1. Convert subjectchecker to use rbac.Subject (commit: 69f3055) (details)
  2. node,syscontainer: initialize dnsmasq (commit: a61046b) (details)
  3. node,syscontainer: enable Type=notify (commit: 8ed8c53) (details)
Commit 69f3055dece7a5463f00028998cacb407d9ce21e by simo
Convert subjectchecker to use rbac.Subject
This also removes any distinction between System and regular
User/Groups, as that distinction is gone with RBAC RoleBindings.
Signed-off-by: Simo Sorce <>
(commit: 69f3055)
The file was modifiedtest/integration/restrictusers_test.go (diff)
The file was modifiedpkg/authorization/admission/restrictusers/restrictusers.go (diff)
The file was modifiedpkg/authorization/admission/restrictusers/subjectchecker_test.go (diff)
The file was modifiedpkg/authorization/admission/restrictusers/subjectchecker.go (diff)
Commit a61046b23b36e17a584d41678ddb8879afdacf2c by Giuseppe Scrivano
node,syscontainer: initialize dnsmasq
Signed-off-by: Giuseppe Scrivano <>
(commit: a61046b)
The file was modifiedimages/node/system-container/service.template (diff)
The file was modifiedimages/node/system-container/manifest.json (diff)
Commit 8ed8c53f7e3403973afd4d0d3fd74692be067e30 by Giuseppe Scrivano
node,syscontainer: enable Type=notify
sd notifications work well now in runc, so start using them.
Signed-off-by: Giuseppe Scrivano <>
(commit: 8ed8c53)
The file was modifiedimages/node/system-container/service.template (diff)