Sync upstream release 1.11 #98
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Co-authored-by: Philippe Scorsolini <[email protected]> Co-authored-by: AdamKorcz <[email protected]> Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit b89eafb)
[Backport release-1.11] chore(Dockerfile): use COPY instead of ADD
…-bookworm-slim Update debian:bookworm-slim Docker digest to d8f9d38 (release-1.11)
Co-authored-by: Philippe Scorsolini <[email protected]> Co-authored-by: AdamKorcz <[email protected]> Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 1d75376)
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 4332535)
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 0be5276)
Co-authored-by: AdamKorcz <[email protected]> Co-authored-by: Philippe Scorsolini <[email protected]> Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 4b1f4c4)
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 7fd8620)
[Backport release-1.11] fix: limit xfn stdout and stderr
[Backport release-1.11] fix(xfn): set max layers number limit for images
https://kubernetes.io/docs/tutorials/security/apparmor/#securing-a-pod The xfn container needs the unshare syscall in order to run rootless containers (i.e. create user namespaces). Most default apparmor and seccomp profiles don't allow this. We already run the container unconfined by seccomp, but must also run it unconfined by apparmor. Signed-off-by: Nic Cope <[email protected]> (cherry picked from commit 966436b)
[Backport release-1.11] fix(crank): copy to tar file one chunk at a time
[Backport release-1.11] Run xfn with unconfined AppArmor profile
…-bookworm-slim Update debian:bookworm-slim Docker digest to 9bd077d (release-1.11)
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit abcc64e)
[Backport release-1.11] fix: limit max number of layers for Packages
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 65fc720)
[Backport release-1.11] fix: stop rbac manager's rule expansion on timeout
…389b Signed-off-by: Philippe Scorsolini <[email protected]>
…e-1.11-master [Backport release-1.11] chore: bump go-containerregistry to v0.15.3-0.20230625233257-b8504803…
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit e44f73f)
[Backport release-1.11] fix: max size of package parsed limited to 200MB
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 4feb58e)
Signed-off-by: Philippe Scorsolini <[email protected]> (cherry picked from commit 2c3db49)
Signed-off-by: AdamKorcz <[email protected]> (cherry picked from commit 0cd9fd3)
[Backport release-1.11] composite: fix nil-dereference
Signed-off-by: ezgidemirel <[email protected]>
Signed-off-by: ezgidemirel <[email protected]>
Release v1.11.5
turkenh
approved these changes
Aug 8, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of your changes
I have:
make reviewableto ensure this PR is ready for review.Addedbackport release-x.ylabels to auto-backport this PR if necessary.