kubernetes/pkg
Kubernetes Submit Queue 0f2c6fc7fc Merge pull request #37009 from sjenning/fix-perms-with-fsgroup
Automatic merge from submit-queue (batch tested with PRs 38294, 37009, 36778, 38130, 37835)

fix permissions when using fsGroup

Currently, when an fsGroup is specified, the permissions of the defaultMode are not respected and all files created by the atomic writer have mode 777.  This is because in `SetVolumeOwnership()` the `filepath.Walk` includes the symlinks created by the atomic writer.  The symlinks have mode 777 when read from `info.Mode()`.  However, when the are chmod'ed later, the chmod applies to the file the symlink points to, not the symlink itself, resulting in the wrong mode for the underlying file.

This PR skips chmod/chown for symlinks in the walk since those operations are carried out on the underlying file which will be included elsewhere in the walk.

xref https://bugzilla.redhat.com/show_bug.cgi?id=1384458

@derekwaynecarr @pmorie
2016-12-07 10:45:16 -08:00
..
admission generated: refactor 2016-11-23 22:30:47 -06:00
api Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
apimachinery generated: refactor 2016-11-23 22:30:47 -06:00
apis Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
apiserver Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
auth Add verbs to APIResource for discovery 2016-12-05 12:36:04 +01:00
capabilities autogenerated 2016-10-21 17:32:32 -07:00
client regenerate informers 2016-12-07 07:54:04 -05:00
cloudprovider fix mesos unit tests 2016-12-06 11:14:59 -05:00
controller Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
conversion refactor: update bazel, codec, and gofmt 2016-12-03 19:10:53 -05:00
credentialprovider run hack/update-all.sh 2016-11-23 15:53:09 -08:00
dns refactor: update bazel, codec, and gofmt 2016-12-03 19:10:53 -05:00
fieldpath run hack/update-all.sh 2016-11-23 15:53:09 -08:00
fields autogenerated 2016-10-21 17:32:32 -07:00
generated autogenerated 2016-12-06 10:32:54 -08:00
genericapiserver Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
healthz autogenerated 2016-10-21 17:32:32 -07:00
httplog kubelet: don't print httplogs for redirects 2016-11-03 14:19:34 -07:00
hyperkube autogenerated 2016-10-21 17:32:32 -07:00
kubectl Merge pull request #38092 from xilabao/fix-alias-conflict 2016-12-07 07:27:17 -08:00
kubelet Merge pull request #31647 from mikedanese/register-tainted 2016-12-06 19:07:54 -08:00
kubemark run hack/update-all.sh 2016-11-23 15:53:09 -08:00
labels autogenerated 2016-10-21 17:32:32 -07:00
master Merge pull request #34643 from mbohlool/h2o 2016-12-07 01:34:36 -08:00
metrics run hack/update-all.sh 2016-11-23 15:53:09 -08:00
probe autogenerated 2016-10-21 17:32:32 -07:00
proxy Remove girishkalele from most places 2016-12-05 19:29:34 -05:00
quota refactor: generated 2016-12-03 19:10:46 -05:00
registry Merge pull request #37693 from wojtek-t/pipe_get_options_to_storage 2016-12-07 00:52:26 -08:00
routes promote /metrics to genericapiserver 2016-11-01 14:42:01 -04:00
runtime refactor: update bazel, codec, and gofmt 2016-12-03 19:10:53 -05:00
security run hack/update-all.sh 2016-11-23 15:53:09 -08:00
securitycontext run hack/update-all.sh 2016-11-23 15:53:09 -08:00
selection autogenerated 2016-10-21 17:32:32 -07:00
serviceaccount run hack/update-all.sh 2016-11-23 15:53:09 -08:00
ssh Merge pull request #36549 from cjcullen/closetunnel 2016-11-15 10:42:53 -08:00
storage Merge pull request #36711 from hongchaodeng/e4 2016-12-07 03:09:34 -08:00
types autogenerated 2016-10-21 17:32:32 -07:00
util Re-use juju ratelimit 2016-12-07 10:32:47 -05:00
version rename build/ to build-tools/ 2016-10-24 14:41:56 -07:00
volume Merge pull request #37009 from sjenning/fix-perms-with-fsgroup 2016-12-07 10:45:16 -08:00
watch generated: refactor 2016-11-23 22:30:47 -06:00
OWNERS