Highlights
- Arctic Code Vault Contributor
- Developer Program Member
Create your own GitHub profile
Sign up for your own profile on GitHub, the best place to host code, manage projects, and build software alongside 50 million developers.
Sign up
Pinned
6,543 contributions in the last year
Activity overview
Contributed to
cri-o/cri-o,
saschagrunert/webapp.rs,
saschagrunert/kubernix
and 5 other
repositories
Contribution activity
August 2020
Created a pull request in cri-o/cri-o that received 41 comments
Update containers/* dependencies and vendor libpod/v2
What type of PR is this? /kind dependency-change What this PR does / why we need it: This updates libpod to v2 and updates all related containers/ …
+8,160
−16,514
•
41
comments
- Remove leading `v` from image version
- Bump release version to v0.2.0-dev
- Bump release version to v0.1.0
- Update docs to reflect v1 feature set
- Use static VERSION file for version inject
- Switch to golang 1.15
- Validate that invalid profiles will be reconciled when patched
- Refactor event creating into own method
- Update k/release to 0.4.0 and make e2e test commands verbose
- Add new security context to example pod
- Verify that invalid profile gets not reconciled on disk
- Split-up e2e test into test cases
- Stop reconciling on invalid profile
- Remove internal seccomp types in favor of containers-golang package
- Verify if nodes do support seccomp and do not reconcile in that case
- Bump go modules and switch to klog/v2
- Change from git inferred version to const version value
- Revert init command and stick to simple bash image
- Add additional arches to seccomp profile type
- Bump repo-infra and golangci-lint to latest version
- Initialize the operator with a dedicated subcommand
- Fix events RBAC and add e2e test
- Change imports paths to sigs.k8s.io
- Fix local test-unit execution
- Add basic seccomp profile validation
- Some pull requests not shown.
- Remove duplicate check for enabled seccomp
- Reuse Kubernetes API consts for seccomp profiles
- Bump test images to go1.15
- Refactor AppArmor logic into new container interface
- Vendor Kubernetes v1.19.0-rc.4 and fix klog tmp dir issue
- Bump golangci-lint to v1.30.0
- Add layer reuse metrics
- Add upgrade path integration tests
- Fix lint pipeline by gofumpt'ing cgmgr_test.go
- Rename release-notes --github-org/repo flags
- Always require --buildversion for anago
- Remove unused mailto flag from anago
- Use logrus instead of stdOutWriter for verbose commands
- Use existing GitHub API for release.SetBuildVersion()
- Add `krel find-green-build` subcommand
- Fix wrong Sign-off-by line for git commits
- Update pull request template to match latest prow capabilities
- Fix container cgroup under cgroupfs
- Speed up mountinfo-related operations during container creation
- container refactor
- selinux: override only specified values
- [release-1.18] Ensure CloseIO is called after Start for exec
- Add /sys/dev as a masked path
- oci_linux: fix working set calculation
- added irq smp balance and cpu cfs quota control
- Shellcheck misc
- Update Kubeadm with off line configurations
- Update nix pin with `make nixpkgs`
- test/*bats: fix shellcheck SC2076
- Vendor Kubernetes v1.19.0-rc.4 and fix klog tmp dir issue
- config: create hooks dir if not present
- test: add GINKGO_FOCUS variable
- keep conmons created by execsyncs as direct children
- Allows container ulimits to be set by profile
- fix segfault with errors.Cause()
- docs: update installation instructions
- Parameterize strip binary in pinns/Makefile for cross-compilation
- Bump clap from 2.33.2 to 2.33.3
- Bump async-trait from 0.1.36 to 0.1.37
- Update Makefile (Docker, MacOS)
- Bump smallvec from 1.4.1 to 1.4.2
- Bump serde from 1.0.114 to 1.0.115
- Bump tracing-core from 0.1.13 to 0.1.14
- Bump tracing from 0.1.18 to 0.1.19
- Bump either from 1.5.3 to 1.6.0
- Bump indexmap from 1.5.0 to 1.5.1
- Bump enum-as-inner from 0.3.2 to 0.3.3
- Bump hashbrown from 0.8.1 to 0.8.2
- Bump actix-service from 1.0.5 to 1.0.6
- Bump clap from 2.33.1 to 2.33.2
- Bump signal-hook-registry from 1.2.0 to 1.2.1
- Bump syn from 1.0.37 to 1.0.38
- Bump tracing-core from 0.1.12 to 0.1.13
- Bump syn from 1.0.36 to 1.0.37
- Bump tracing-core from 0.1.11 to 0.1.12
- Bump tracing from 0.1.17 to 0.1.18
- Add Tutorials and Demos section to usage guide
- Show Slack link on CONTRIBUTING.md
- Update eventing and reconcile logic
- Add operator seccomp profile
- Define nodeselector for linux os
- Add support for deployment into master nodes
- Re-enable restricting controller watch to single namespace
- Verify if nodes do support seccomp and do not reconcile in that case
- Add e2e test to ensure operator can be cleaned up and redeployed
- Fix permission issues when kubelet folder is set to 0700
- Watch all namespaces by default
- Fix comment in e2e test
- Add resource limits
- build(deps): bump gatsby-transformer-remark from 2.8.27 to 2.8.28 in /docs
- build(deps): bump gatsby-plugin-offline from 3.2.21 to 3.2.22 in /docs
- build(deps): bump github.com/valyala/quicktemplate from 1.6.0 to 1.6.2
- build(deps): bump gatsby-plugin-sharp from 2.6.24 to 2.6.25 in /docs
- build(deps): bump gatsby from 2.24.23 to 2.24.37 in /docs
- build(deps): bump gatsby-plugin-netlify from 2.3.11 to 2.3.12 in /docs
- build(deps): bump gatsby-remark-embedder from 1.16.0 to 3.0.0 in /docs
- build(deps): bump react-helmet from 5.2.1 to 6.1.0 in /docs
- build(deps): bump github.com/valyala/quicktemplate from 1.5.1 to 1.6.0
- build(deps): bump github.com/ssgreg/nlreturn/v2 from 2.0.1 to 2.0.2
- build(deps): bump honnef.co/go/tools from 0.0.1-2020.1.4 to 0.0.1-2020.1.5
- build(deps): bump github.com/spf13/viper from 1.7.0 to 1.7.1
- Bump clap from `ca6c84f` to `5cf782a`
- Bump clap from `9185366` to `ca6c84f`
- Bump clap from `da92a32` to `9185366`
- Bump clap from `6492ae2` to `da92a32`
- Bump either from 1.5.3 to 1.6.0
- Bump clap from `a4bc1f2` to `6492ae2`
- Bump hashbrown from 0.8.1 to 0.8.2
- Bump signal-hook-registry from 1.2.0 to 1.2.1
- Bump syn from 1.0.36 to 1.0.37
- Add release.ReadReleaseImageTags() function
- [krel] Release Notes Editing Flow
- k8s-cloud-builder: Build on kube-cross:v1.14.7-1 and v1.13.15-1
- Use existing GitHub API for release.SetBuildVersion()
- Correct typo in krel installation documentation
- lib/release: Ensure production images have been promoted in validation step
- New function util.WrapText() and updates to util.Ask()
- New functions git.GetUserName and git.GetUserEmail
- anago: Push images during staging and validate manifests during release
- branch-mgmt/book: add documentation about how to search past cloudbuilds in the google console
- release-1.19: add 1.19.0-rc4 to the release-1.19 schedule
- Remove inactive members from OWNERS files
- Added schedule of recurring work
- Update release notes draft to version v1.19.0-rc.4
- Clarify that release notes team members should join k-sigs
Created an issue in kubernetes/kubernetes that received 12 comments
Kubeadm creates /var/lib/kubelet with 0700 permissions
What happened:
The kubeadm /var/lib/kubelet dir does not allow non-root read-access per default:
kubernetes/cmd/kubeadm/app/phases/kubelet/confi…
12
comments