Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

keps/127: Support User Namespaces #3

Closed
wants to merge 92 commits into from
Closed

keps/127: Support User Namespaces #3

Show file tree
Hide file tree
Changes from 84 commits
Commits
Show all changes
92 commits
Select commit Hold shift + click to select a range
da807d0
keps/127: Support User Namespaces
mauriciovasquezbernal Jul 17, 2020
dec612d
IDs mapping -> ID mappings
mauriciovasquezbernal Sep 28, 2020
7e07f85
grammar
mauriciovasquezbernal Sep 28, 2020
ffcf42a
Speficically -> Specifically
mauriciovasquezbernal Sep 28, 2020
35cb5ea
some wording changes
mauriciovasquezbernal Sep 28, 2020
a629107
add high uid images risk
mauriciovasquezbernal Sep 28, 2020
5fca055
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
471392e
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
58c29b8
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
6f6e745
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
2c77cd4
add non-goals
mauriciovasquezbernal Sep 28, 2020
afa14a1
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
95b7962
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
c2b1dc7
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
81285d2
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
bec362e
add some notes about special capabilities in user namespaces
mauriciovasquezbernal Sep 28, 2020
33e1bf4
add details about sharing host namespaces
mauriciovasquezbernal Sep 28, 2020
5fb56c9
add note about image duplication
mauriciovasquezbernal Sep 28, 2020
6a12094
add note about image duplication
mauriciovasquezbernal Sep 28, 2020
16ed4ff
Merge branch 'mauricio/userns_proposal_new' of github.com:kinvolk/kub…
mauriciovasquezbernal Sep 28, 2020
19d2934
future phases: add some of the open points for those phases.
mauriciovasquezbernal Sep 28, 2020
11f90bc
spelling
mauriciovasquezbernal Sep 28, 2020
a574784
update toc
mauriciovasquezbernal Sep 28, 2020
55b8716
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
acd89eb
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
53c42ea
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
0f57423
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
36d9084
add template comments back
mauriciovasquezbernal Sep 28, 2020
e08023c
clarify behaviour on volumes and different user namespaces modes
mauriciovasquezbernal Sep 28, 2020
5ea31b1
grammager: could -> can in some places
mauriciovasquezbernal Sep 28, 2020
cf4fe58
remove duplicated sentence
mauriciovasquezbernal Sep 28, 2020
ca679dd
add clarification about shared host namespace
mauriciovasquezbernal Sep 28, 2020
143f822
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
515460d
plural vs singular
mauriciovasquezbernal Sep 28, 2020
6ebee71
Merge branch 'mauricio/userns_proposal_new' of github.com:kinvolk/kub…
mauriciovasquezbernal Sep 28, 2020
517b817
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
742abd2
Improve summary
mauriciovasquezbernal Sep 28, 2020
fcfd9b2
Merge branch 'mauricio/userns_proposal_new' of github.com:kinvolk/kub…
mauriciovasquezbernal Sep 28, 2020
b0fa846
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Sep 28, 2020
d1d2753
small reword
mauriciovasquezbernal Sep 28, 2020
a638e15
making -> make
mauriciovasquezbernal Sep 28, 2020
7910c4e
Kubelet -> kubelet
mauriciovasquezbernal Sep 28, 2020
bab57f5
typos and small rewording
mauriciovasquezbernal Sep 28, 2020
c7cff4f
add id mapping sentence to pod mode
mauriciovasquezbernal Sep 29, 2020
c9ab05e
out of the container to the host
mauriciovasquezbernal Sep 29, 2020
7009067
highly privileged
mauriciovasquezbernal Sep 29, 2020
561838a
runtime and kernel
mauriciovasquezbernal Sep 29, 2020
1825e64
clarify non-goal
mauriciovasquezbernal Sep 29, 2020
fc3eb24
give -> grant me
mauriciovasquezbernal Sep 29, 2020
eebe241
These -> Such
mauriciovasquezbernal Sep 29, 2020
994fbda
improve SLI / SLO question
mauriciovasquezbernal Sep 29, 2020
ed58add
reword goal
mauriciovasquezbernal Oct 2, 2020
5eea25e
small changes
mauriciovasquezbernal Oct 2, 2020
b6f5d77
swap CRI and PodSpec changes
mauriciovasquezbernal Oct 2, 2020
acae921
add section about updating owners of ephemeral volumes
mauriciovasquezbernal Oct 2, 2020
e0c120e
add section about cluster ID mappings
mauriciovasquezbernal Oct 2, 2020
dfcead5
update toc
mauriciovasquezbernal Oct 2, 2020
b02cfc7
Add possibilities about userNamespaceMode
mauriciovasquezbernal Oct 2, 2020
ca7daad
Add options about configuring cluster ID mapping
mauriciovasquezbernal Oct 2, 2020
6093bac
extend clarify comments about image garbage collection
mauriciovasquezbernal Oct 2, 2020
a09ae97
root user namespace -> initial user namespace
mauriciovasquezbernal Oct 5, 2020
88c52e6
small changes
mauriciovasquezbernal Oct 5, 2020
fad6107
remove some TBD / TODO
mauriciovasquezbernal Oct 5, 2020
b820dd5
remove drawbacks ideas
mauriciovasquezbernal Oct 5, 2020
00a8248
typo
mauriciovasquezbernal Oct 5, 2020
ef29092
grammar improvements
mauriciovasquezbernal Oct 5, 2020
c674127
be more specific about Host mode in summary
mauriciovasquezbernal Oct 5, 2020
2efb472
Make it clear dockershim changes are out of scope
mauriciovasquezbernal Oct 5, 2020
bd9d2ef
improve container duplicated images section
mauriciovasquezbernal Oct 5, 2020
1fdf43b
section about 1-to-1 mapping for fsgroup
mauriciovasquezbernal Oct 6, 2020
2362b07
rename CRI fields
mauriciovasquezbernal Oct 6, 2020
ff1cb32
quick update for kubelet config
mauriciovasquezbernal Oct 6, 2020
78bfe60
reword text about volumes and different modes
mauriciovasquezbernal Oct 6, 2020
3db7c6f
TODO -> still to investigate
mauriciovasquezbernal Oct 6, 2020
be928ef
add WIP graduation criteria
mauriciovasquezbernal Oct 6, 2020
ee47730
update toc
mauriciovasquezbernal Oct 6, 2020
21c20be
add unresolved tags
mauriciovasquezbernal Oct 6, 2020
2cc1ee3
clarify cluster mode uses different user namespaces
mauriciovasquezbernal Oct 8, 2020
2a4a648
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Oct 8, 2020
b34fe36
Update keps/sig-node/127-usernamespaces-support/README.md
mauriciovasquezbernal Oct 8, 2020
8a42548
change verb
mauriciovasquezbernal Oct 8, 2020
2392a05
clarify version skew
mauriciovasquezbernal Oct 8, 2020
fd1a6da
make it clear pods have to be recreated
mauriciovasquezbernal Oct 8, 2020
c368bb9
rewrap text
mauriciovasquezbernal Oct 8, 2020
9574897
extend metacopy=on with specific crio info
mauriciovasquezbernal Oct 8, 2020
d32d365
to -> for
mauriciovasquezbernal Oct 16, 2020
94471d5
reword around shitfts
mauriciovasquezbernal Oct 16, 2020
066ab17
straigtforward -> straightforward
mauriciovasquezbernal Oct 16, 2020
7dfec33
fix some small problems around
mauriciovasquezbernal Oct 16, 2020
d282c79
remove shiftfs non-goal
mauriciovasquezbernal Oct 16, 2020
2cf4d8b
remove block comments
mauriciovasquezbernal Oct 16, 2020
83c5674
update creation dates
mauriciovasquezbernal Oct 16, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading