kubernetes/pkg
Euan Kemp 62148a768b CRI: add privileged to sandbox, document better
Adding the `privileged` bool to the sandbox allows runtimes, like rkt,
to make better security choices in some cases.

This also enumerates what "privileged" actually means and how it
interacts with other options (or more accurately, does not).

The documentation closely matches docker's current behavior because, so
far, that's what privileged has meant.
2016-12-08 13:11:16 -08:00
..
admission generated: refactor 2016-11-23 22:30:47 -06:00
api Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
apimachinery generated: refactor 2016-11-23 22:30:47 -06:00
apis Add generated artifacts for new flag 2016-12-07 10:09:57 -05:00
apiserver Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
auth Add verbs to APIResource for discovery 2016-12-05 12:36:04 +01:00
capabilities autogenerated 2016-10-21 17:32:32 -07:00
client regenerate informers 2016-12-07 07:54:04 -05:00
cloudprovider Merge pull request #36724 from YuPengZTE/devCtx 2016-12-07 11:40:21 -08:00
controller Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
conversion refactor: update bazel, codec, and gofmt 2016-12-03 19:10:53 -05:00
credentialprovider Merge pull request #36140 from guangxuli/k8s_extend_get_docker_auth 2016-12-07 12:55:47 -08:00
dns refactor: update bazel, codec, and gofmt 2016-12-03 19:10:53 -05:00
fieldpath run hack/update-all.sh 2016-11-23 15:53:09 -08:00
fields autogenerated 2016-10-21 17:32:32 -07:00
generated Add generated artifacts for new flag 2016-12-07 10:09:57 -05:00
genericapiserver add authentication/authorization to kubernetes-discovery 2016-12-07 09:33:43 -05:00
healthz autogenerated 2016-10-21 17:32:32 -07:00
httplog kubelet: don't print httplogs for redirects 2016-11-03 14:19:34 -07:00
hyperkube autogenerated 2016-10-21 17:32:32 -07:00
kubectl remove validation dependency on version negotiation 2016-12-07 13:23:20 -05:00
kubelet CRI: add privileged to sandbox, document better 2016-12-08 13:11:16 -08:00
kubemark run hack/update-all.sh 2016-11-23 15:53:09 -08:00
labels autogenerated 2016-10-21 17:32:32 -07:00
master Merge pull request #34643 from mbohlool/h2o 2016-12-07 01:34:36 -08:00
metrics run hack/update-all.sh 2016-11-23 15:53:09 -08:00
probe autogenerated 2016-10-21 17:32:32 -07:00
proxy Merge pull request #27711 from xiangpengzhao/port-allocator-test 2016-12-07 12:14:36 -08:00
quota refactor: generated 2016-12-03 19:10:46 -05:00
registry Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
routes promote /metrics to genericapiserver 2016-11-01 14:42:01 -04:00
runtime refactor: update bazel, codec, and gofmt 2016-12-03 19:10:53 -05:00
security run hack/update-all.sh 2016-11-23 15:53:09 -08:00
securitycontext run hack/update-all.sh 2016-11-23 15:53:09 -08:00
selection autogenerated 2016-10-21 17:32:32 -07:00
serviceaccount run hack/update-all.sh 2016-11-23 15:53:09 -08:00
ssh Merge pull request #36549 from cjcullen/closetunnel 2016-11-15 10:42:53 -08:00
storage Merge pull request #36711 from hongchaodeng/e4 2016-12-07 03:09:34 -08:00
types autogenerated 2016-10-21 17:32:32 -07:00
util Re-use juju ratelimit 2016-12-07 10:32:47 -05:00
version rename build/ to build-tools/ 2016-10-24 14:41:56 -07:00
volume Merge pull request #37009 from sjenning/fix-perms-with-fsgroup 2016-12-07 10:45:16 -08:00
watch generated: refactor 2016-11-23 22:30:47 -06:00
OWNERS Remove bgrant from pkg/OWNERS and pkg/kubectl/OWNERS since he has plenty to do. 2016-06-16 08:21:27 -07:00