Jan Safranek 5110db5087 Lock subPath volumes ... Users must not be allowed to step outside the volume with subPath. Therefore the final subPath directory must be "locked" somehow and checked if it's inside volume. On Windows, we lock the directories. On Linux, we bind-mount the final subPath into /var/lib/kubelet/pods/<uid>/volume-subpaths/<container name>/<subPathName>, it can't be changed to symlink user once it's bind-mounted.		2018-03-05 09:14:44 +01:00
..
fs	update bazel	2018-02-27 20:23:36 +08:00
nestedpendingoperations	Autogenerated: hack/update-bazel.sh	2018-02-16 13:43:01 -08:00
operationexecutor	Lock subPath volumes	2018-03-05 09:14:44 +01:00
recyclerclient	update bazel	2018-02-27 20:23:36 +08:00
types	refactored mount, attach, resize operation's so that all failures generate events and event generation is more consistent.	2017-12-14 11:09:12 -08:00
volumepathhandler	update bazel	2018-02-27 20:23:36 +08:00
atomic_writer.go	Merge pull request #50724 from allencloud/fix-incorrect-comparison-log	2018-02-26 20:34:37 -08:00
atomic_writer_test.go	Rework method of updating atomic-updated data volumes	2018-01-17 12:09:20 -07:00
BUILD	Fix nested volume mounts for read-only API data volumes	2018-02-27 07:41:39 -07:00
device_util.go	Update detach logic for block volume if devicePath is empty	2017-12-15 11:56:14 -05:00
device_util_linux.go	Update detach logic for block volume if devicePath is empty	2017-12-15 11:56:14 -05:00
device_util_linux_test.go	Update detach logic for block volume if devicePath is empty	2017-12-15 11:56:14 -05:00
device_util_unsupported.go	Update detach logic for block volume if devicePath is empty	2017-12-15 11:56:14 -05:00
doc.go	Use Go canonical import paths	2016-07-16 13:48:21 -04:00
error.go	Fix dangling attach errors	2017-11-16 08:43:36 -05:00
finalizer.go	reuse PVC protection admission plugin for PV protection	2018-01-31 20:02:01 +08:00
io_util.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
metrics.go	refactored mount, attach, resize operation's so that all failures generate events and event generation is more consistent.	2017-12-14 11:09:12 -08:00
nested_volumes.go	Fix nested volume mounts for read-only API data volumes	2018-02-27 07:41:39 -07:00
nested_volumes_test.go	Fix nested volume mounts for read-only API data volumes	2018-02-27 07:41:39 -07:00
OWNERS	Update volume OWNERS to reflect active sig-storage reviewers	2017-10-26 13:26:33 -07:00
resize_util.go	Improve messaging on resize	2018-01-29 15:07:51 -05:00
resize_util_test.go	Improve messaging on resize	2018-01-29 15:07:51 -05:00
util.go	update bazel	2018-02-27 20:23:36 +08:00
util_test.go	Make a few code paths compile cleanly with 32-bit Go.	2018-02-27 13:53:32 -08:00