Commit graph

1983 commits

Author SHA1 Message Date
Mrunal Patel
2e0284f1f8
Merge pull request #1199 from runcom/list-sandboxes-refactor-1.8
[release-1.8] libkpod: sandbox: refactor to memory store
2017-12-01 14:50:27 -08:00
Antonio Murdaca
b8de39dbe7
lib: sandbox: refactor to memory store
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-12-01 18:14:46 +01:00
Mrunal Patel
8407f7f6d1
Merge pull request #1195 from runcom/bump-v1.8.3
Bump v1.8.3
2017-11-30 12:54:10 -10:00
Antonio Murdaca
8867460285
version: bump to v1.8.4-dev
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 22:15:04 +01:00
Antonio Murdaca
d9922a9db4
version: bump to v1.8.3
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 22:14:46 +01:00
Mrunal Patel
1878765711
Merge pull request #1191 from runcom/fix-apparmor-1.8
[release-1.8] container_create: fix apparmor from container config
2017-11-30 08:56:07 -10:00
Mrunal Patel
6a9c6b182e
Merge pull request #1188 from runcom/fixups-env-1.8
[release-1.8] Fix env handling on exec
2017-11-30 08:55:07 -10:00
Antonio Murdaca
b2ea67f50b
container_create: fix apparmor from container config
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 16:12:44 +01:00
Antonio Murdaca
17ec00c5d1
test: add exec/execsync env conflict test
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 12:54:07 +01:00
Antonio Murdaca
bb327bc3a0
container_create: correctly set image and kube envs
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 12:01:57 +01:00
Antonio Murdaca
4cde515268
oci: do not append conmon env to container process
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 11:26:49 +01:00
Antonio Murdaca
99b3e82faf
container_exec: use process file with runc exec
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-30 11:26:42 +01:00
Mrunal Patel
171e312875
Merge pull request #1180 from runcom/fix-image-pull
[release-1.8] Fix image pull
2017-11-28 12:47:01 -10:00
Antonio Murdaca
2438f48256
version: bump to v1.8.3-dev
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-28 12:59:54 +01:00
Antonio Murdaca
3de7ab4c09
version: bump to v1.8.2
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-28 12:59:53 +01:00
Antonio Murdaca
fe8c42344c
image_pull: fix image resolver
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-28 12:59:48 +01:00
Mrunal Patel
b9ddd25592
Merge pull request #1169 from mrunalp/pid_ns
share pid namespace for Pod container
2017-11-22 05:34:51 -10:00
Daniel J Walsh
d6ebe5d48c
Merge pull request #1174 from runcom/fix-cve-1.8
[release-1.8] Add /proc/scsi to masked paths
2017-11-22 09:59:58 -05:00
Antonio Murdaca
fc18f2ba35
version: bump v1.8.2-dev
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-22 12:31:08 +01:00
Antonio Murdaca
32d1708dcb
version: bump v1.8.1
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-22 12:30:50 +01:00
Antonio Murdaca
28b0e8d685
Add /proc/scsi to masked paths
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-22 12:26:47 +01:00
Wei Wei
3ad5a156bb share pid namespace for Pod container
Signed-off-by: Wei Wei <weiwei.inf@gmail.com>

Make pid namespace sharing optional and disabled by default

We reverse the logic so that pid ns sharing is disabled by default.

Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2017-11-20 16:38:43 -08:00
Mrunal Patel
e82298e677
Merge pull request #1155 from mrunalp/add_kube_var_1.8
test: Add a version var for kube branches
2017-11-14 18:55:07 -10:00
Mrunal Patel
01425b1e80 test: Add a version var for kube branches
This allows us to cache a k8s branch for cri-o 1.0 branch
while allowing overriding of k8s branch in master and other
newer cri-o branches.

Signed-off-by: Mrunal Patel <mrunalp@gmail.com>
2017-11-14 14:29:12 -08:00
Antonio Murdaca
80f54bc14d
version: bump v1.8.0
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-12 01:54:20 +01:00
Antonio Murdaca
99e8676967
container_list: guard against list filter being nil
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-12 01:54:20 +01:00
Antonio Murdaca
e99a78edff
*: add crictl.yaml
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-12 01:54:19 +01:00
Antonio Murdaca
33f699bad4
server: validate labels size to avoid dos
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-12 01:54:19 +01:00
Antonio Murdaca
befd719812
Revert "Merge pull request #654 from nalind/storage-update"
This reverts commit 4c06116c18, reversing
changes made to c5e73ba65f.

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-12 01:54:19 +01:00
Antonio Murdaca
98f7591d5f
Merge pull request #1132 from sak0/dev
allow update running/created container.
2017-11-12 01:51:04 +01:00
CuiHaozhi
a7f919f071 allow update running/created container.
Signed-off-by: CuiHaozhi <cuihaozhi@chinacloud.com.cn>
2017-11-11 11:04:07 -05:00
Mrunal Patel
56eb473aaa
Merge pull request #1139 from runcom/close-img
pkg: storage: image: close image after using it
2017-11-10 05:15:52 -10:00
Daniel J Walsh
e9200aacba
Merge pull request #1110 from edsantiago/more_testing_fixes
Various test-scaffolding fixes
2017-11-10 08:22:06 -05:00
Antonio Murdaca
4f4e228274
pkg: storage: image: close image after using it
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-10 14:21:22 +01:00
Daniel J Walsh
4fb52c2b12
Merge pull request #1133 from runcom/prom-runtime-metrics
server: add prometheus metrics for CRI operations
2017-11-10 07:30:59 -05:00
Daniel J Walsh
71d2131c8c
Merge pull request #1138 from runcom/fix-image-policy
image_pull: repull when image ID (config digest) changed
2017-11-10 05:28:07 -05:00
Antonio Murdaca
8611c2dfef
image_pull: repull when image ID (config digest) changed
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-09 19:46:55 +01:00
Antonio Murdaca
190650ecca
Merge pull request #1131 from nalind/update-tar-split
Bump github.com/vbatts/tar-split
2017-11-09 18:43:36 +01:00
Antonio Murdaca
b959f8996d
server: add prometheus metrics for CRI operations
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-09 16:51:00 +01:00
Nalin Dahyabhai
7d9a89e3a7 Bump github.com/vbatts/tar-split
Update vendor/github.com/vbatts/tar-split to v0.10.2, to fix
CVE-2017-14992, per https://github.com/vbatts/tar-split/pull/42.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2017-11-09 09:16:34 -05:00
Antonio Murdaca
9d3c442b7b
Merge pull request #1130 from cevich/fix_clone_k8s_two
Fix Local modifications exist in repository
2017-11-09 14:50:18 +01:00
Chris Evich
d49fb788da Fix Local modifications exist in repository
Depending on the state of upstream repositories, it's possible the
kubernetes repo could change between the ``setup`` and ``run`` phase.
Alternatively, something during ``setup`` itself could mangle the repo.

Add an option to force clone the kubernetes repo.  This gives support
for testing on multiple CRI-O branches, realizing some benefit from
caching, yet also allows hauling in brand-new-kubernetes for the e2e
tests.

Signed-off-by: Chris Evich <cevich@redhat.com>
2017-11-08 12:34:45 -05:00
Antonio Murdaca
f4883dd27a
Makefile: do not install man1 files
kpod removal actually removed all man1 docs but the Makefile was still
referencing man1 stuff. CRI-O doesn't have man1 so let's drop that
altogether now.

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2017-11-08 16:11:55 +01:00
Daniel J Walsh
c9b3d3df28
Merge pull request #1111 from mheon/remove_kpod
Remove kpod code after repository move
2017-11-07 14:44:40 -05:00
Ed Santiago
b7697672f0 Various test-scaffolding fixes
* Skip some tests if the bridge-custom plugin is
  unavailable. This CNI plugin is not distributed in
  any RPM, it is only available by compiling from a
  side branch in runcom's private github. We can't
  use it in a real integration-test setting.

* Don't use `run()` inside cleanup handlers. It will
  override $status, which is a double whammy:
   - successful cleanup will mask a test failure
   - when a test is `skip()`ed, crictl may fail,
     and $status will indicate failure.

* seccomp test: use existing $SECCOMP_PROFILE instead of
  assuming a path under $CRIO_ROOT

Signed-off-by: Ed Santiago <santiago@redhat.com>
2017-11-06 07:14:33 -07:00
Daniel J Walsh
6b6d634cfc
Merge pull request #1115 from mountkin/fix-makefile
fix "docker run" command in Makefile
2017-11-06 05:08:25 -05:00
Mrunal Patel
3f9e539bde
Merge pull request #1117 from runcom/setup-cwd
container_create: setup cwd for containers
2017-11-04 05:21:26 -07:00
Shijiang Wei
d5ffe34758 fix "docker run" command in Makefile
Signed-off-by: Shijiang Wei <mountkin@gmail.com>
2017-11-04 16:51:47 +08:00
Matthew Heon
c37d369259 Add readme pointer to new kpod repository
Signed-off-by: Matthew Heon <mheon@redhat.com>
2017-11-03 14:37:42 -04:00
Matthew Heon
1bf6d20309 Remove kpod code after repository move
Signed-off-by: Matthew Heon <mheon@redhat.com>
2017-11-03 14:37:42 -04:00