators from CRLF to LF
   c83a860e9d8 Fix a bug in e2epod function
   a4e4a994352 Remove PodBackoffMap
   ef8627c95e0 Construct http Request using http.NewRequest
   0da08ffd6a6 Updated test cos image to include runc-1.0.0-rc10
   becc4b7d57f remove unused manifest-tool rules
   20b1597302a switch pause to docker manifest instead of manifest-tool
   fc5b08569f2 Create an OWNERS alias for net-driver-approvers
   719b3286635 add a changelog note for pause 3.2
   b6bdf5172e3 Update Abdullah as the scheduling feature approver
   a4230055f36 address review feedback
   bcd975aa657 Replace Beta OS/arch labels with the GA ones
   c0580730469 Add a event to PV when mount fails because of fs mismatch
   efec7e64ce0 remove TODO and use framework.SingleCallTimeout
   99bda6fac09 Remove HardPodAffinityWeight from v1alpha2
   55b687054d5 Fix updated pod NetworkPolicy e2e test
   666bc6aeb42 Scheduler: Exclude plugin config for empty policy arguments
   53fce7641fb OWNERS(releng): Remove aleksandra-malinowska from Patch Release Team
   5643280438d OWNERS(releng): Add Branch Managers to release-engineering-reviewers
   d6fcc224f17 kubectl cluster-info dump: use file extension according to output format
   e42940a67b4 CHANGELOG: Update CHANGELOG-1.18.md
   6729bfd648b use network proxy for proxy subresources
   7b5534021ce Collect some of scheduling metrics and scheduling throughput
   15bc88785a3 test/e2e/framework/util.go:make function LookForString private
   08ba240c6bb e2e: e2e_node: refactor getCurrentKubeletConfig
   0bd2e629c73 Fix unit tests
   e2d8e575f04 Add CSI block volume directory cleanup
   c78c0e949d3 Remove unnecessary calls to GCE API after PD is created.
   528adbefe4d Remove client cleanup from TestCleanup
   7f9e228bd75 Fix impossible condition in test/e2e/framework/resource_usage_gatherer.go
   c099585b10c Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-alpha.5
   13b80b48cd0 Use --dry-run=client,server in kubectl.
   e8f67d122f8 Fix gce-cos-master-reboot test
   3072f9080ef update pause to 3.2 since we changed the build
   5782d616f2f Move skip method from e2e fw ginkgowrapper to e2e skipper fw
   aa4113d777d Set up connection onClose prior to adding to connection map
   d61e90b0eeb Separate containerd install from config, and other cleanups
   81668cb8871 Change migrated-to annoation key to follow best practices by removing beta and using 'pv' prefix
   8ff6b24c573 Don't show flags in api-versions help
   f5b7e3cca35 Rename `PostFilter` plugin to `PreScore`
   cc32702e8fa Add ephemeral containers to streamLocation name suggestions
   0368a7d5f7a Fix example of kubectl config set-credentials
   0421b40d795 Remove tautological condition in test/e2e/framework/pod/resource.go
   6a487723eda Make Azure clients only retries on specified HTTP status codes
   c048fb19fc4 Initialize http Request Header before RoundTrip to avoid panic
   d9184b75c99 Convert volume.TestConfig to use NodeSelection
   76a4a34dae9 Pass NodeSelection directly into e2e testsuites so that tests can use them more consistently
   242e3ebf01d Add buffer for GC resync retry to GC e2e tests
   fb9f02b5e11 Don't set NodeName directly in Pods so that it still goes through the scheduler
   0ba58915194 kubeadm: update embedded CA in kubeconfig files on renewal
   5a176ac7724 Provide OIDC discovery endpoints
   06fad92509d Add CHANGELOG/CHANGELOG-1.15.md for v1.15.10
   1653476e3f6 proxier: use IPSet from k8s.io/utils/net to store local addresses
   77feb1126e4 userspace proxy: get local addresses only once per sync loop
   126bf5a231c ipvs proxier: use util proxy methods for getting local addresses
   313c3b81e3e iptables proxier: get local addresses only once per sync loop
   9e5a06c3edd update vendor k8s.io/utils to 5f6fbceb4c31
   e3ab253cd81 Add CHANGELOG/CHANGELOG-1.16.md for v1.16.7
   888a322d9ca Round times to nearest second before sorting
   f26dbc473d1 Avoid running docker specific test in containerd
   5e94cccf5c3 Add CHANGELOG/CHANGELOG-1.17.md for v1.17.3
   a657d51ce35 Lower server-side apply percentage to 10%
   89066cceb92 Add RegisterPluginAsExtensionsWithWeight
   ca81235f241 Fix serializer test
   c27fb4bad6f dump docker image list
   2430c48c104 Delete pod in volume tests
   9cb7f54c0b6 fix: add azure disk migration support for CSINode
   11263bb57f9 kube-proxy filter Load Balancer Status ingress
   fb895056c65 Add test
   73614ddd4e4 Added API Priority and Fairness filter and config consumer
   8f764b113e9 Support for adding test-handler for containerd
   fe312ed74af add index for pod cacher
   01328ae291f add roycaihw to reviewers in apiextensions-apiserver
   1ee35e788e2 Use NodeSelector instead of NodeName in hostexec Pod so that the Pod runs through the scheduler
   09121d96861 Add missing tag to vSphere storage E2E tests
   70cce5e3f13 e2e: topomgr: introduce sriov setup/teardown funcs
   2f0a6d2c764 e2e: topomgr: use constants for test limits
   fee1dba0542 e2r: topomgr: improve the test logs
   83c344647f5 e2e: topomgr: better check for AffinityError
   512a4e8a3e2 e2e: topomgr: reduce node readiness timeout
   3b4122bd038 e2e: topomgr: get and use topology hints from conf
   d9d652e867d e2e: topomgr: initial negative tests
   ee92b4aae02 e2e: topomgr: add more positive tests
   1b5801a0869 e2e: topomgr: add option to specify the SRIOV conf
   6687fcc78c1 e2e: topomgr: autodetect SRIOV resource to use
   fa26fb68179 e2e: topomgr: check pod resource alignment
   cd7e3d626c5 e2e: topomgr: add test infra
   1fdf2621378 e2e: topomgr: explicit save the kubelet config
   5954f34ade6 migrate authenticator and authorizer to Create
   119f2208324 remove authn/z.CreateContext expansions
   c049f30ef2a Pass context to tryAcquireOrRenew
   8a3f587b049 Add fast path to node authorizer for node/edge removal
   3e0c0792d71 Switch node authorizer index to refcounts
   6d335372b2d Add configmap->node destination edges to the node authorizer index
   a4d7a67bbd4 Run Windows kubelet stats e2e tests serially because it needs to start many pods on a single node
   7a0690cd592 Use ProxierHealthUpdater directly to avoid panic
   8438bba5fd9 Enable field management for all new objects
   114e283154d Add damemi to sig-scheduling owners
   a7057f8df0e Cleanup "slow-path" logic in scheduler Filters
   c2d3e54551e EndpointSliceTracker should track updated resource version
   bb2b50f3db8 Garbage collector should orphan ControllerRevisions too
   f2150587f32 kubeadm: remove 'kubeadm upgrade node config'
   c2c3c478cdc test/e2e/framework:move functions to test/e2e/scheduling/
   0b168f02436 Change devicemanager to implement HintProvider.Allocate()
   91f91858a54 Change CPUManager to implement HintProvider.Allocate()
   9e4ee5ecc3f Add Allocate() call to TopologyManager's HintProvider interface
   a3f099ea4d7 Split devicemanager Allocate into two functions
   63f0078cccc register queue metrics in controller manager
   95ddc029fad Make DisruptionController eviction tests serial to avoid flakes
   0e47c86378c add StatusConflict as non-retriable error for disksClient
   598c279ecc0 tolerate when bazel shutdown errors out
   da024f9a577 Ability to override versions of containerd/runc
   acd286d95d8 Install containerd package depending on CONTAINER_RUNTIME
   c4ef6a94b32 Add gid to config.toml only when docker group is present
   a6caa0a4726 Treat replaced events that didn't change resourceVersion as resync events
   d1ec762a91f cross build pause with buildx
   e96b037be3f test/ : fix non-ascii characters
   bfc75d9a5c1 manual fixes
   1dcd1fb3b7a generated: update clients
   25651408aea generated: run refactor
   6c274ea72d1 update client gen
   364c6f11733 remove TODO and unused code
   44bf3475ea6 Fix non-ascii characters in test/e2e_node and test/network.
   657dedc3be3 add azure disk WriteAccelerator support
   0714f814fe0 kubeadm: remove 'kubeadm alpha kubelet config download'
   e167b44c170 kubeadm: deprecate --kubelet-version command line option
   142778ac6c8 fix: add non-retriable errors in azure clients
   527de3b5152 Update with update-bazel.sh script
   f4940cf55fd Staticcheck: vendor/k8s.io/kubectl/pkg/scale|describe/versioned|cmd/top|cmd/util/editor|cmd/top
   26377722982 some manual fixes
   9443a381444 generated: update clients
   3aa59f7f307 generated: run refactor
   7e88d8db666 update generators
   f1248163ff4 add exponential backoff with reset to reflector
   b8e2b0d990e Refine WaitingPod interface
   d9faaca6473 Bump to latest SMD to pick up performance optimizations
   9802bfcec05 Add code to fix kubelet/metrics memory issue.
   6f8dfdfb0e7 Fix docker/journald logging conformance
   81252a6d78c added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION
   2ffb13e822f Do lenient decoding only for kubescheduler config v1alpha1
   63a15da505e Fix non-ascii characters in test/e2e/storage
   36785bedfcf Ensure bazel is really brought down
   ba38816d423 LogResult if there is an error
   0b32e142d47 Drop k8s.io/node-api packages
   f48e5de9632 Remove the exponential backoff in NodeGetInfo
   2c93aa6ec37 Ensure kubectl is available in PATH by explicitly exporting the script
   56711b9ac06 cluster: Add justaugustus as reviewer
   8ec193ba9ce Limit number of instances in single update to GCE target pool
   ea140f5e1a1 Register conversions for kubectl testing types
   99c15d28288 Support config kubelet provider id for local cluster.
   ad9d2d71c08 remove bash examples/comments from the v1beta1 and v1beta2 APIs
   785fac68266 Make updateAllocatedDevices() as a public method and call it in podresources api
   bfe696b49cf Use longer pod start timeouts for specific tests
   2a5bce8c820 use tars instead of debs to build server images
   ac9983f43df build: Remove references to debs/rpms in BUILD/dependency files
   baec6d4af55 build: Remove deb and rpm build definitions/specs
   1071eb89f3c Remove deprecated fields from kubescheduler.config.k8s.io/v1alpha2
   e41f2ccd412 gce-addons: Make sure default/limit-range doesn't get overridden
   7b44ad0606d Update conformance requirement check
   e9e11de4e1b Remove Error log for nil StartTime
   871739e4df7 Check getNodeInfoError against nil
   38ecb30c58b Revert "Collect some of scheduling metrics and scheduling throughput"
   999fdfaddf2 Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency
   e8f12692dfd adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes
   a52776fbfb3 Add UpdateTwice and UpdateApply benchmarks for fieldmanager
   815206685cf PodTopologySpread excludes terminatingPods when making scheduling decision
   22bd92a390f Changed comments to match with interfaces method description
   026ba549614 Fixed Golint errors in pkg/registry/core/pod
   e54bfa4652d CHANGELOG: Collapse README.md headings in single list
   f185c474e0f Add some aliases into import-aliases for e2e framework
   e05f8e6991d Re-adding the [[ as per review comment request
   527e66fc282 Add kubectl diff exit code doc
   0380aff70c4 CHANGELOG: Move changelog, soft-link to top-level, refresh listing
   a6b0eaecc99 CHANGELOG: Move changelogs into a subdir to delegate releng approvals
   d5edfc98174 fix staticcheck errors in vendor/k8s.io/legacy-cloud-providers/aws.
   0c74a260c97 update generated file
   5035d841cc5 update translation
   fc719c13f5f Explicitly shutdown bazel after the target finishes
   c08db5feacc add a flag in azure auth module to omit spn: prefix in audience claim
   aed4d639a5a kubelet: Debug pod status output diff is wrong
   378fcc809ab Check for node IP
   f20e17e9dd2 python snippets should work on both old and new python versions
   30989b648d8 Remove references to prometheus is test/e2e
   6dda7adaf59 kubeadm: dual-stack validation allow single stack
   fa9ba80a67d validate storage cache indexers
   b9a586e3822 Fix non-ascii characters in  test/e2e/node/pods.go
   d1bc1875aac Move 'path' package usage to 'path/filepath'
   fc8a39d439e implement backoff manager
   9b23f22472e Make oidc authenticator audience agnostic
   5bb1838c5c1 Updating dependency sigs.k8s.io/yaml to version v1.2.0
   ca7a456a6b2 add myself to hack/OWNERS
   724fb733d12 Change HostPath to EmptyDir for VolumeSubpathEnvExpansion e2e tests
   da4b0b0fa10 Validation for behaviors
   9d3670f3586 Ensure testing credentials are labeled as such
   ea693833c8d Validate Except of IPBlock for NetworkPolicy spec
   4b294079458 Add CHANGELOG-1.18.md for v1.18.0-alpha.3
   0a476eb7d4a reduce overhead of error message formatting and allocation for scheudler NodeResource filter
   2d21f16c38e Fixed code formatting issues discovered by verify-gofmt
   97185e97529 Fixed problem in unit test where error expected/actual comparison was not being performed
   48ee18b516b Removed unneeded newline (moved to end of directory not found message)
   f60c0af9771 Ignore empty or blank string in path when listing plugins
   78248d0c2aa Fixed code formatting issues discovered by verify-gofmt
   1fc80c57eea Autogenerated
   881dde8bee8 Remove unnecessary manual conversions
   e70a630dac6 Added 'No resources found' message to describe and top pod commands
   059429ce53a kube-aggregator: increase log level of AggregationController API group logging
   439f93c91b8 kubectl: allow to preselect interesting container in logs
   7368862c19e makes unavailableGauge metric to always reflect the current state of a service
   69df8a8230f Add a fast path for adding new node in node_autorizer.
   b1d027742b8 Update for loop in server image image creation
   bf7112ae8ee Add shellcheck disable for set $wrappable
   82f3f33eea8 Simplify and improve find/tar lines
   b69a38667e8 Update after review comment
   8823a867183 Fix src_tarball packaging
   20aeeed0f0f Replace for loop with find command
   1b8107d60bd Update after review
   468611d6e0a Update after review comments
   405609b920b Fix shellcheck warnings/errors in /build/lib/release.sh
   d8c16a9eb22 Fix non-ascii characters in test/e2e/common/projected_configmap.go
   0c40daddb0c Add an option to external storage e2es to use a copy of a pre-installed StorageClass
   65483a19abd generated: update clients
   41bd53866ef remove create expansions form authn/z clients
   533d0b7f74d use generated clients instead of expansions for most of authn/z
   adcdb2fd72a Enable FC mount options
   97eed70d743 Add konnectivity log files
   60c972098ce Add defaults to pod affinity args
   6acc75b4185 Only set admission review reponse patch type if the patch is not empty
   dc3f31569e4 Ensure specified container runtimes are present
   d5addb4090f Cleanup logging and creation logic of TopologyManager in prep for beta
   bc686ea27b0 Update TopologyManager.GetTopologyHints() to take pointers
   adaa58b6cb0 Update TopologyManager.Policy.Merge() to return a simple bool
   95a3ac447f9 Fix bug in TopologManager RemoveContainer()
   087dc49a0c0 fix range copy issue
   0f187154731 snapshot clientsets pending context migration
   1e50bc2d094 Add error check in kubectl proxy on server setup
   00cd8c8d922 test images: Adds Image Promoter details in the README
   87582e2c3c1 add indexer for storage cacher
   e3c8add683a fix kubectl drain ignore daemonsets and others
   ee3f897ca7b update network-y stuff for supporting ubuntu/bionic as master
   8a1c4a5a88a Collect some of scheduling metrics and scheduling throughput
   df9b4e92e84 use network proxy for aggregator api
   82a68be3043 Log when client side rate limiter latency is very high
   0e00e0af115 Adds more unit test on Bind extension for the scheduler
   8ce61eef5b2 add to api repo documentation
   dfd8e4e4670 Enable selinux tags in make targets
   31df7077e16 Update OWNERS
   b11b7d354de WatchBasedManager stops  watching immutable objects
   becdd790671 Initial example behaviors
   2eb48f6049c Reduce default CPU requirement for konnectivity server
   ff8256de3f1 Added server-side print column about FlowSchema referential integrity
   cc7799a4372 Update GCP Windows node image versions
   331cd94ccc0 Ineffassign fixes for pkg/volume
   7ff3a1f8db8 test/e2e/framework: remove skip.go and use e2eskipper subpackage
   4844b382dc9 kube-proxy: validate dual-stack cidrs
   82107ff8ab9 Restore statefulset conversion that populates apiVersion/kind in volume templates
   5dcf08c1993 Switch pager to return whether the result was paginated
   c9c4be66d3e Fix pending_pods, schedule_attempts_total was not recorded
   773d3583bcb Avoid thundering herd on etcd on masters upgrade
   72fe307b35f Move 'path' package usage to 'path/filepath'.
   6c3093f9705 Ineffassign fixes for pkg/controller and kubelet
   43ce2eb1ff8 Ineffassign fixes for pkg/proxy
   b6ba39d013f Fix comment whitespace
   498ae799b5a Use standard default storage media type in local-up-cluster
   8d7780d6358 update github.com/docker/libnetwork to c8a5fca4a652
   af52beda260 Extend --dry-run to support string values.
   d8c00b7f529 Fix node authorizer index recomputation
   3eea0d14052 kube-proxy: Only open ipv4 sockets for ipv4 clusters
   d05bcf6800e Add namespace mode targeting to dockershim
   4d4e111f019 Generated code for kubelet namespace targeting
   9a6d50cb2af Add namespace targeting to the kubelet
   9bfcc6144e5 fix: missing variadic dots
   47277f281eb Allow Action's Matches function to specify a subresource.
   7f2200c61a7 Fix backoff retries for AzureFile client
   40de7f2569e Add disableAvailabilitySetNodes to avoid VM list for VMSS clusters
   6da3b70377d grammar change for pods status in tests
   8bd9c994ca6 fix command variable exited with status 1
   0d9f9fca89f Fix non-ascii characters in test/e2e/common/runtime.go
   fee77388c6d Make schema error log message more useful
   4940e42b923 Fixed listType annotations for API Priority and Fairness
   3d83ef2e8ec Autogenerated and build files for kubescheduler.config.k8s.io/v1alpha2
   11c4bcd9dd5 Copy kubescheduler.config.k8s.io/v1alpha1 files onto v1alpha2
   8daa7617575 Clean ups on kubescheduler.config.k8s.io/v1alpha1 files
   9bd42287f90 Move mutating admission into finishRequest
   75cf4d79f2c remove client label from healthz metric test
   215b875dbf6 Add GC e2e debug logging
   a2399064a77 Allow update of onXPN field in fake GCE clients.
   cc3190968b1 remove client label from apiserver request count metric since it is unbounded
   fad11f87b42 Add foreground deletion check to ensure GC is aware of the new custom type
   cd1059e3c4b Revert "Merge pull request #87258 from verult/slow-rxm-attach"
   9d2786c383d Fix back off when scheduling cycle is delayed
   99b301d7e1a Fix preemption race conditions on heavy utilized nodes
   968adfa9936 cleanup req.Context() and ResponseWrapper
   d55d6175f8e refactor
   59e757afef0 regenerate clients
   5360db5df81 update generator
   510aa1b4324 update rest.Request signatures
   ed48ed0122c various context related cleanups to rest.Request
   2686087888f Update GCI_VERSION to cos-77-12371-114-0 as older image is deprecated
   fe10c702d24 e2e dual stack retry getting endpoints
   3d70e650ce3 Set cache to nil data when Azure node provisioning state is deleting
   1174e6698ec cni: Update CNI version to v0.8.5
   a3c434510d9 volume binder: enable klog flags in test
   5c8929d95e8 volume binder: convert to sub-tests
   b430f022fce build: Don't attempt to use mirror for CNI plugin downloads
   96f2588b610 cni: Update CNI download URLs to use new GCS bucket (k8s-artifacts-cni)
   cb942c23a7f Update GCE Windows smoke-test script to work with 1909 nodes.
   0ce49aea1fa Update get-build.sh
   1de2327afc9 Attach a new finalizer in GCE ILB creation.
   43c7f3be298 Register RunPodSandbox* metrics
   dc731e4a1cb Clarify sha matching etcd release tag
   427f0f94636 Add apiVersion to involvedObject
   a4d1624fecb Skip default spreading scoring plugin for pods that define TopologySpreadConstraints
   bae4ff565fc fix apiextensions reference in controller/clusterauthenticationtrust
   bea4b611582 Fixed a failing test on a RBD mount scenario
   cece51b9b0b bump gengo version
   558f6aab56c add staging directories to import-boss verify script
   db19fc94273 add import-restrictions to apiextensions-apiserver/pkg/apis,v1 and v1beta1
   07e3cca6d0e update existing import-restrictions files
   39f6c784b73 Cleanup validation for immutable secrets/configmaps
   647838f8d50 switch log verbosity for cache refresh logs
   d95ed2c8470 various context related cleanups to rest.Request
   18fe96f629e Reduce public methods for DryRunVerifier
   463442aa290 Update container hugepage limit when creating the container
   e992ec0d59b Add comments in several hack/*.sh
   b7817a2981e Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions.
   6901346e223 don't specify apiVersion when getting AAD token
   b263c875967 Update CHANGELOG-1.17.md
   c6a03fa5be5 Parallelize attach operations across different nodes for volumes that allow multi-attach
   e2d7153a133 set nil cache entry based on old cache
   37957e2a0dc Refactor operation keys for NestedPendingOperations
   b2bb3dfb590 add logging before kubelet waiting for cert
   53cc85a29d6 Expose k8s types that do not roundtrip and a helper to roundtrip without protobuf
   6972d6f33af Fix kubectl taint's Complete parsing
   3593fc69abb bumping agnhost version to 2.10
   dc5791b47ac adding sidecar injecting webhook
   b8e2ad5926c More refinement of comments and parameter names for informers
   24844c5fc54 Add logging to scheduler's event handlers
   ee00497ea94 add comment in several hack/ sh scripts.
   08833c91805 Withdraw the change of getting version variable
   b117a928a6c kubeadm: prevent bootstrap of nodes with known names
   772a20b9cfe `./hack/update-openapi-spec.sh`
   d7650e582ec Cleanup unused Azure client interfaces
   2d9b798d1a8 Remove doc reference to godep #782
   4d33d837c8b Register full object as return type for `DELETE` web services.
   ed2f1a6f428 fix behaviour of aws-load-balancer-security-groups annotation
   7c72b5791b1 fix static check in pkg/volume/flocker
   aaf86537eec Update copyright date for ingress_utils_test.go
   8ae868b4e07 Adds more test cases in TestRunBindPlugins for the scheduler
   a027c379f7e kubeadm: increase timeouts in the etcd client
   5e0c0779a11 kubeadm: handle multiple members without names during concurrent join
   2b389123a5d test/e2e/framework: handle the case where BeforeEach was never called
   cbdd3a279e6 brushed up according to review
   a8e07470438 Updated API Priority and Fairness validation to track change in catch-all priority level
   f641ecd6f83 Whitelisting *.pkg.dev for the GCP credential provider
   b2f32367710 Added relevent approvers and reviewers for gci.
   d1f62ead18f fork out a new global-default from catch-all to handle unclassified traffic
   ecfe31b8907 /test/e2e/framework:remove TODO in  test/e2e/framework/util.go
   292804ae1c8 Bump dependency github.com/prometheus/client_model@v0.2.0
   afb7c5d2ce3 Add serathius to sig-instrumentation-approvers
   5ba2a8da099 Pin dependency github.com/cilium/ebpf
   088ee920e0e Bump dependency opencontainers/runc@v1.0.0-rc10
   efd309b7dad Fix bug of hack/verify-api-groups.sh
   527d60edb70 Move IngressFromManifest/IngressToManifest to ingress e2e fw
   1461d8bd13c Move GetPortURL to ingress e2e fw
   d56f5357558 fixed UT
   1dd53fd3bae Fix issue with GCE scripts assuming Python2.
   71b2a4cdcc1 Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc."
   22bd26fefb9 Adding taint toleration error reasons
   9b679748239 Re-enable apply for 50% of requests
   4c2eb77ee6e Remove use of CustomResourceSubresources feature gate, CRD field clearing
   57f3a97bcba Remove use of CustomResourceWebhookConversion feature gate
   46e622216d9 Remove use of CustomResourceDefaulting feature gate
   ff94f33a6bc Remove use of CustomResourcePublishOpenAPI feature gate
   57724766bcf Remove deprecated GA feature gates
   a85815823eb Do not serialize internal type, fix roundtrip
   b86df2bec4f update gopkg.in/yaml.v2 to v2.2.8
   6e411b6c0a4 Add support for pre-allocated hugepages with 2 sizes
   5b49d03b844 Return the error from copyInto
   9897f33f7da fix static check errors in vendor/k8s.io/apimachinery/pkg/api/resource
   ca1eeb99b53 informers: don't treat relist same as sync
   a14ceeb2c00 Staticcheck: vendor/k8s.io/kubectl/pkg/cmd/exec|config|certificates
   577b2dcdacd Fix numPDBViolations when victims on same node are assigned same PDB
   eafbb67d010 Debugging 87473, printing out the last state of the dependent
   90b49e80d62 add warning on ObjectReference
   cfd61e801b0 Add env var(CNI_TAR_PREFIX) for cni install. cni release has changed the prefix, add a var to make this configurable.
   e8c20e1f396 don't wait blindly
   d2ad469abbb remove unused layer of loop structure in processorListener::run
   5c2d2c5ef1a rename dynamic cert loading to be more accurate
   6ccfc3aecf0 add dynamic reloading for CSR signing controllers
   4a5ab84dccc Move default binding to a plugin
   aee028dab84 Migrate health monitor from read only port to healthz port
   e0aeb4d6a36 Record overall Filter latency for all nodes in a scheduling cycle.
   82f97775b7c Remove kubectl run generators
   8c6d7a7086b fix static check errors in test/integration/etcd
   9e1c99c4e22 Delete the sysctl runtime admit handler
   d6d08b152e0 Delete TODO to use docker client
   4d76b1c8de7 Add mergeFilteredHints: - Move remaining logic from mergeProvidersHints to generic top level mergeFilteredHints function. - Add numaNodes as parameter in order to make generic. - Move single NUMA node specific check to single-numa-node Merge function.
   80c3f500b68 Fix CreateVolume signature in comment
   fc300e0e7d6 Move filterSingleNumaHints call to top level Merge
   c4f7308e116 kube-proxy: fix incorrect log information
   45660fd3a25 Add filterProvidersHints function: - Move initial 'filtering' functionality to generic function filterProvidersHints level policy.go. - Call new function from top level Merge function. - Rename some variables/parameters to reflect changes.
   df9b2595f38 Update filterHints to filterSingleNumaHints: - Change function name - Remove policy parameter (unnecessary) - Update unit test to reflect change
   b09e35257a7 Remove `scheduler/algorithm/priorities` in import-restrictions
   6ae1b3ea21f Drop the cadvisor test
   30de5bdc460 Enable verify-import-boss check for e2e framework
   c8dbde86664 bump github.com/google/gofuzz
   a65f525aed8 Tweak new names
   38c5f318c9b kubectl-diff: Test return code on failure and changes
   b33fbc84d9d Update Structured Merge Diff to V3
   170714e5321 Remove folder pkg/scheduler/algorithm
   f2b21f08d95 kubectl-diff: Return non-1 errors on kubectl failures
   bb587690fd5 Default the --enable-cadvisor-endpoints flag to disabled
   368fe70aeda bumped pause-win to 1.1.0
   24314d228c9 fix flaky test
   c30f4489b47 Update CHANGELOG-1.15.md for v1.15.9.
   781f51c22dc Update CHANGELOG-1.16.md for v1.16.6.
   cbc089a9846 Update CHANGELOG-1.17.md for v1.17.2.
   3f8b2022665 Move GeneralPredicates logic to kubelet.
   50d511d4b8a Deprecate scheduler's framework.plugins.RegistryArgs
   de57657b2bb Self nominate aojea as sig-network-reviewer
   d6b449b5c7d Move scheduler's SchedulerExtender interface to core/extenders.go
   2808d7154dc Update CHANGELOG-1.18.md for v1.18.0-alpha.2.
   093fd4ab029 Add comments in several hack/verify-*.sh(s-v)
   261f26075c0 kubeadm: remove the deprecated GA CoreDNS feature-gate
   e5a2aeeae6d Fix static check failures in test/e2e/instrumentation/logging/stackdriver
   bd9d8fa42f7 Initialize CPUManager containerMap to set of initial containers
   eb265bc7db7 Remove GetBinder member and replace it with a method.
   7a39e1396a1 Remove unnecessary slow binding test
   5aacacbdf00 client-go/cache/testing: add ability to simulate watch disruption
   73b2d831254 Refactor docker specific oom const out of qos pkg
   7be9b0fe55b Update comments and error messages in the CPUManager
   2a2ce207f2b Enable bound tokens in local-up-cluster
   c42e815fb51 Fix multinode storage e2e tests for multizone clusters
   f2acbf66074 Base CPUManager state reconciliation on container state, not pod state
   f6cf9b8ce93 Move CPUManager Pod Status logic before container loop
   772dbbc7d78 Fix describe of statefulset prints pointer not value
   221396ac35f cleanup: delete unused func
   53aff819e0e fix static check failure in pkg/controller/disruption and pkg/controller/namespace/deletion
   72f34b817ea staticcheck: pkg/volume/fc, pkg/volume/portworx and pkg/volume/vsphere_volume
   c8df27c2b1b Add comments in several hack/verify-*.sh(g-r)
   afe3d5f09f6 Use e2eskipper package in test/e2e/common/
   1c092bf6359 Simplified logic around context cancel, removing bugs
   1e170637c3c Refactored QueueSet configuration into two phases
   ce12105edcb Added server-side printers for the API object types for API priority and fairness
   e98f4f3ef89 Use e2eskipper package in test/e2e/framework/
   f19f4e40f9b Fix static check errors in pkg/util/netsh
   34f07671373 Add flowcontrol to apiVersionPriorities
   bc2aabaaeb1 Add: promotion for LimitRange defaults test to Conformance
   203c7b47317 fix staticcheck errors in pkg/controller/daemon.
   2afe0da8eed Unify --cluster-cidr in KCM and CCM
   16de853c5de Clean up TODO around running test as sudo
   8cbc5dc03f9 Bump golang/mock version to v1.3.1
   47ad6db1dcd Fixup comments in internalbootstrap
   b0a6e597fee Use new storage clients in Azure cloud provider
   0f53daad9ea Remove Brad Childs from OWNERS
   d7d316e1e74 switch to docker command line
   469de65c252 Enabling EndpointSlice feature gate by default
   c1a4cd9c75b Improve error message when diff binary is not in PATH
   47b2593d592 Creating new EndpointSliceProxying feature gate for kube-proxy
   4d88acee51d Made internalbootstrap gin up its own Scheme
   dd65e2151b4 add crash protection to wait functions that were missing it
   5330bd7440b dogged insistence on full verbosity
   f53d7e55dff Move Snapshot from nodeinfo/snapshot to internal/cache
   6bea0e469bc Support DryRun in cli-runtime REST Helper.
   f1c26bf4362 removed excess blank line
   6a14203658c Rename cache's Snapshot to Dump
   b3853138a4f update generated files
   2f78a9480f2 Updating dependency google.golang.org/genproto to version v0.0.0-20190819201941-24fa4b261c55
   cac0451836f Updating dependency github.com/prometheus/client_model to version v0.0.0-20190812154241-14fe0d1b01d4
   3b29bcf52d3 Updating dependency google.golang.org/grpc to version v1.26.0
   9c78f05d06c Updating dependency github.com/gogo/protobuf to version v1.3.1
   fe8b32317ff delete unused field
   ec5321c6a9f Update validation for API Priority and Fairness
   ed1381e35f8 Fix staticcheck in pkg/controller/podgc
   09a132be29d Add comments in several hack/verify-generated-*.sh
   a94346bef98 Update aws-sdk-go dependency to v1.28.2
   c712230ac1c Implement default queue sort logic as a scheduler plugin
   3698a2540dc In test framework LoadConfig(), use CurrentContext.Server for TestContext.Host if it is unset. Otherwise, kubectl exec through http/kubectl proxy tests in test/e2e/kubectl/kubectl.go would fail with "--host variable must be set to the full URI to the api server on e2e run" error. With this change, running the following tests can now pass: $ e2e.test --kubeconfig=xxx --ginkgo.focus="should support exec through"
   0c12ae52401 Modify alias of e2e/framework/job to e2ejob
   d86fcd8c902 rename some declartions named context in tests
   afaea605f43 Remove Brad Childs from OWNERS files
   18f05ef5b98 Fix golint errors in test/e2e/storage/vsphere
   9952d487d2e Move ValidateEndpointsPorts() to e2e test
   450196a719a Update CHANGELOG-1.15.md for v1.15.8.
   3fbfa763fd9 Update CHANGELOG-1.16.md for v1.16.5.
   708278098af Update bitmask printing to print in groups of 2 instead of all 64 bits
   c6429e3726f Add snapshot clients based on armclient
   4ea5509b31a Add vmsize clients based on armclient
   c86d1ec0e9d Add storageaccount clients based on armclient
   43554c80a61 Add disk clients based on armclient
   afd31035c21 Fix the bug PIP's DNS is deleted if no DNS label service annotation is set.
   7069b1d6e8b Update TopologyManager single-numa-node logic to handle "don't cares"
   2905ffffa76 Rename TopologyManager test TestPolicyBestEffortMerge for consistency
   94489c137ca Cleanup use of defaultAffinity in mergePermutation of TopologyManager
   ef1b991ebc9 SchedulerPredicates [Serial] validates resource limits of pods that are allowed to run - set resource requests as well
   5e23517ebf1 Use reflect.DeepEqual check in policy_test.go
   92eb7cd6011 Update "Single NUMA hint generation" expected affinity to nil
   8b3f6e61a22 Move test case "Two providers, 1 with 2 hints, 1 with single non-preferred hint matching" into specific policy tests
   681c42bfc25 Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 2/2" into specific policy tests
   a38a2562b2f Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 1/2" into specific policy test.
   f639da7637b Move test case "Two providers, 1 hint each, no common mask" into specific policy tests.
   401a2bb285a Move test case "Single TopologyHint with Preferred as false and NUMANodeAffinity as nil" into specific policy tests.
   6460ef63929 Move test case "Single TopologyHint with Preferred as true and NUMANodeAffinity as nil" into specific policy tests.
   baeff9ec5d7 Move test case "HintProvider returns empty non-nil map[string][]TopologyHint from provider" into specific policy tests.
   599217d4828 Move test case "HintProvider returns -nil map[string][]TopologyHint from provider" into specific policy tests
   57661ee9467 Move test case 'HintProvider returns empty non-nil map[string][]TopologyHint' into specific policy tests.
   51f1af03958 Move test case 'TopologyHint not set' into individual policy tests
   8466a5852af Restore policy_test.go to upstream Following commits will contain incremental changes to this file to ease review process and ensure all tests are accounted for.
   59bb6c4d6f4 Update checks in mergeProvidersHints: - Initialize best Hint to TopologyHint{} - Update checks. - Move generic unit test case into policy specific tests and updated expected outcome to reflect changes.
   6758f95117b Restore original policy none test cases: Mistakenly overwritten in earlier commit
   2d1a535a35c Make mergePermutation generic: - Remove policy parameters to make function generic - Move function into top level policy.go
   5487941485e Refactor filterHints: - Restructure function - Remove bug fix for catching {nil true} - To be fixed in later commit - Restore unit tests to original state for testing filterHints
   adfd11f38f8 Make iterateAllProviderTopologyHints generic: - Remove policy parameters to make this function generic. - Move function out of individual policies and into policy.go
   e43f0a52933 Reinstate canAdmitPodResult in policy_none: This is to keep consistency with the other policies. This change may be made across all policies in a future PR, but removing it from the scope of this PR for now.
   4cc5b9e46c3 Edit hints returned from policies and unit tests: - Best Effort Policy: Return hint with nil affinity as opposed to defaultAffinity when provider has no preference for NUMA affinty or no possible NUMA affinities. - Single NUMA Node Policy: Remove defaultHint from mergeProvidersHints. Instead return appropriate TopologyHint where required. - Update unit tests to reflect changes. Some test cases moved into individual policy test functions due to differing returned affinties per policy.
   e3d0c9397f0 Updates to single-numa-node policy: - Remove getHintMatch method. - Replace with simplified versions of mergePermutation and iterateAllProviderTopologyHints methods - as used in best-effort. - Remove getHintMatch unit tests.
   b5ca4989e3a Update unit tests: - Update filterHints test to reflect changes in previous commit. - Some common test cases achieve differing expected results based on policy due to independent merge strategies. These cases are moved into individual policy based test functions.
   17d615bca2b Update filterHints: - Only append valid preferred-true hints to filtered - Return true if allResourceHints only consist of nil-affinity/preferred-true hints: {nil true}, update defaultHint preference accordingly.
   9f21f494930 Additional unit tests for Topology Manager methods
   f886d2a8320 Update single-numa-node policy unit tests
   2825a7be1a6 Add new functionality for single-numa-node policy: Explanation taken from original commit: - Change the current method of finding the best hint.   Instead of going over all permutations, sort the hints and find   the narrowest hint common to all resources. - Break out early when merging to a preferred hint is not possible
   5ce2ea27734 Return defaultAffinity from PolicyBestEffort: Now that PolicySingleNUMANode is not considered here, return defaultAffinity as was the original case before previous bug fix
   eda15215621 Make mergeProviderHints policy-specific: - Remove need to pass policy and numaNodes as arguments - Remove PolicySingleNUMANode special case check in policy_best_effort - Add mergeProviderHints base to policy_single_numa_node for upcoming commit
   dc36924c373 Update policy_none removing canAdmitPodResult Update unit tests for none_policy Add Name test for policy_restricted
   cf8b098dda5 Refactor policy-best-effort - Modularize code with mergePermutation method
   278717bc577 Fix ineffectual assignment to CPUSets
   e2e5bf5e0b6 Fix golint warning for pkg/util/procfs/procfs_linux.go
   1db3f45dc59 test/e2e/framework/rc/:refactor function ByNameContainer
   e1eabf8576a Add comments in several hack/verify-*.sh
   69461d26d81 move function GetKubemarkMasterComponentResoureUsage
   aa2691eeac6 Fix static check failures in test/e2e/instrumentation/monitoring
   4573428b879 Deal with auto-generated files. Update bazel by hack/update-bazel.sh
   0c77101b906 add README.md in hack/
   a4f31e0de70 Add NewFakeKubeRegistry() for testing deprecated metrics.
   b2f76cc780d add comment in hack/update-*.sh
   0e81e394657 cleanup(scheduler): remove unused function, remove duplicate comment, implement interface
   7ac8f58ff60 Fix: formatting
   3ba8f42f96b Update: podTemplateList name; Fix: initial fetching of PodTemplates
   0c3112fff39 fix golint error in plugin/pkg/auth/authorizer/rbac/bootstrappolicy
   961c13ecba5 Fix: formatting
   77e31bd1108 Fix: formatting
   2e79da91398 Fix: formatting
   fe91d5fad98 Fix: bazel build errors
   8676fb3cdb9 Promote: Secret patching test
   4efcb21af88 Promote: find Kuberntes Service in default Namespace
   b50531a4a46 Update: formatting, cleanup, ExpectEqual statements
   0f528a27ad5 Promote: Namespace patch test
   34b942a41d7 Remove check for empty activePods list in CPUManager removeStaleState
   5802f3a9103 Add proper activePods list in TestGetTopologyHints for CPUManager
   cdd92d39b77 preemption: typo cleanup
   f370b781162 Update vendor
   f0e45689d3d Add PatchService method in service/helper.
   3709f9264d7 Document the actual git tag the SHA was picked from
   2a731eb411f Updating dependency github.com/checkpoint-restore/go-criu to version 17b0214
   103d77c619e Updating dependency github.com/coreos/pkg to version 97fdf19
   a6d72ab7132 Updating dependency github.com/elazarl/goproxy to version 947c36d
   4143bc7a964 fix staticcheck errors in pkg/volume/hostpath.
   cc8e8401e2d fix static check in cluster/images/etcd-version-monitor
   885a03eef78 Use new clients in Azure cloud provider
   6882eb38d8d Add virtualmachine clients based on armclient
   bfbcee2e3e1 Add subnet clients based on armclient
   aaa70b42e89 Add securitygroup clients based on armclient
   95c2f08d8f9 Add routetable clients based on armclient
   e68c640de2d Add route clients based on armclient
   bdd0d5ff86f Add publicipaddress clients based on armclient
   937e6a63884 Add loadbalancer clients based on armclient
   dba3331ce48 Add interface clients based on armclient
   f88d3524d58 Fix file name for VMSSVM client
   2498dbf6360 clean node_authorizer code: verb judgement
   a038a33dcfb Clean up commented assertions in tests
   210737b0ce8 Revert "list vm instead of get when getting virtual machine"
   b4b1e8f7b6a remove TODO in test/e2e/framework/skip.go
   e8a8bdb4cac hack/update-vendor.sh
   00706b8fe9e Remove gonum.org/v1 dependency in code-generator
   514bdbedac9 fix-static:pkg/volume/scaleio/
   f00ac0694b6 Mark session affinity tests as [Flaky]
   f20945aa416 Fix: formatting
   372d09cd153 Add integration test for NodeResourceLimits plugin
   5a008786e21 Add: PodTemplate lifecycle test
   ee1f0b8a381 Make CustomResourceDefinitionStatus fields optional
   0fc15708fe0 Add: ConfigMap lifecycle test
   edbd51bc692 Update CHANGELOG-1.17.md for v1.17.1.
   4673731c0bc Make sure PDB has observed pods before doing eviction in e2e test
   ba23aa98f65 Set managedField probability to 0%
   99a015705ba storage e2e: Add context to timeout errors
   e4a18dee735 make request logs greppable
   f969d3643e8 Nominate alculquicondor to sig-scheduling-maintainers
   b60703c1724 test/e2e/framework:refactor generateWriteBlockCmd due to the same function
   9077603b976 Add richer unit tests for OomWatcher
   ab7e0f58d5c Clean up rkt specific code in `pkg/kubelet/pleg`
   a9e5fd66230 Revert "Revert "Add an option to specify kubelet flags for heapster node.""
   8b1eb7f9735 remove TODO(random-liu): Move pod wait function into this file
   7e5e7c141c2 Update cri-tools to v1.17.0
   c402a4bf65e WIP: use e2eskipper package in test/e2e/autoscaling
   77f482c553b WIP: use e2eskipper package in test/e2e/cloud
   cb07680ee9e remove TODO in test/e2e/framework/providers/gce/ingress.go
   0a8df435256 update test data
   16fbb5be331 use e2eskipper package in test/e2e/auth
   4789e51d8ed Use e2eskipper package in e2e/scheduling and e2e/servicecatalog
   c1de3d6e5b4 fix ci-kubernetes-node-kubelet-serial Non-system critical priority classes are not allowed to have a value larger than HighestUserDefinablePriority
   07c36de3e2b e2e/instrumentation:Use e2eskipper package
   fe63af0d1c2 export changes to mo
   63e22620a91 modify strings
   739c86e2faa update po file for kubectl jp translation
   de15774e10a kube-proxy unit test FilterIncorrectIPVersion
   1ee86328ae6 Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation  [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present
   054e3846fc1 Use v1 subjectaccessreview API in controller-manager CSR approver
   e6234519e1f set test image cloudbuild directory
   187d7112250 Split findNodesThatFit into framework and extenders logic
   63c1c68d0ca Remove direct use of Snapshot's data structures
   fb66e807cd3 Remove scheduler framework dependency on predicates package
   4083c7d49c8 Fix a flaky scheduler preemption e2e
   f6d58ae3a96 Multi arch for nonroot image
   2a479006209 Remove unused KUBE_TEST_API logic
   925be295fb0 Allow embedding logs command
   e8017795d16 Fix GetPodLogs failures in NetworkPolicy e2e tests
   da15570daa2 fix staticcheck:pkg/volume/cinder
   14e0cac5e7a Fix error-string-capitalization in clientset generator.
   e62f9625cf6 fix-static:pkg/volume/emptydir
   07f31b3b177 test/e2e/ui and test/e2e/upgrades:Use e2eskipper package
   73fb0ab5ec4 test/e2e/storage:Use e2eskipper package
   34359176aa9 e2e/gke_local_ssd.go and e2e/gke_node_pools.go:Use e2eskipper package
   7cc3971ee0a Immutable secrets/configmaps tests
   9174905ae77 Autogenerated
   e612ebfdff2 Immutable field and validation
   5b2cc9c2fd6 Fix(kubectl): the field of history controllerrevision will be covered by daemonset
   420d5d10c4b updating googleapis/gnostic to v0.1.0
   e1f7b16fa68 Update to golang@1.13.6
   f3b9a6e12f5 test/e2e/windows/:Use e2eskipper package
   c7234aa1779 kubeadm: support automatic retry after failing to pull image
   3d34a814d69 test/e2e/kubectl test/e2e_kubeadm:Use e2eskipper package
   586e1f2325b e2e/network/: Use e2eskipper package
   a19aa1069a7 Remove duplicated ServiceStartTimeout
   07c5aa98ea3 simplify 1.17 release note for storage
   b5f050a5cbd Move from random SHA - update github.com/prometheus/client_model to v0.1.0
   59807be5abe Further tweaking up the wording
   f66ef23c118 update gonum.org/v1/gonum to v0.6.2
   a1f998909e2 changelog: clarify 1.17 upgrade requirements
   8f1e3c22353 updating github.com/smartystreets/goconvey v1.6.4
   8253480ea41 update github.com/morikuni/aec to v1.0.0
   4db3822ebba Update fieldmanager.go
   2b554079af6 Ensure a provider ID is set on a node if expected
   bf30f75ec6e Update azure_test.go
   70dea6e4a84 review: several fixes and addressing comments
   2dc966348d6 add myself as feature approver (for SIG cloud provider)
   5a44cd65fd9 Fix typo from reseting to resetting
   8da4a1d97fe Add some comment to hack/verify-linkcheck.sh
   c5764735e27 fix staticcheck:pkg/volume/awsebs
   0e8b956e27b clean deprecated apiserver request metrics
   606e4503cf4 remove last part of deprecated metrics
   2c2e1c5443a keep apiserver_request_latencies_summary
   ab182552b48 clean SinceInMicroseconds, convert to SinceInSeconds
   a8f2feaeb51 remove deprecated metrics of proxy
   8ae3f80048a remove deprecated metrics of dockershim
   060756babbb remove deprecated metrics of apiserver
   85931af1eee remove deprecated metrics of scheduler
   d2cfd4b82fb apply review advice again
   447b17587b6 remove deprecated metrics of etcd
   1a9b1217649 remove deprecated metrics of kubelet
   26ea420c0e6 Image Promoter: Cleans manifest list
   8c481022c1c e2e/node/:Use e2eskipper package
   c84a371f3d4 Fix a flaky e2e test of Job completion
   91dca8ff8cf Use e2eskipper package in e2e/apps
   e8b5658bd11 fix: typos in comments of admission
   0bab010b45a clean unused predicate error
   b2159b5d663 Remove scheduler/algorithm/priorities/util package
   beb252df163 Add logs of port-forward-tester pod
   99b135442c6 Add error handling of CloseWrite()
   6aaf0bb41b3 Cleanup scheduler/algorithm/predicates package
   dcd4dcdf217 Update: comments, searching for secrets in lists
   b062fcb1178 Update Azure owners
   fee0d43d23f fix golint error in pkg/apis/rbac
   010b8852361 Remove workaround for RS bug in cmd apps test
   2c3c6721ce5 refactor(scheduling): remove priorities package
   a2526286498 fix nits
   6cab3a7bec7 create probabilistic SkipNonAppliedManager
   33a449474cc Fixed docker.log format
   07e3c46cb4b Add: secret data patch check
   ddf0d4b8034 change Apply signature and move decoding into handlers
   58dabc73979 Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout"
   f2518347f3d fix apply --prune to check cli specified namespace
   71966adfc39 Allow a preloaded gke-exec-auth-plugin
   39e373fc455 Do not require token secrets when using bound service account tokens
   afe3b907a18 Remove nodes from cache immediately on delete events
   50deec25bc0 feat(scheduling): address disabled plugins in scheduling framework
   bcab9b4c9ea Remove uses of NodeInfoMap outside of snapshot and cache
   824af9e3072 Fix kubectl top sort-by cpu and sort-by memory options
   50b697bacb5 move TaintToleration predicate to its plugin
   228891de9c7 Fix comment
   b3ae0f01e5b pass through KUBE_BUILD_PLATFORMS to enable build on specified platforms
   19daee7e604 Add import-aliases check for e2e framework
   c04ead5fb13 Add error check for instance insert
   0d86f0a0372 Separate skip as framework subpackage
   51c742c1dd0 fix staticcheck failures of pkg/util/ipconfig pkg/util/iptables pkg/util/ipvs/testing
   0278d793c8b fix: remove ErrTopologySpreadConstraintsNotMatch
   f8934861910 ipvs proxier README: fix typo
   80127fe10f1 rm errserviceaffinityviolated
   864600f05f6 Break nodeunschedulable Filter plugins dependency on predicates package
   6c58cc0ad00 change framework_extension_point_duration_seconds from sampling to always record
   d829d9b0fd5 Update hostpath and mock csi drivers with latest sidecars
   5def91d7785 Add VolumeBinder to FrameworkHandle interface
   c86f59610c0 remove test/integration dependency on predicates and algorithmprovider
   1289bdaba41 network proxy with admission wh
   21202b08d48 remove e2e dependency on scheduler/predicates package
   9b17de74628 Repair smoke-test for Windows GCE clusters
   f3c7a4c8231 Update scheduler's RunFilterPlugins to return a plugin to status map
   8e3c1b54a7c Fix interpodaffinity issue
   326935c1b96 extend crd openapi e2e timeout to deflake the test, plus small improvements:
   d227b7822fb Move selector spreading priority code to plugin
   4d731d92bf0 Demote Delete Grace Period test to [Flaky]
   5d916e20ddd Use Snapshot.NodeInfoList for listing operations
   3db91b2bdc9 Enabled reading config files for vsphere e2e tests
   f3c70a2ed26 Move IsAppArmorSupported() from e2e framework
   704ec253527 fix flakes on e2e test TCP CLOSE_WAIT timeout
   0f9c262eda1 Cleanup cloud controller manager when closing cluster.
   10864d3366f fix a bug that orphan revision cannot be adopted and sts cannot be synced
   568edf72ec1 fix kubectl annotate local error
   8d7f3837856 cleanup(api-machinery): remove unused struct and variable
   680df17f39e fix typo
   68532e0c0f5 Remove redundant nil check
   ee967060c71 Add simple explanation to verify-spelling.sh
   a1053e4835f Break interpodaffinity Filter plugins dependency on predicates package
   a3b90584a1e Image Promoter: Bump timeout limit
   8897c435ad5 Refactor oom watcher to allow greater test coverage
   57f2d7ad6f2 Adding unit tests for kube-scheduler Config Complete() method.
   30058c9d356 Image Promoter: Remove -it from docker command
   dc5934f5845 token cache: make fetch_total a counter
   9ed55bc5203 Add: JSON marshal error failure checking; Fix: formatting
   232da604300 Update: json patch generation
   c53006b1a2c Add: test for finding service from listing all namespaces
   b4fb46409d1 Update: test secret contains a default label, secrets are listed via default label, patch payload is marshaled instead of written in raw JSON, secret deleted check; Fix: comments, test namespace usage
   b8cac87646f Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout"
   e26fbe6f08c fix a bug in scheduler's node resource limits score
   729337ec7e4 gofmt reflector.go
   ae53a008cb3 Clarified comment on DeltaFIFO::Replace
   f2a8e2d9c9c finished pass over comments on Controller, and commented sharedIndexInformer
   7d82e23e6cd A little more comment tweaking for cache.Controller
   72fa714d636 began turning attention to cache.Controller
   2ea338b63f2 Reworded comment on requestedResyncPeriod
   eef49c965f4 Noted divergence between requestedResyncPeriod and resyncPeriod
   5546d9f12f2 Started commenting processors
   320c9bfeed4 Break volumezone Filter plugins dependency on predicates package
   81a6cf28478 Change PDB tests to use pod conditions instead of phase
   591b8706915 fix how we check for node info list consistency
   7f2d675ad0a kubeadm: Fix a false positive in a warning
   42afa0a2cca Adding in missing Registry unit tests.
   6a82609902e Break serviceaffinity Filter plugins dependency on predicates package
   8d313f333ec staticcheck:test/integration/master/
   ce68edf7009 Allow "kubelet --node-ip ::" to mean prefer IPv6
   4ef31f81c76 Break nodelabel Filter plugins dependency on predicates package
   264a1cf5f6f staticcheck:test/integration/auth/
   8d54a84507c fix kubemark use fake CRI
   324e5ce7e3d hollow-node use remote CRI
   729c37373aa Remove unused scheduler types
   24ccd77a986 Remove variable EXTERNAL_CLOUD_VOLUME_PLUGIN default value in local-up-cluster.sh
   ab12f460d95 Update: to use framework instead of gomega for testing values
   616003a8e96 Add: OWNERS file - based off of staging/src/k8s.io/apimachinery/OWNERS
   2754cc37ea5 Update: namespaceName value updating order to prevent error expection
   bd6550fb349 Update: formatting, gomega Expect to framework ExpectEqual, framework creation to standard function
   fca9963c243 Move publish and unpublish counting up in test
   c5e3ab12489 Fix: formatting, spelling
   1a283ccbb64 use az.List() to check route existence
   9951a9c98e2 Add: namespace patch test
   a8ee1086d70 Move yaml limit tests to benchmarks
   51d53036621 Fix err variable shadowing issue in storage/utils
   65329a59867 list vm instead of get when getting virtual machine
   2c8639deb70 allow an SNI cert to be used to respond for a particular IP
   4e674768671 move nodeaffinity predicate to its filter plugin
   4c51eb9063a test images: Image Promoter fixes
   b9e2389e0d9 Move RequestedToCapacityRatio argument processing to its plugin
   906adbdfcdd Require client / server protocols
   02885845ff4 kubetestgen: improve errors handling
   eb074761bc2 Fix local-up-cluster.sh do not work with non-intree external cloud provider issue.
   fddf50cf881 fix log message error in nodelifecycle
   fe8ad90afa5 bootstrap flow-control objects
   72559ec6933 kubeadm upgrades always persist the etcd backup for stacked
   7254517c5cf rename ExtenderConfig to Extender
   edd612d9f10 Add: test to patch a secret
   9bcca31e52c Break volumerestrictions Filter plugins dependency on predicates package
   aae9a7f7045 Break nodevolumelimits Filter plugins dependency on predicates package
   794d0d9b4d8 Remove `rkt` from container runtime options
   06b44c76fd7 Correct comment around which integrations require cadvisor_stats
   f2cb1f35fe2 Remove dead code in fake docker client
   d27dc6751ec Break volumebinding Filter plugins dependency on predicates package
   c2d41fda6c4 remove unused code and use framework
   05010d23ac7 clarify apiserver bind-address flag usage
   0b064f34ae7 fix flakes on e2e test TCP CLOSE_WAIT timeout
   041e5b55609 addressed comments
   e40625028b5 fix: correct the mentioned endpointslice manage label name.
   e8eb5c656b4 fix fake remote CRI
   d31dcecd200 cleanup unused scheduler functions/files
   c0bc36c12e1 kubeadm: probe address for unspecified ips
   051be8fe80e Cleanup SetPredicatesOrderingDuringTest due to deprecation of predicates
   64d7b224d92 Cleanup unused parameter of NewGenericScheduler
   7d604c318cf Break DS controller on scheduler predicates and predicate errors
   2d95520a3f6 adding private cluster check
   9bc862ec697 Perform dead storage removal linearly
   2371c58a736 remove unused code test/e2e/framework/google_compute.go
   cc0b3e82eb8 Kubelet: add a metric to observe time since PLEG last seen
   17b0b77026b fix staticcheck failures of test/integration/client test/integration/disruption
   0eca8ae9cdb Fix tests and improve comment on NewDeltaFIFO
   1d65f1b5c39 Fixed assignment statements
   89c615f9c44 Revised comments about f.knownObjects and added tests for Replace
   b535ed3b0c1 Merge scheduler's ConfigProducerRegistry into LegacyRegistry
   51eb4b50a3a Don't paginate in listwatch
   02e217759e3 update comments of some funs in scheduling_queue
   d09fe8e247a Remove no longer needed `modifyContainerPIDNamespaceOverrides`
   93246643306 remove TODO in test/e2e/framework/node/resource.go
   bfc4a7a1c54 fix staticcheck of pkg/util/ebtables
   7a7ccb797e0 Updated comments on internal abstractions in client-go/tools/cache
   fc3b210ad83 if no cycle dependency , use framework in test/e2e_node subpackage
   e787525d6e7 Add metrics for VMSS and VMSS clients
   4a00e261754 Move Azure metrics to a separate package
   2f0e5b262a4 move functions from e2e/framework/deployment/ to e2e/apps/ and e2e/upgrades
   c813e258920 Use new VMSS and VMSSVM client in Azure cloud provider
   b8e7767b67e Add VMSS VM client
   63f9200c1d8 Add VMSS client
   9d67227fb42 Addd Azure ARM client with backoff retries
   d8edc7d2c11 CHANGELOG-1.17: add note about service CIDR bug
   1eaa0ee3f95 Minor nit in error message about feature gate stage
   a6b7b0d95e1 Define algorithm providers in terms of plugins.
   7f79516705f Move resource-based priority functions to their Score plugins
   36cbce1182a Postpone flag warning log to just before it be used.
   7171f9a7f46 move funs of framework/volume to e2e/storage
   bf47d14c272 Fix staticcheck failures of test/integration/replicationcontroller
   21f59c99232 Reword modifications for clarity
   4d43e9e39b6 e2e: move funs of framework/viperconfig to e2e
   f5a3c93649c clean useless code in client-go test
   706e90a0339 Skip scheduling the pod if it has been assumed and the pod updates could be skipped.
   587dbc2fede remove  TODO in test/e2e/framework/auth/helpers
   6410ac31731 Return when removePod failed
   006980c1607 Remove Todos for CSR checking
   00abe6d5055 Output test description in TestPreemption
   43d9748d3a8 Add error handling for Register() call
   253a85db160 Move WaitForFailure() to the test
   453ac809c12 kubeadm: tolerate whitespace when validating user CA PEMs
   99c2e74a23c Add debugging message to know the pod status
   52ddae02672 Remove Delete/CreateSyncInNamespace()
   92940fa80d6 Remove `recorder.PastEventf` method
   49884bca30e Fixing regex for kubernetes version in kubeadm
   81c6989ccc9 Clean up unused variable from unit test.
   2b304bf5e2b fix static check failures in component-base/metrics
   f438def93d9 Update to golang@1.13.5
   ca690514753 refactor(pod log):refactor for container valiate, little cleanup
   31d6cc5792f Switch to new ClientConfig for Azure cloud provider
   8c77b96b75d fix staticcheck failures of test/integration/scale test/integration/serviceaccount test/integration/serving test/integration/volume
   7382a7c8010 Add backoff retry which implements autorest.SendDecorator interface
   80e3cc36294 Fix unit test to run in non-gce environments
   210f1a904dc Move client config to a separate package
   12ebe54fc41 publishing: Update to go@1.13.4 for kubernetes-1.16
   78352240f63 Move podtopologyspread priority logic to its Score plugin
   b373121a146 Make CPUManagerCheckpointV2 type an alias of CPUManagerCheckpoint
   72d66be439b test images: Adds E2E test image automated build
   35dea07ad6d silence usage when pass bad cmd options
   5faf8f4c528 Lock checksum calculation for v1 CPUManager state to pre 1.18 logic
   6359080d4f6 fix: test failures
   ece8aefe1f7 fix: azure error should not retry on bad reqeust
   b3bebddb30f Fix a typo in interpodaffinity score plugin
   320ac4e2770 feat(scheduling): implement azure, cinder, ebs and gce as filter plugin
   31e59fd5e36 Add ipv6 examples for network policy API
   0995ef573f8 Fix ensureStaticIP if name for existed address was changed
   134c545b96e proxy: add some interface type assertions
   b1e03256d71 alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util
   572c81ff537 e2e:remove func of framework/replicaset to e2e/upgrades/apps/replicasets.go
   8a4dce5431f Move pod topology spread predicate logic to its filter plugin
   78c05176917 fix link in readme
   161c6f4886a e2e:remove unused func in /test/e2e/framework/autoscaling/autoscaling_utils.go
   eea91c018b2 Cleanup testapi after it has been removed
   f19ed6ccfe5 remove unused code in test/e2e/apps/deployment
   dbe7c920e07 Add alias of api/errors in endpointslice.go
   488b94767c4 remove TODO: Use return type string instead of []string and update func
   01083988aef Add apierrors as alias for k8s.io/apimachinery/pkg/api/errors
   f53c81f4a25 Move ServiceAntiAffinityPriority to score plugin
   794a8668fa8 move funcs from test/e2e/framework/job to test/e2e/apps
   12d08d52ee6 Improve output of update-openapi-spec.sh when printing logs from file.
   291a7bb1649 feat(scheduling): move csi volume predicates to csi filter plugin
   c75787bb778 Fixing Potential Race Condition in EndpointSlice Controller.
   b8b846c31c8 Use Deployment in sample-apiserver examples
   013994a7408 Updating minor grammar errors.
   89867e1c218 Move CheckNodeUnschedulable predicate to its filter plugin
   c4331b0369d Move VolumeZone predicate to its Filter plugin
   19fe9f8d947 replace grpc.WithDialer which is deprecated
   6596a14d392 add missing alias of api errors under test
   5bc0e26c190 unify alias of api errors under pkg and staging
   fc738cbb1d1 unify alias of api errors under test
   2af59673105 move func EnableAndDisableInternalLB from test/e2e/framework/service to test/e2e/network
   c467a733c31 Remove unused function NewMetricExporter from e2e test
   2b3df3587e3 Deprecate scheduler predicate and priority factory registration
   4bfa4d8b30c Come out of loop when omitempty is true
   36393390f43 fix: azure disk could not mounted on Standard_DC4s/DC2s instances
   dbc99290123 e2e: move funs of framework/pv to e2e/storage
   e5168cc7bb4 move nodepreferavoidpods to score plugin
   bf2b709e822 Move ResourceLimitsPriority to its Score plugin
   faf27331bcb fix shell checks errors in cluster/common.sh
   75b716a3526 Fix simple typos
   1f0c7db589d update defaultconfig link
   17fa573e059 Add simple explanation to verify-golint.sh
   141909fa2e3 tighten ceiling for matching-precedence to 10000
   e5d90c57f0e move NoDiskConflict predicate to its filter plugin
   8fc21710e7c Added scheduler algorithm provider registery.
   c33c4fffd1d Move RequestedToCapacityRatio to plugins/noderesources
   75872b8e799 feat: implement node affinity priority as score plugin
   299a9c8cf50 add extra group and usage check for bootstraptoken
   fe7de96ebe9 cleanup scheduler's in-tree plugins registry naming
   7271a81921e validation.go: don't clamp the CIDR size calculations
   49b6e404617 Clean up kube-apiserver reference document
   97676963c39 deprecate scheduling_algorithm_predicate/priority_evaluation_seconds
   21c916c3d21 move Taint and toleration predicate to its Score plugin
   70b80ae28a2 Deprecate scheduling_duration_seconds Summary metric
   f0e01bcfde4 Change log level to 3 when --random-fully is not supported
   4123973726c e2e: move funs of framework/deployment/fixtures.go to e2e/apps/deployment.go
   5fd6b8fae79 fix: remove totalNumNodes from priority metadata
   3d39d90e8e3 Update modules
   1fd59cfcf37 Swith to retry.Error for Azure cloud provider
   3e10dbd6686 Use retry.Error for all Azure clients
   cc09b3ab6c3 Add retry Error definition
   b086d296def move funcs in replicaset to autoscaling_utils
   803161d621d kubeadm: kube-dns is deprecated and will not be supported in a future version
   bae72ee8d2e using string instead of byte
   237da6250b7 change print log for unity when during kubeadm init
   bf8a8a657c9 introduce checker for the result of nodeInfo.Node()
   11382a31294 Delete unused function from e2e test autoscaling_utils.go
   5b4a7744fad fix kubectl run help image name
   fcae27b9d2d If lastTimestamp is not set use firstTimestamp when printing event
   3f591bb2dd5 feat: implement image locality as score plugin
   83408acf757 Move volumebinding predicate to its filter plugin
   32e1c032fd8 Add logs for rate limit values
   6a1354252de Add unit test for extended ipv4 service IP range
   df4f5c1a30d Revert "remove ipallocator in favor of k/utils net package"
   a54e5cec54b Fix staticcheck failures for pkg/proxy/...
   b13e22482ea Count dropped requests except system previledged group requests.
   107db83839c kubeadm: re-enable kubelet version check test in preflight
   52435c021e0 Change Azure global rate limit to per client
   d564e730c98 format test file
   b264a747481 Add unit tests for pkg azure/auth
   e468385d0bf Remove ineffective calls in toUnstructured
   eeb8a5b7282 Added back the flag to trigger examining all Filters in the scheduler.
   e4c87c20e2d fix azure cloud provider bug when lb specified in other resource group
   2497a1209bf bump k8s.io/utils version
   a5f782face1 Reuse converter in crdHandler#getOrCreateServingInfoFor
   3e65b3793f3 Cleanup failedPredicateMap from generic_scheduler.go
   429448cb402 move inter pod affinity predicate logic to its Filter plugin
   7dc6c94395f kubeadm: use bind-address instead of address
   947d6960215 On OpenRC ServiceIsActive should not report true if no such service exists
   1f78a936d40 Deprecate AlwaysCheckAllPredicates in scheduler Policy API
   29ec87f769c apiserver: add localhost to alternateDNS for IPv6
   c715aacdc24 Add simple reference to synopsis of kube-scheduler
   4291a03e395 fix apply set last applied namespace
   a8a00f690e6 hack/local-up-cluster: modify cloud provider launch to work with aws
   2d2c9a884a0 Revert "Merge pull request #86376 from xieyanker/kubemark_deployment"
   b88788b0854 update to use e2e-up.sh instead of kubetest
   b4f52385356 Add instructions about how to use kubetest to bring up e2e test cluster
   0ae8b6ba596 Update subnet mask calculation for compatibility with future VNIC changes
   c71dd7e4ee6 Bump Ginkgo module to release version
   ecfd30d2517 Bump Ginkgo to support building on riscv64 arch
   0e786cbafcb swap over kube-apiserver manifest to use livez and readyz
   d1fb0b57dfd Expect NodeUnpublish calls when NodePublish is called
   68f3802ba80 move NodeLabel predicate logic to its Filter plugin
   119a9a94d12 InterPodAffinity Priority as Score plugin
   22a0f55a682 move NodeLabel priority logic to its Score plugin
   c60802e8939 Add klueska as an approver in test/e2e_node/OWNERS
   f4bd4e2e965 Return error instead of panic when cpu manager starts failed.
   f2adf33bc8a update fluentd to 1.8.0 / fixed gemfile / fixed shellcheck lint problems by using xarg
   8374c49c593 Update README.md
   c5002a348e3 kubenet: replace gateway with cni result
   4303be3d9fe Revert pull request #85879 "hollow-node use remote CRI"
   096bdb7121a Sample apiserver: Avoid etcd listening on DNS result for "localhost"
   f50638f4395 Isolate kubectl test-cmd plugin tests
   a84e883e4b3 rename _count to _total in a few metrics
   8110e08dd4a Fix golint failure not contained in .golint_failures
   b898c79656a chore: port azure disk csi code to upstream
   745248dd6f5 Fix cpu manager e2e test typo
   d1480ab49d6 It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc.
   131180b1187 Add a config option to azure cloud provider for the pre-configured loadbalancers
   79bc63fb4b7 Adds PreProcessor and PostProcessor functions for modifying apply behavior
   6511b603c9c Define workloads specs by YAML
   03df6320e59 Wait for resizing condition
   53080bda9c9 Allocate map when out points to nil map
   3aa794aafc8 remove personal kind.yaml that was added accidentally
   877381550dc Revert "promote e2e tests for taint-tolerations in predicates"
   c14280e8d39 prevent blocking wait in cert reloading
   bac2e9fbe2c Autogenerated
   619af251476 Remove DefaultConvert
   9bd2912e7a0 Add CHANGELOG-1.18.md for v1.18.0-alpha.1.
   48944b94da6 change kubemark from ReplicationController to Deployment
   4e45421f610 Moves visitedUids and visitedNamespaces (used for pruning) into ApplyOptions
   e8e1cc9ee01 extract PreInitRuntimeService from NewMainKubelet
   6b33a770685 Adopt kubeadm and kubeproxy unit test after new config field added.
   670369f2a4a Move patch functionality for apply into its own file.
   e38e320222a Moved prune functionality into its own file.
   07cb2fda5da Refactored some apply printing functionality; removed unneeded count and objs variables
   02af4c9be20 Created GetObjects() method for ApplyOptions and integrated into apply
   18fa7bdb6ea Cloud node controller: Only call once into cloud provider
   667aaf33a6b Split cronjob tests, so they don't interfere
   4eb61e3f93e Deal with auto-generated files: - Update bazel by hack/update-bazel.sh - make update
   9b7d8712cfa Add show hidden flag to kube-proxy
   869aef61af4 improves watch and report e2e test to also check IsResourceExpired since the API can return both errors (Gone, Expired)
   6e789e9d52e fix: azure data disk should use same key as os disk by default
   770e51cd100 Deprecate PredicateMetadata
   b3abfdc9e41 registered nodeports and noderesources prefilters
   f9c4551a947 Use private master IP in GCE kubemark tests
   87e8137c18a cleanup(kubectl taint): fix Errorf and comment error, and remove unnecessary bool flag
   9818b4522e3 Add klueska as an approver in pkg/kubelet/cm/OWNERS
   db2c048db9c support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout
   23957a6b289 Allow kube-proxy iptables mode to support dual-stack, with the meta-proxier.
   01f1cf3c968 Add test cases for a helper function in controller manager
   0bd41a300f1 Refactor `kubectl proxy` command to have similar design pattern as other kubectl commands.
   62d77728829 Check FileInfo against nil during walk of container dir path
   2103ea4dded Changes Visit() to Infos() in apply to keep slice of objects
   5c537915bfc Mark '[sig-apps] CronJob should delete successful/failed finished jobs with limit of one job' flaky
   ce3839452e5 Mark '[sig-scheduling] PreemptionExecutionPath runs ReplicaSets to verify preemption running path' flaky
   0224c481202 Job completed event added
   21641571131 Make e2e scale updates unconditional
   287e3298fbf suffix InSeconds to cacheTTL for clearification
   82afa2bbafc Fix up the sub-test style
   a65d8aeb762 Add UID precondition to kubelet pod status patch updates
   176c95ff3ef Add debugging for delete grace period e2e flake
   3f3bc37e058 auth: add metrics to token cache
   d12608017d6 Mark GCEPD test flaky
   8111bb3d771 Update wardle e2e image
   cad5de706a9 Build sample-apiserver image using kubernetes 1.17 / go 1.13
   8fae8e54af2 Disable excessive logging in scheduler plugins
   9898f479c1b code-gen: fix argument type for plural exceptions
   2fe82075b44 fix staticcheck faulures in 'cmd' pkg
   c9418412d18 fix misspelling in comment
   f401d711aac networkPolicy validation ipv6 unit tests
   a16808f353a kms: use negative cachesize value to disable caching
   d45107a00da test/e2e: move funcs from test/e2e/pod to other folders
   c394d821fda Deal with auto-generated files: - Update bazel by hack/update-bazel.sh
   ecf5f7d7498 Deprecated metrics under /metrics/resource/v1alpha1
   0db7074e1ad Add new endpoint for resource metrics.
   a634e254c16 Fix staticcheck failures for test/images
   7331ec7b021 Move service affinity predicate logic to its plugin.
   973fddd155f e2e: move funs of framework/gpu to e2e_node
   4536ed50a04 e2e: move funs of framework/deviceplugin to e2e_node
   21e906fba66 e2e: move funs of framework/job to e2e/upgrades/apps/job
   8d3a8d5a6c2 e2e: move funs of framework/metrics to e2e_node
   6603f41a130 Promote StartupProbe to beta for 1.18
   fbe3521e8e5 fix: formating and typo
   d7f14fb38e4 fix: address test failure and review comments
   51bff87b18d Add util function to merge resource lists
   28f8e52f320 Add "kubectl describe node" resource tests
   439a862bba6 Add huge page usage stats to kubectl describe node
   4769cbedd5b Update go version in go.mod
   c6a2c4fa793 fix: add unit tests for truncate long subnet name on lb ip configuration
   1a55d0f7b09 fix: should truncate long subnet name on lb rules
   09032bea6cf addons: elasticsearch supports automatically setting the advertise address
   02a0aad6d3d podfitsresource metadata as prefilter
   3d353f5122d Update semantics of EvenPodsSpread metadata object
   468aebc17f1 Move EvenPodsSpread metadata computation logic as a PreFilter Plugin
   8953544b15e add unit test
   a70bec465da e2e: support long CSI driver names
   4152f38d544 cache ttl is configurable
   314b6cb32bb [auth]Change example in can-i to apps instead of extensions
   623c4f9f17e e2e: move funs of framework/statefulset to e2e/apps & e2e/upgrades
   6f3c68bd5c8 compatibility tests for default provider and mandatory filters
   bfd20c9e084 Fix build break - Hyperkube image needs kubelet/kubectl
   5c6371502ab Update addon permissions
   749eea7e0f4 Prune server-side print exemption list
   0387cc7cb3b Update generated files
   e9870c30769 Update storage hash to use ingress type for cross-group comparison
   2b4fac5760f Use openapi fixture for server-side apply tests
   f2f22b84cd5 Delete ReplicationControllerDummy
   18ba6f94820 Remove references to unserved types
   3df9e86a4ea Remove ability to re-enable serving deprecated APIs
   424d5e20dfb Remove testapi
   78a3a4a2b1d Remove testapi use from pkg/api/testing
   5d5b444c4da Remove use of testapi codecs, selflink, resourcepath functions
   bb90f0ff94d Install APIs directly for tests
   c54dbd85e00 wrap host ports metadata in a prefilter.
   ee85b6a579f Don't report deletion of attached volume as warning
   d8c35733c0a doc: remove Draven from test package reviewers
   470ea876237 fix broken link: https://kubernetes-csi.github.io/docs/Drivers.html
   95bf2265337 fix staticcheck failures of test/e2e/manifest
   77a9d4772b7 move funcs from test/e2e/framework/replicaset to test/e2e/apps
   d146e1941d2 Add getting Storage Quantity to ResourceList
   5743cffd5d5 Move added info and status stack trace to the end of line.
   f786cb07b79 test/e2e/: use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue()|BeFalse())
   995d4083341 Clean up conformance tar test data
   0e644c87493 e2e-topology-manager: Fix bazel tests
   255ab6d2c35 Remove priority execution paths in favor of score plugins
   288609ecf52 remove ds dependeny on scheduler metadata
   70a2bccfd6c deprecate scheduler's FailureReason
   31b0d7f8532 e2e-topology-manager: Fix package name
   fba4a7be340 e2e-topology-manager: fixes for gofmt
   337fdf2f371 [WIP] e2e-topology-manager: Initial commit for E2E tests
   2fdf1fa3c14 inter-pod affinity prefilter
   c229c78af7b Upload containerd logs to stackdriver
   9cff3457705 Do not swallow timeout in manageReplicas
   9f334a4d083 Add an interface to return scheduler framework instance
   effe2990824 kubeadm: add basic validation around kubelet.conf parsing
   1657ef25ebd Extend authorization benchmark
   15e98360a86 code-generator: update BUILD
   d511a809af4 code-generator: expose plural exceptions via flag
   44a0d04b963 Add a unit test guarantees ClearState will fully clear a collector.
   02f335d476b feat: remove several feature gates in 1.18
   dcea6ff0653 fix: remove TaintNodesByCondition feature gate in daemon controller
   64e49e187a1 add hwdef as a reviewer of hack
   89b31c8d693 move test/e2e/framework/lifecycle/ test/framework/cloud/gcp
   ca532c6fb2c Ensure that error is returned on NodePublish
   20f0408f293 promote SataQiu to an approver of test and test/e2e/framework
   915b0964052 Make sure critical pod in the preemption test is always cleaned up.
   ec24d3c7e8f Set core_pattern to an absolute path.
   f5532861564 Pass initial set of runtime containers to the CPUManager at startup
   6441e1ef436 Move CPUManager Checkpoint restoration to Start() instead of New()
   69f80538504 Update top-level CPUManager to adhere to new state semantics
   185e790f711 Update CPUManager policies to adhere to new state semantics
   7c760fea384 Change CPUManager state to key off of podUID and containerName
   9191a949ae7 Extend makePod() helper in CPUManager to take PodUID and ContainerName
   7a15d3a4d7f Fix bug in parsing int to string in CPUManager tests
   765aae93f8a Move containerMap out of static policy and into top-level CPUManager
   1d995c98ef6 Update CPUmanager containerMap to allow removal by containerRef
   0639bd0942c Change CPUManager containerMap to key off of (podUID, containerName)
   3881e50cce7 Update CPUmanager containerMap to also return a containerRef
   347d5f57ac4 Move CPUManager ContainerMap to its own package
   0e4469cddda persist deployed DNS configuration during kubeadm upgrade
   dc17fc42833 fix log format string
   773fbeab1e3 expose the clientConfig to consumers trying to build custom clients against the kubeapiserver
   d0210220e48 dump information for all namespaces related to the test
   ea913f38ead allow configuration of customized AfterEach functions for all tests
   711dc0b5b5e Increase Burst limit for discovery client
   5e0f36705ef Update CHANGELOG-1.16.md for v1.16.4.
   a5759ee2780 Update CHANGELOG-1.15.md for v1.15.7.
   ca0d2b7ce69 Update CHANGELOG-1.14.md for v1.14.10.
   cdf2e794a55 Clarify intstr.IntValue() behavior
   0f410d625a1 change CounterVec to use Counter in the Kubelet's Pod Lifecycle Event Generator
   ca36822f1e7 client-go: update INSTALL.md to include semver tags
   c4ad07b0b14 e2e: move funs of framework/service to e2e/network
   35b0f1f7ddc test/e2e_node/:use framework.Equal() instead of using gomega.Expect(bool).To(gomega.BeTrue(),explain)
   00ea8c4f9e0 Revert "Add an option to specify kubelet flags for heapster node."
   f8e0c6bb41b test/e2e/storage : use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue(),...)
   dc3d1bd238e Eliminate running paths of Predicates in scheduler
   e70120f0838 fix staticcheck failures of e2e/storage/utils e2e/storage/vsphere
   49e4bd137bd Ensuring kube-proxy does not mutate shared EndpointSlices
   8647e75cec6 shared authenticator lookups
   009c731a880 vendor golang.org/x/sync/singleflight
   c051fc2057a Added alejandrox1 to test/approvers
   8ab226263a1 Adds tests
   ac23d55d907 Generates boilerplate code
   27ffe439b61 Adds the algorithm implementation for the Configurable HPA
   5c70cda6e51 Adds validation rules and proper defaults
   141eaf79eed Introduces all API changes needed for Configurable HPA PR
   a051c591a1f Fix inter-pod affinity scheduler benchmarks
   a8839a9735f change FakeWatcher.Stopped to be a private field, as read it directly may cause Read/Write conflict race
   b911aa6471a fix potential memory leak issue in processing watch request
   3ed535a89a2 fix staticcheck failures of e2e/storage/drivers e2e/storage/testsuites
   6df97909bb0 e2e: remove unused method in e2e/framework/log
   546dbf8b3cb e2e: move funs of framework/kubelet to e2e/scheduling
   729bc82be64 Drop v1.15.0 API test data
   82465dd8c20 Add v1.17.0 API compatibility data
   9f6bbfb67f4 Revert "staging/publishing: temporarily disable publishing tags"
   edfef793640 Add kind/flake issue template
   a077734079b Update v1.17.0 CHANGELOG to match final draft
   32dc70e0f13 optimize required inter-pod affinity
   23a4a1191c6 Update CHANGELOG-1.17.md for v1.17.0.
   57b538e657c Increasing LoadBalancerPollTimeout from 15 to 22 minutes
   a9f80c70b2c update RBAC rules in e2e aggregator test
   3cc926f5efb e2e storage: fix type in comment
   96084a5198c Make error message and service message more clear
   17ae1eda3e9 e2e storage: improve instructions for external driver testing
   e7e9d1cf240 Add serathius to metrics-server OWNERS file
   31fb04fa98e Remove cluster-monitoring
   597816c11e2 update total_limit_size
   3ffd8f34b24 update fluentd-es-configmap
   a192b59f9f0 fluentd add port promtheus and health check
   325848509a6 es add readiness and liveness health check
   089374e8d64 e2e: remove unused method in e2e/framework/autoscaling.
   babdcd0d149 invoke getTypedVersion() instead of direct runtime call
   a136108d2b8 Return all predicate failures instead of the first one
   10b173868a7 move funs of framework/deployment to e2e/apps
   31c302994ab updated fluentd to 1.7.4 + plugin updates and switch to debian buster
   303c1a40bce fix static check in kubectl/pkg/cmd/annotate.
   dfb6c3424fe move unwanted console output out of versiongetter.
   24d105995db Fix broken SELinux detection
   27d645dc5b8 fix staticcheck failures of test/e2e/storage
   96fe76a9ed4 kubectl oidc auth-provider: include cluster address in cache key
   7f5076d8ee2 slim down some lister expansions
   c084d57b18a ping kmsplugin gentely when in good state
   aba0b315269 Changed Kubelet client and serving cert TTL/Expiry certs to use gaugefunc for calculating time remaining.
   dfa04bfc041 Ensuring EndpointSlices are not used for Windows kube-proxy implementations
   4762985fb68 kubelet: guarantee at most only one cinfo per containerID
   53be26e4025 optimize preferred pod affinity
   da53044abdf kubectl/drain: add option skip-wait-for-delete-timeout
   2bba8dac7fa staging/publishing: temporarily disable publishing tags
   efd61ae3e48 correct invalid urls
   06c59017697 fix staticcheck in test/integration/apiserver
   d428de26b83 Fix IPv6 addresses lost issue in pure ipv6 vsphere environment
   a5226f623e1 Add cache for VMSS.
   39cb8222c79 Add an option to specify kubelet flags for heapster node.
   3e19201ec2f kubeadm: Throw an error if the currentContext does not exists
   dd50ac311a0 Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made
   0dd468039da inject remoteRuntime to kubelet dependency
   7947b6ce6d8 kubectl change podSecurityPolicy group
   4d3d364d2ba promote e2e tests for taint-tolerations in predicates
   6de70829784 remove two unused metrics
   aaac96c6605 Two bug fixes: (1) at least log something out if we fail to register our health check, (2) actually register a prometheus metric. I delete the deprecated metric in this block because there isn't any point to it, since no one can be broken by changing a metric that doesn't get collected
   3fa070ad381 Fix nil pointer dereference in the azure provider
   2e6d6d73e7b disable node deletion detach test
   28a564cb323 Add current chairs to component base approvers
   a8ba361fd65 expect node to be recreated with the same name
   909300b8be9 When running `kubectl drain` in dry-run, list warnings and pods that would be deleted.
   bacab3d4577 Deflake kubectl custom printing test
   d924407ede6 Include cloud/gcp in e2e.test
   f4d1674827e Refactor parsing logic for service IP and ranges, add tests
   fdd25ec9682 Fix bug in apiserver service cluster cidr split
   bc22d70e2b0 Revert "kubeadm: don't check if image exists before pulling"
   8227b61022f bazel update
   87ccd41af26 e2e storage: add compile test for public TestSuite API
   160da35b23c e2e storage: public API for testsuites, support CSIInlineVolume type for generic resource
   dd7430134a8 Removing conditional check
   1b63219c5ec Included CSINode describer
   fb33b2f42a9 increase LRU cache size 8x for authorization webhook
   da67bcbd355 added benchmarks for preferred (anti)pod affinity
   d81dd48e2c5 test/e2e/auth: Fix static check failures
   d3c562f7e09 Run all csi-hostpath containers as privileged
   bf92350b11a Refactor kubelet component config lenient path decoding
   b24dbac09a9 add hack/verify-typecheck-providerless.sh
   94cf7319783 typecheck support setting tags, skipping test code, and ignoring directories
   d51b72d9e9b fix staticcheck in test/e2e/network/
   c0db5b2562f Convert ExpectEqual(err, nil) to ExpectNoError(err)
   e057bd4ad2e fix: typo Snapshoting to Snapshotting
   40911e74c16 fix staticcheck in pkg/printers
   32850dc47d3 Revert "Use ExpectEqual test/e2e_node"
   cff9751112f Update GCE Windows startup scripts for TPM-based authentication
   36784331eb8 Sync the status of static Pods
   e981d1ea44b remove framework dependency from framework sub-package kubectl
   b85adbf1fd9 moved WriteFileViaContainer and ReadFileViaContainer to kubectl_utils
   4b99e5305e2 remove CheckFileSizeViaContainer from framework
   cd8da67b03c move KubectlCmd out of utils into its own package
   4b8e552a888 Use typed errors for special casing volume progress
   8aa26a6ed6f remove max pods from e2e test
   f967c544ad1 scheduler benchmark: allow to override bench prefix
   bc7d254317c Fix Cpu Requests priority Windows.
   2dc3684cf76 Fix waiting for logexporter log fetching processes
   09ede2fd982 Deleted extra 'phase' in command example
   6f0eec4dffb Create kubemark cluster as private
   b3045389422 fix staticcheck errors in legacy-cloud-providers/azure
   839b440173a Cleanup converter
   bcaab8c1a22 Fix bug in ignoring untypes conversions
   7ab3e436f71 Cleanup old-style conversions
   ab6cbd2e8d0 Cleanup metav1 conversions
   d11b7a62040 run `hack/update-bazel.sh`
   c355cadbb1f Enhance error message for failed controlplane init
   29eb15c3a84 fix golint check in test/e2e_node/runner/remote
   901d7de5566 `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object
   b469404d976 hollow-node use remote CRI
   9a9db004512 handle registry merge error
   113001ab016 Utilize Context with timeout in gce_instances.go
   1fb0dd4ec51 Rename PodDisruptionsAllowed to DisruptionsAllowed in type PodDisruptionBudgetStatus
   6c1d587d514 kubectl/drain: add disable-eviction option
   4d6e5bf7bea Utilize Context with timeout in GCE operations
   2d3c8fe6b95 optimize anti-affinity predicate
   727fdef2db8 Address PR comment
   7eb6182a633 Revert "Fix shellcheck failure in log-dump/log-dump.sh"
   82206578ccc Update checks.go
   81471c36b11 [generated] bazels and vendor/modules.txt
   6c0688fd517 santize codegen scripts
   15a883b0674 s/apiextensions/apiextensionsv1/ for all imports in k/k
   168f8f54f01 switch to v1 crd
   51814ae189f Be more agressive acquiring the iptables lock
   6fcd030877e fix staticcheck failures of test/e2e/upgrade
   28327efe6bf Deflake delete grace period e2e
   4629da28a02 Update CHANGELOG-1.17.md for v1.17.0-rc.2.
   c62d6add9b8 Deflake pod readiness e2e
   f2f0435e718 Enable hidden custom collectors when calling SetShowHidden().
   ea7a230af63 All stable collector should be tracked in registry.
   069b088ad7b The descs in a stable collector should be tracked by a map instead of slice.
   efa34ba484f add PredicateFunc for configmap
   561ee6ece98 Use ExpectEqual test/e2e_node
   9eda99793de use ExpectEqual of framework in test/e2e/storage
   d2d68026fc9 Fix golint issues in test/e2e/lifecycle/
   cd7859901c6 Fix func VerifyLatencyWithinThreshold() to local
   dddd631706b cmd/kube-controller-manager: fix staticcheck warning
   36b41bc9655 apimachinery: fix bugs in a Test function
   e581be1ec78 add err handling in gce/gci
   a70a5347360 Replace the hostname in the fluentd config file even if the file exists
   ba2cc99bdec Add test cases to verify kubelet & kube-proxy can recover if being killed accidentally
   9b32d8734f8 Adds initial unit tests for tablegenerator.go
   e687bf4fe9e Use GCS bucket for crictl on windows.
   a151aa35dc2 Add defaulting logic for EncryptionConfiguration.
   f3885340826 make scheduling queue start before the scheduler starts and stops after the scheduler stops
   e9c400aabca update scheduler benchmarks to be more representative
   f0ea7bcf9e4 kubeadm: set cluster name on the controller manager
   aa278345fa5 update gopkg.in/yaml.v2 to v2.2.7
   0741f6fa295 Ensure that metadata directory is not created if secret is not found
   309c6f863a1 Handle the case of remounts correctly
   5feea93163b Rename MarkVolumeMountedOpts to MarkVolumeOpts
   cdbd3ba5c29 Change interface of SetUp function
   db9ac38592d Change signature of MountDevice function and remove MountDeviceWithStatusTracking
   0c52b6606e6 Refactor NodeStage function
   57019e0628a Add tests for verifying in-progress state
   27a70a9260c Update generated files
   321e99367af Add code to handle Setup With Status tracking
   dc9e64c31e4 Implement return status codes
   d620493b743 Ensure webhook backend requests are not artificially rate-limited
   50dbcb3e005 Make sure PodExistsInVolume does not uses uncertain volumes
   34a6007dfed Add code to mark volume as uncertain
   a795f3de88a Add code for introducing uncertain state of mounts
   51b7ef2c87e fix: replace TrimLeft with TrimPrefix and TrimRight with TrimSuffix
   e911833814b Make APIService.spec.service optional in the openapi v2 spec
   2df8ad1b1c8 Cleanup default conversions
   d6969d2c554 Cleanup metav1 conversions
   12ee83ed942 Use new-style conversions in default conversions
   8c2aed4ff5b Optimize:remove unnecessary judgment
   c687521b446 fix staticcheck in test/e2e/cloud/
   0c36299c218 Use expect equal test/e2e/upgrades
   af231b09e41 remove Kubeadm-env file overwrite from apply and node command
   14fe7225c14 kubeadm: Improve resiliency in CreateOrMutateConfigMap
   335a3e9efbc kubeadm: use correct IP family for etcd localhost
   84a9803741f Log error when writing checkpoint fails
   6415fa765e2 Remove nodes slice in loop of takeByTopology
   5ea43f20cb7 optimize scheduler's UpdateNodeInfoSnapshot
   22d883d7f23 Nominate liu-cong to be sig-scheduling reviewer.
   366e053e28d Switch addon resizer to 1.8.7
   1d3b6ece636 Remove stale comment re making apiserver common names dynamic
   fef9e413dff Make cluster auto scaler use leases
   b1b9e6254a5 Bump Cluster Autoscaler version to 1.17.0
   798d2fb75aa Fix comment typo
   69aae3aa5ab fix golint failures of test/e2e_node/remote
   be0750f6d6a rm -rf staging/src/k8s.io/apiextensions-apiserver/pkg/client
   d07dd4bbedf Fix NetworkPolicy PolicyTypes validation
   f461225ba5a Update go-winio module version from 0.4.11 to 0.4.14
   5bec54ed5b6 fix: padded base64 encoded docker auth field
   044b315d611 All check for instanceID
   ae72e19ab6b apiextensions: filter required nullable to workaround kubectl validation
   52ac2783bc8 use framework refactor code in test/e2e/common
   a252a617a5e drop KUBE_TIMEOUT in test/cmd/kubeadm.sh
   aacd79cc363 setting kubemark node labels
   5cf06bfa805 fxing kubemark node labels
   9ca21e3722b Deal with auto-generated files: - Update bazel by hack/update-bazel.sh
   2187fe26997 Add ClearState() API to Desc. Add create() API for Desc Add annotatedHelp fields to Desc.
   6323dc789aa Add kind/deprecation to pull request template
   81d05e91b5b Retain objects for a limited lifetime in the mutation cache detector by default
   9a868766eea Enable mutation detection
   4d9c2a4ef8d use ExpectEqual of framework in test/e2e/autoscaling/
   d44583d28ae Fix iscsi refcounter in the case of no Block iscsi volumes
   bbc49d6b1f4 catch the exception raised in Remove-HnsPolicyList
   a445c97a0e5 update cadvisor dependency to v0.35.0
   1ad78587924 stop spamming the log on failures with full objects
   7360797a126 remove redundant definition of the defaultProvider in the scheduler
   ee2418c7aaf Move hostdns.conf out of cni directory.
   e66f4ca537b Add containerd windows support on GCE for test.
   2e0bad569d2 export scheduler.Snapshot function, needed for cluster autoscaler integration
   86f3bc25e1d Reduce unnecessary Set in updateAllocatedDevices
   29588eee85e Deal with auto-generated files: - update bazel by hack/update-bazel.sh
   6dfd3e11e5d correct invalid urls in CHANGELOG file
   319946924eb Refactor custom collector unit test.
   f993950b3f1 use framewoek in test/e2e/cloud
   4325e8a4528 e2e: use log functions of core framework on pv, testfiles and volume sub packages
   14316058f0a Adding KubeProxyConfigMap19 checking in test-e2e-kubeadm
   bc53b97ceb2 Clarify client-go issue location (#85464)
   e7172b3dbf4 pkg/master: Fix static check failures
   a3a4320aff2 Wait for PV to be available before creating PVCs in volume binding test
   5b1fb221b6e increase pv controller resync period to try to deflake api update conflicts
   ce68a89d26a kubeadm: simplify discover/token and add detailed unit tests
   a8991a108a8 Enable update-bazel.sh outside of GOPATH
   657a3a3294e Delete client node selector during volume creation
   18ba2643dba add applyto tests for controller configs
   3c1dc89d987 fix kube-apiserver poststarthook additions to avoid duplicating them
   016ab0b899b Fix benchmark artifact parsing.
   deb75da17bb fixup kubectl test
   a1595da534a Attach runtimeclass printer
   03910e99da2 Attach resourcequota printer
   9b387da5a1a Improve rolebinding/clusterrolebinding printers
   5448a8b526a Add webhook printers
   cc7e7245a31 Add CSINode/CSIDriver printers
   36eb250cbb4 Switch TableGenerator/TableConvertor interfaces to metav1
   4dd6fd44806 Fix AWS eventual consistency of AttachDisk
   a0489c6ca80 test/e2e/apimachinery: fix staticcheck warning
   4d028a7903a Extend Registerable interface with FQName() and track collector by name.
   b9ef1ce87ee lazyInit accepts fqName when init.
   b881f19c8be kubeadm: Group centric component configs
   837fd41c42b Flip CSIMigrationOpenStack flag to be beta and off by default
   d2bdf89a8b9 fix golint issues in test/e2e_node
   e4b5a54eb65 fix broken link:https://kubernetes.io/docs/concepts/overview/object-management-kubectl/
   59274b56af2 Use plugin name for filtering metrics
   d78137bbfe4 Fix PVC condition check for offline resizing
   07806d4300c add test coverage with kubectl get components
   c071265c774 modify the error url of autoscaler
   1cb3992d1b8 Switch storage version to use v1.CSINode in 1.18
   494629ef58c Fix resource version precondition on pod delete
   c9dafc8cf9f Add RainbowMango to onwer list of metrics stability framework.
   dd76fdfce55 Rename Azure driver to Azure Disk driver
   2fe699cacd3 add myself to sig-network-approvers
   e87e4bea0fe Fix HTTP readiness/liveness probes for local node
   e8ee8622b80 Add support for new dual-stack flags for kubernetes-controller- manager in kubeadm:  - node-cidr-mask-size-ipv4  - node-cidr-mask-size-ipv6
   ecd1c074727 don't error if set-resources patch is empty
   7898b3f0a8b kubeadm: update image pull tests
   09d4d65b1bd fix etcd version check error on ARM
   f6f3738a003 kubeadm: don't check if image exists before pulling
   c38e79e76d4 refactor: incorporated the review comments
   5a1c6b6c022 Revert "remove redundant `source` in shell"
   4229b992032 Deep copying EndpointSlices in reconciler before modifying them.
   bbbf3963489 make elasticsearch discovery supports IPv6
   b1c39e9b160 apimachinery: Fix Dropped Test Error (#85427)
   f96dda6fcfd removed comments referencing akse
   8682e902f54 kubectl/drain: Add context support
   10865d99444 Provided a mechanism to re-register hidden metrics.
   a4abc1dd4d6 refactor(golint): lint fixes for iptables test file
   81d00077162 Hi San Diego (#85424)
   9dcb3bfcff2 Added rest client metrics for client TTL and rot. (#84382)
   bfa4188123e Fix kubectl conversions
   c224a6de5e0 Output port as number in error message
   73a881e06db Fix GKE upgrade test.
   65aefd3def6 Update CHANGELOG-1.17.md for v1.17.0-rc.1.
   906d3159b12 kubeadm: add a upgrade health check that deploys a Job
   c3c7ea2efd8 Dump namespace if the namespace could not be cleaned up
   4428c0c25c1 stop_kubemark
   1431853075b fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md
   1c25890e946 fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/cri-validation.md
   98be7831e4d Revert "kube-proxy: check KUBE-MARK-DROP"
   abc64a8519c Print nominated pods on the node when dumping scheduler cached NodeInfo
   3322ff9551e generalize solution
   81afa77e3bc add pod info when failing to add pod to queue
   99603e105ae check service status value returned by EnsureLoadBalancer
   3cbc07bb64a Promote a TCP probe test to Conformance
   11b0e9af251 better comments
   73c1ab71e27 Fix a bug in port-forward: named port not working with service
   55828d059dc misc fixes
   8b951edada6 Set default value for TEST_CLUSTER_LOG_LEVEL and KUBE_GCE_INSTANCE_PREFIX
   e16cc492b0e fix kubemark output error
   a232971d732 Add public documentation for kubelet/apis/config
   7b478d15d58 Set node cidr mask size ipv4/ipv6 config
   8f4a262d618 fix 1-12 number urls
   96eb647898d add cofyc as local volume owner
   e465e1089d1 Sets HostNetwork to False for tests which do not require it
   a3c82e8ae31 apiserver: add Retry-After header to response when apiserver is shutting down
   9aa68a5cf4b client-go: add connection refused to list of transient errors
   6b73c9f8c21 upgrade api-version to fix azure file AuthorizationFailure
   5652819292f kubelet/network: add sig-network-approvers to OWNERS
   fa9a55617bb Fix device plugin generator script
   1daa08c5c86 use context to check client closed instead of http.CloseNotifier in processing watch request
   821362bd1e3 SafeSysctlWhitelist: add net.ipv4.ping_group_range
   b05749c619a chore(gofmt): go format fix
   d49bc343760 [pkg/auth/nodeidentifier/default_test.go]: fix testing error message typo
   55c83e33972 Fix golint issues in pkg/kubelet/events/event.go
   214228f0248 Remove the derprecated API RawRegister from stability framework
   1f4cd65be5e chore(lint): removing the iptables pkg
   a4631c845e7 chore(lint): lint fix in /pkg/util/iptables
   bdc11c28064 chore(lint): fix iptable.go file lint
   0965b577f47 Wait for kubelet & kube-proxy to be ready within 10s
   ec57d8a4d0b Support Azure Stack dynamic environments
   21f7060c8f4 Plumb test state through to fake volume host creation for error handling
   dd308ca5769 Fix grammar: have -> has
   d931b8434b0 Tolerate unset $GOBIN
   be78dd7526c added yliaog to OWNERS
   1f2feb2e7ec Test writing configurations with numeric names
   c80fe4d9146 tests: Removes [LinuxOnly] tag from a few tests
   ce5cbe8b13d Add tests for kubeproxyconfig
   c762fbfa2bf Add componentconfig package testing files
   dcf80e31ac0 Migrate Kubemark to distroless
   cfa6f834278 Enable snapshottable e2e test for csi pd driver
   b7b10fc8993 kubeadm: reset raises warnings if it cannot delete folders
   884582d8921 proxier: improve node topology event handler logic
   197964210ac remove redundant `source` in shell
   e975774b334 use ExpectEqual in /e2e/auth
   259cc951ffc add ut for scheduler framework
   361cd7212eb Fix a comment typo in legacyNodeRoleBehaviorFeature
   50bc528a7ed e2e: move LogFailedContainers out of e2e test framework util.go
   7420faab435 fix-staticcheck in /test/e2e/windows
   34b05d36aa7 Move suites.go to e2e package
   e27188d70b1 Remove e2e/framework/profile_gatherer.go
   f7e6b7a817e Add support for GOBIN to generate-groups.sh.
   bbae978d4a0 Included FSType in CSI volumes
   0e93282a357 Clean up cluster-service label from calico-policy-controller
   871d95cabdd Reduce visibility of prometheus libs
   0412369bcd3 Deal with auto-generated files: - Update bazel by hack/update-bazel.sh
   c4f8c6eea71 Add flag for which to show hidden metrics to kube-controller-manager
   7cfb6ec1a39 fix the defect in the shell scripts
   8206a1f7142 Add matthyx to sig-node-reviewers
   30bf1f47dd4 Hide kubelet metrics that have been deprecated in 1.14
   b1ced1a05e5 remove unused func
   ce34d0a49dc refactor events utils in e2e
   92c7e8e802c Fix golint failures
   31d7a026db7 pkg/master: fix staticcheck warning
   e9edfbc539e modify dockerID to containerID
   3d745c4ad45 Add johnbelamaric as conformance code reviewer/approver
   e99a325d4e9 Fix shellcheck failure in log-dump/log-dump.sh
   896f84b6525 Fix golint issues in pkg/apis/batch/validation
   cfc34712c20 Fix golint issues in pkg/registry/.../storage
   e55fc5656c3 Fix golint issues in pkg/util/sysctl/testing
   fc8ea988901 kubelet: rename HTTPGetter interface
   4dd546cf2cc Allow usage of consts and variables for stable metrics in static analysis
   d30319711e3 Fix golint failures for pkg/kubelet/config/...
   0649f4064e9 Variables collides with imported package name
   47642a0badc fix kubelet failed to start on setting hugetlb limits in non-exist cgroup dir cause by kubelet startup be interrupted on setting list of cgroups In the 'cgroupManagerImpl.Exists' not check&recreate the hugetlb cgroup dir. Then setting the limits in non-exist cgroup dir will cause kubelet start failed.
   8e50c55e6bf kubelet: add certificate rotation error metric
   9a1f631c5ca Replace nginx image with agnhost in sig-node pods tests
   7d4f5554496 correctly handle resetting cpuacct in a live container
   b44d7c8d3cd Drop version from static openapi json file
   fd6983c70f9 simplify volume zone checker
   9fec783d805 Log mvcc revision compaction as warning
   fef67e4dabe Fix validation for metav1 fuzz targets.
   4b339e6e4e8 fix syntax error in test
   3ae8c864de2 Fix error in periodic resyncs description
   ff543ddfc09 Clarify that OnUpdate can mask delete and recreate
   e31c7cb1932 Declare constants in pods test as const
   fdbf5ef0b8b ignore image err when docker image has been cleaned up
   5616ce97622 [k8s.io/sample-controller/controller.go]: fixup minor typo
   8f099010a5f Centralizes images into agnhost (part 4)
   49207027c64 Fix golint errors
   6aaae7d6466 Add support for builtin modules in kube-proxy
   46fd8fce45c kubectl: remove unreachable code
   61c80012448 Fix etcd-version-monitor readme and yaml file.
   c6f05979d34 Update Calico to v3.8.4
   845c223d130 Bind  kube-dns containers to linux nodes to avoid Windows scheduling
   ec3a38758c5 Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes
   5695b348db2 Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes
   5459dbf84b7 Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes
   56d1c3b96d0 update CRI to support hugepages
   97e2576750d hostport return error when claim SCTP type port
   9dadafa8979 healthz: instrument root healthz requests for metrics
   9c120c8e1a3 Clalify how to contribute to kubectl book
   3be31530d5a cri_stats_provider: do not consider exited containers when calculating cpu usage
   0b481e8412e Shorten health check timeout for AWS NLB with externalTrafficPolicy: Local
   91b9d421094 Fix typo
   6b0748d3b5c Added e2e test to verify zone support across datacenters in the same vCenter
   4b775046d4f remove stateCheckPeriod
   3bb3db1d36e Bumped the number of times a node tries to lookup itself
   e7cc2c2d280 Report api request throttling at v=3
   6d64d0610ca fix path to prow size plugin

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-05-11 09:28:00 -04:00
Ricardo Salveti
c0a3b6526b python3-docker-compose: update to 1.25.5 
Main change is support for the compose format version 3.8.

Relevant git changes between versions:
- 41d229eb Fix v3.8 schema support for binaries
- 15bb3eeb add warning when max_replicas_per_node limits scale
- 5d34f12f set min engine version needed for v38 schema support
- 82873d2b update api version for 3.8
- fe832661 Add v3.8 schema support

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-05-05 23:05:26 -04:00
Sai Hari Chandana Kalluri
0bf60a7198 lxc: Update python3.5 reference to latest python version 
Python3.5 is no longer supported, update references to latest python version
using variables from python3-dir bbclass

Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-05-02 11:08:24 -04:00
Mingli Yu
5cb80bae0b lxc: Upgrade to 4.0.2 
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-04-26 21:47:48 -04:00
Yanfei Xu
a9eba58a51 lxc: correct the LIC_FILES_CHKSUM and LICENSE fields 
License changes from lxc3.2.1 to lxc4.0.1:
  1.File COPYING is renamed to LICENSE.LGPL2.1
  2.Add a new file LICENSE.GPL2

Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-04-14 17:07:15 -04:00
Bruce Ashfield
a24ce339fd lxc: refresh patches to remove fuzz 
The recent uprev of lxc left some fuzz in a patches. devtool refresh
cleans this up, and no runtime issues have been detected.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
 2020-04-14 15:57:19 -04:00