kubernetes1.20-kubelet-common-1.20.13-lp154.1.7 >  A biĸ/=„T *{NTkV(t~sCgGڬIrhm\uuza=֜x616/mt< ,_DawX'hx6{2C<Qhm8҅?R(l>VY^]Ǽ&Eן>&\u{!/n/v7_1cwp]SK)jp{~c;-Oz̺4VH o3412a6c9a6da68c6cbf3d64c6a4f20cca3de9ed08ecea94485a7e6c0781b316aed11c5b62c9a36d79d03fab9c908d0a4a07bb2c94biĸ/=„@O{&ٷbr40FQiR 2jE L+ûZʿىX-Yxx)1lD69[ObI{+ga%u 7Be^$;)&wt5]~SBIJ? 3,y~^xq\L3 Dt4!qAupU%z)tۤl]m貎jRf -{$x譔|Dm/.J=IZ5_>pI$?d ( 2 L  28?`  , P t   (p$P $  (8 9T :a =>?"@*F2GDHIXY\ ]h^bcxdefluvDw xhyzCkubernetes1.20-kubelet-common1.20.13lp154.1.7Kubernetes kubelet daemonManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubelet daemonbilamb08TopenSUSE Leap 15.4openSUSEApache-2.0https://bugs.opensuse.orgSystem/Managementhttps://kubernetes.io/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in kubelet.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=kubelet SUBPNAME=-kubernetes1.20 SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in kubelet.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/kubelet.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable kubelet.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop kubelet.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in kubelet.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart kubelet.service ) || : fi fi$Dfp :,^AAA큤A큤A큤A큤AAbibibi_кbibibibibiaaabibiabibibi99d46822bfd663c2fce039b3520e3498cbd5b984d507be6ff98dc258fed2eb5844478b1888bd17c731d97eec3365b26ad48109c9ccee8d7945c263fa2f2f7c45e9767f9b208f06da2b25422284782b5f26aeac4a37354d59a43890e559d2fc47273c3bbc7fa2878ec5e9fabc04c2683cea5e39bf876488855923b1141f62027cb65ae13792e1364a958ff4da3ee80038968ae98b12f855dfcfa22ed12d7e2c680179b1d7fb6d6d8c9149504fc04d8d423e04b5dab7216a7172429d55e4f56bea464f92d1801d481ed47074b91cd7221f8b7e11747ac554f697cce6b3af4729e9cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d306b40137adb17dcf085006345a754500f95140f10f59155a5c647cadb806ef975service@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.20-1.20.13-lp154.1.7.src.rpmkubernetes-kubelet-commonkubernetes1.20-kubelet-commonkubernetes1.20-kubelet-common(x86-64) @    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shcri-runtimekubernetes-kubelet1.20rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-kubelet-common4.14.3a@aC1a&0`t`@`x*`v@`u`@_T__м@_м@rbrown@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.comalexandre.vicenzi@suse.comrbrown@suse.comRichard Brown rbrown@suse.comdmueller@suse.comrbrown@suse.comRichard Brown rbrown@suse.comRichard Brown - Update to version 1.20.13: * defer close the rotated log open * Add tests for checking bind mounts * Check subpath file * Add check for subpaths * Manual cherry pick of kube-openapi changes for release-1.20 Bump kube-openapi against kube-openapi/release-1.20 branch * Update bazel * Fixed unit test SELinux support * Add shortcut for SELinux detection * Don't guess SELinux support on error * Use separate pathSpec for local and remote to properly handle cleaning paths * support more than 100 disk mounts on Windows * Support cgroupv2 in node problem detector test * Update debian, debian-iptables images to pick up CVEs fixes * Fixing how EndpointSlice Mirroring handles Service selector transitions * Fix race condition in logging when request times out * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.12 * Run storage hostpath e2e test client pod as privileged * Ignore VMs in vmss delete backend pools * fix: skip not found nodes when reconciling LB backend address pools * fix: consolidate logs for instance not found error * Revert 102925: Fix Node Resources plugins score when there are pods with no requests * e2e scheduling priorities: do not reference control loop variable * tests: Wait for the network connectivity first * 'New' Event namespace validate failed * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.11 * Refine locking in API Priority and Fairness config controller * kube-controller-manager: properly check generic ephemeral volume feature * Fix null JSON round tripping * Propagate conversion errors * integration test * fix 104329: check for headless before trying to release the ClusterIPs * Fix use variables in the loop in vsphere_util * Address review comments * Add docs about process of discovering disks from new nodes * Fix unknown dangling volumes * fix detach disk issue on deleting node * fix: ignore the case when comparing azure tags in service annotation * fix: ignore the case when updating tags * backported PR#97721 from v1.21 ("fix slice controller logging for services ipfamily") * remove listx from OWNERS, OWNERS_ALIASES * Add explicit capability for online volume expansion * Bump golang.org/x/text to v0.3.6- Update to version 1.20.11: * Fix a small regression in Service updates * Service: Fix semantics for Update wrt allocations * Fix buckets initialization * fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs * fix: skip case sensitivity when checking Azure NSG rules * Keep MakeMountArgSensitive and add a new signature that receives flags * Update the unit tests to handle mountFlags * Add missing interface method in mount_unsupported.go * Pass additional flags to subpath mount to avoid flakes in certain conditions * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.10 * Copy golang license to staging copies * delete stale UDP conntrack entries for loadbalancer IPs * job controller: don't mutate shared cache object * Set idle and readheader timeouts- Update to version 1.20.10: * Bump to golang 1.15.15 in build/** * Bump to golang 1.15.15 in cluster/** and staging/** * Bump to golang 1.15.15 in test/** * Avoid spurious calls to update/delete validation * Fix metrics reporting for the deprecated watch path * Update configure-helper.sh * Update configure-helper.sh * Update configure-helper.sh * Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools * feat: Provide IPv6 support for internal load balancer * Update to using apiserver-network-proxy v1.22 * Make CSR cleaner tolerate objects with invalid status.certificate * disable aufs module * update comments and owners file for pkg/util/removeall * kubelet: do not call RemoveAll on volumes directory for orphaned pods * APF e2e: wait for steady state before proceeding * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.9 * Updated to use konnectivity client v0.0.21, and implemented placeholder context * include google/go-cmp in client-go/dynamic/fake/BUILD * Simplify use of the fake dynamic client * fix: return empty VMAS name if using standalone VM * Fix race in attachdetach tests * Fix frameworkImpl.extenders being not set * Fix closing of decorated watcher channel on timeout * update bazel * (scheduler e2e) Create balanced pods in parallel- Update to version 1.20.9: * Bump to golang 1.15.14 in build/** * Bump to golang 1.15.14 in cluster/** and staging/** * Bump to golang 1.15.14 in test/** * Update debian-iptables image to buster-v1.6.5 * Update debian-base image to buster-v1.8.0 * Bump SMD to v4.1.2 to pick up #102749 fix * generate scheduler merge patches on the pod status instead of the full pod * p&f e2e test: log response header for better troubleshooting * Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default * Do not throw error when we can't get canonical path * Fix Node Resources plugins score when there are pods with no requests * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.8 * Remove error wrap from logs * staging/publishing: Set default go version to go1.15.13 * build: Update to k/repo-infra@v0.1.8 (supports go1.15.13) * Use go-runner:v2.3.1-go1.15.13-buster.0 image (built on go1.15.13) * Update to go1.15.13 * feat: remove ephemeral-storage etcd requirement * endpointslicemirroring controller mirror address status * sched: fix a bug that a preemptor pod exists as a phantom * Revert "Cleanup portforward streams after their usage" * Remove unnecessary snapshot ability check * serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match * Fix VolumeAttachment garbage collection for migrated PVs * Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error * Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin * Ignore transient errors when gather stats * Speed up PV provisioning for vsphere driver * fix error of setting negative value for containerLogMaxSize * Upgrade konnectivity-client for GRPC connection fixes * Update etcd image revision * Update debian-base to buster-v1.7.0 * Update debian-iptables to buster-v1.6.1 * Respect annotation size limit for SSA last-applied. * Remove unnecessary quotes from get-kube scripts * Fix expired unit test certs * fix: delete non existing disk issue * Azure: avoid setting cached Sku when updating VMSS and VMSS instances * Update cos-gpu-installer image * Ref counting is only applicable to Remote endpoints * Make watch order conformance test reliable * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.7 * fix removing pods from podTopologyHints mapping * fix: avoid nil-pointer panic when checking the frontend IP configuration * Use CSI driver to determine unique name for migrated in-tree plugins * Add jitter to lease controller * Avoid caching the VMSS instances whose network profile is nil * chunk target operatation for aws targetGroup * Fix watchForLockfileContention memory leak * Fix cleanupMountpoint issue for Windows * Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY- Update to version 1.20.7: * staging/publishing: Set default go version to go1.15.12 * build: Update to k/repo-infra@v0.1.7 (supports go1.15.12) * Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12) * Update to go1.15.12 * fix: not tagging static public IP * Add test create service with ns * Set namespace when using kubectl create service * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428) * Updating EndpointSlice controllers to avoid duplicate creations * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Updating EndpointSlice validation to match Endpoints validation * Make parallel build memory threshold configurable * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Additional CVE-2021-3121 fix * Fix startupProbe behaviour changed * Fix test * staging/publishing: Set default go version to go1.15.10 * build: Update to k/repo-infra@v0.1.6 (supports go1.15.11) * Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11) * Update to go1.15.11 * add duration encoder to structured logger * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6 * exec test should not run in Parallel as feature gate is not locked * hack/update-bazel.sh * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * list pod list once to avoid timeout * Cleanup portforward streams after their usage * fix smb mount issue on Windows- Update to version 1.20.6: * azure: fix node public IP not able to fetch issues from IMDS * Fix test now that empty struct are tracked in mangaed fields * make generated_files * Update bazel and dependencies. * Update to use cliflag.NamedFlagSets * Address comments. * Update NodeIPAM wrapper * Delete build file based on latest changes. * Update extension mechanism and related sample. * Address review comments * Address review comments * Modify integration test to fill CCM test gap * Update test * Move initialize cloud provider with client builder reference inside controller start func * Separate example func and add README.md * Separate func * Add demonstration of wiring nodeIPAMController config object * Remove cloud provider name as input parameter. * Fix flag passing in CCM. * Use apply to create objects in TestApplyStatus * Stop skipping APIService in apply test * Stop clearing OpenAPIConfig for kube-aggregator * Declare TCP default for service port protocol * Add ability to skip OpenAPI handler installation * do not tag user created public IPs * apf: fix test flake * update gogo/protobuf to v1.3.2 * Fixed describe ingress causing SEGFAULT * Update sigs.k8s.io/structured-merge-diff to v4.0.3 * Stop probing a pod during graceful shutdown * apf: handle error from PollImmediateUntil * staging/publishing: Set default go version to go1.15.10 * webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup * update metadata-concealment to 1.6 for removing legacy checking * slice mirroring controller mirror annotations * additional subnet configuration for AWS ELB * Revert "Automated cherry pick of #97417: fix azure file secret not found issue" * Use the correct volum handle format for GCE regional PD. * Increasing maximum number of ports allowed in EndpointSlice * Support > 5 ports in L4 ILB. * build: Update to k/repo-infra@v0.1.5 (supports go1.15.10) * Use go-runner:v2.3.1-go1.15.10-buster.0 image (built on go1.15.10) * Update to go1.15.10 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.5 * fix a bug where only service with less than 100 ports can have GCE load balancer * bazel * deepcopy statefulsets * full deepcopy on munged pod spec * remove pod toleration toleration seconds mutation * add markers for inspected validation mutation hits * move secret mutation from validation to prepareforupdate * remove unnecessary mutations in validation * tweak validation to avoid mutation * For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP * Moving docker options to daemon.json * e2e fix: loosen configmap to 10 in resource quota * api-server add --lease-max-object-count * apiserver add metric etcd_lease_object_counts * apiserver add --lease-reuse-duration-seconds to config lease reuse duration * Bump Cluster Autoscaler to v1.20.0- Rebase opensuse-version-checks.patch- Update to version 1.20.5: * Updating EndpointSliceMirroring controller to wait for cache to be updated * Updating EndpointSlice controller to wait for cache to be updated * Add tests for populated volumes * Fix comment on getPodVolumeSubpathListFromDisk * Fix tests to test for new behavior * Add warnings after cleanup back * Automatically remove orphaned pod's dangling volumes * Count pod overhead as an entity's resource usage * Ensure only one LoadBalancer rule is created when HA mode is enabled * Fix issue in checking domain socket for plugin watcher * Use Lstat in plugin watcher to avoid Windows problem * Skip visiting empty secret and configmap names * Number of sockets is assumed to be same as NUMA nodes * disables APF if the aggregated apiserver cannot locate the core kube-apiserver * Fix repeatedly aquire the inhibit lock * Sync node status during kubelet node shutdown * remove executable permission bits * Upgrading vendored dependencies * Upgrading cAdvisor to 0.38.8 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.4 * build/OWNERS: Add Dan and Sascha as reviewers * OWNERS(CHANGELOG): Move reviewers/approvers to CHANGELOG/ dir * Bump konnectivity-client to v0.0.15 in release-1.20 * Storage e2e: Remove pd csi driver installation in GKE * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3 * kube-cross: update image to use v1.15.8-legacy-1 * [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8) * Use go-runner:buster-v2.3.1 image (built on go1.15.8) * staging/publishing: Set default go version to go1.15.8 * Update to go1.15.8 * Fix dbus shutdown events not continuing if they are not valid * Revert "make hostPort match test linuxonly" * Revert "conformance changes" * kube-proxy: clear conntrack entries after rules are in place * Use -LiteralPath instead of -Path * Escape the special character in vsphere windows path * Include unit test * Adjust defer to correctly call * do not remove volume dir when saveVolumeData fails * kubeadm: drop explicit constant override in version test * kubeadm: get k8s CI version markers from k8s infra bucket * dockershim hostport respect IPFamily * dockershim hostport manager use HostIP * Balance nodes in scheduling e2e * e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods * Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate * fix kube-scheduler cannot send event because the Note field is too large * Fix nil pointer dereference in disruption controller * Update region_pd e2e test to support PV have GA topology * Recover CSI volumes from dangling attachments * IsVolumeAttachedToNode() renamed to GetAttachState(), and returns 3 states instead of combining "uncertain" and "detached" into "false" * Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states; fixes reconciler_test mock detach to account for multiple attaches on a node * Fix translation of Cinder storage classess to CSI * OWNERS(CHANGELOG): Add release-engineering-reviewers as reviewers * OWNERS(CHANGELOG): Add release-engineering-reviewers as approvers * Resolve IP addresses of host-only in filtered dialer * Deflake ingress updates * make podTopologyHints protected by lock * ignore cgroup driver check in windows node upgrade * OWNERS(sig-release): Add CHANGELOG aliases * OWNERS(build-image): Add Release Managers as reviewers * OWNERS(releng): Sync Release Managers * OWNERS(sig-release): Remove SIG Release approvers alias * aggregate errors when putting vmss * fix azure file migration issue * kubelet: Fix mirrorPodTerminationMap leak * kubelet: Delete static pods gracefully * kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images * kubelet logs print 'kubelet nodes sync' frequently * reduce buckets for etcd_request_duration_seconds * Merge pull request #96876 from howieyuen/no-execute-taint-missing * cleanup subnet in frontend ip configs * conformance changes * make hostPort match test linuxonly * Clean up namespaced children of missing virtual parents with incorrectly cluster-scoped nodes * Add unit test for child scope mismatch with missing parent * vendor: update cAdvisor to v0.38.7 * Use volumeHandle as PV name when translating EBS inline volume * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.2 * kubectl-convert import known versions * Revert "Merge pull request #92817 from kmala/kubelet" * WIP: node sync at least once * fixes nil panic for nil delegated auth options * Lower the frequency of volume plugin deprecation warning * handle webhook authenticator and authorizer error * fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable * Avoid checking the entire backend service URL for FR equality. * Use non privileged ports- Update to version 1.20.2: * move all variables in sampleAndWaterMarkHistograms::innerSet * use default unkown sock for kubeadm cmd if cri detect is not needed * cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip * Release reserved GCE IP address after ensure completes. * Ensure reproducible builds when build through docker * Fix cadvisor machine metrics * Create OWNERS for most of the API Priority and Fairness impl * fix the deadlock in priority and fairness config controller * Cherry pick 443 and 448 from cloud provider azure * Fix bug in CPUManager with race on map acccess * clean up executing request on panic * fix azure file secret not found issue * fix: azure file latency issue for metadata-heavy workload * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1 * Add more logging for Mount error- Update to version 1.20.1: * Revert "Use host IP instead of localhost for control plane component kubeconfig files." * etcd version for 1.19 is 3.4.13 for cve fixes * Flush FibreChannel devices before deleting * Fix FibreChannel volume plugin corrupting filesystem on detach * vendor: update cAdvisor to v0.38.6 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0 * Revert "iAdd host IP to etcd listen client URLs." * fix migration logic * Add AcceleratorStats to cri_stats_provider- Add obsoletes to -client-common to facilitate smooth upgrades from older versions- Rebase opensuse-version-checks.patch - Update to version 1.20.0: * APF e2e: disable drown-out tests temporarily * coredns dep.Severity is newdefault, not newDefault * addressing review comments and supports parallel run * Update ingress conformance test for finalizers * vendor: update cAdvisor to v0.38.5 * fix: change disk client API version for Azure Stack * service.spec.AllocateLoadBalancerNodePorts followup * [go1.15] Use go-runner:buster-v2.2.2 image (built on go1.15.5) * [go1.15] staging/publishing: Set default go version to go1.15.5 * [go1.15] Update to go1.15.5 * [go1.15] hack/tools: Update to k/repo-infra@v0.1.3 (supports go1.15.5) * [go1.15] build: Update to k/repo-infra@v0.1.3 (supports go1.15.5) * Restore beta os/arch labels on initial node registration * matches specific usernames instead of "*" * range_allocator: Test (lack of) double counting * cidrset: Add test for double counting * Fix double counting of IP addresses * ap&f e2e: eliminates client-side rate-limiting * fix bug: concurrent map writes error * Bump node-problem-detector to v0.8.5 * Revert "check volume directories instead of mounts for cleanupOrphanedPodDirs" * Revert "plumb context with request deadline" * Revert "use default value when the specified timeout is 0s" * Revert "add e2e tests for request timeout" * Deflake ThrottledLogger test * fix: resize Azure disk issue when it's in attached state * kube-aggregator: fix apiservice availability gauge * Fix TestStartingResourceVersion flakiness * make sure managedFields are written * generated * unit and integration tests * apiserver dedups owner references and adds warning * Add linuxonly on one multivolume test * gce: move iptables rule to mangle * APF e2e tests: add request drown-out fairness test * add e2e tests for request timeout * use default value when the specified timeout is 0s * CHANGELOG: Update error link in 1.20 * CHANGELOG: Update directory for v1.20.0-beta.2 release * APF e2e tests: rename request drown-out priority client names * Mark some storage tests as LinuxOnly * Add GC unit tests * Log cluster-scoped owners referencing namespaced owners, avoid retrying lookups forever * Queue non-matching children for deletion when a virtual node is marked as observed * Handle virtual delete events when children don't agree on owner coordinates * Make node removal conditional in processGraphChanges * Enqueue dependents for deletion when their ownerReference does not match observed parent coordinates * Short-circuit attemptToDelete loop for virtual nodes that are removed or observed * Replace virtual node with observed node if identity differs * Refactor identityFromEvent * Avoid marking virtual nodes as observed when they haven't been * Switch GC absentOwnerCache to full reference * Add GC integration race test * Plumb event recorder to garbage collector controller * e2e SCTP test not depend on kubenet * e2e/node: increase timeouts seconds to 5 for liveness probe restart test * correct e2e test predicates conflict hostport * Add a deprecation note to k/k/cluster/log-dump directory * Update topology tests for windows * kubelet: dockershim should return grpc status with DeadlineExceeded code * e2e dualstack test fixes * convert the runtimeclass API tests to conformance * APF e2e tests: use snake_case label * APF e2e tests: move common code into helper functions * Reduce volume name length for vsphere * CHANGELOG: add a hyperlink to issue 86282 * allow configuring ReadIdelTimeout and PingTimeout via env var * Add a unit test testing the HTTP/2 health check help the REST client detects broken TCP connections. * plumb context with request deadline * Fixes fake client test generation * Integrate defaults marker and remove ContainerPort defaulter * Remove StripDefaults from BuildSwagger * Add default for protocol and test that it works * Strip defaults in new places * Re-generate with defaults * Update kube-openapi * flowcontrol bootstrap: give catch-all PL more concurrency share * APF matching: fallback to catch-all if nothing matches * flowcontrol bootstrap: make exempt PL last * APF: graduate API and types to beta * Mixed protocol support for Services with type=LoadBalancer (#94028) * Fix test name in e2e resource metrics api test * Test CRUD operations on RuntimeClasses API * vendor: cadvisor v0.38.4 * Relax matching on pod_memory_working_set_bytes metrics * configure the ReadIdleTimeout and PingTimeout of the h2 transport * Match pod resource metrics to pod not container * add more e2e sctp tests * remove wrong test for SCTP connectivity * Update the route table tag in the route reconcile loop * Fixes sigfault in case of empty TopologyInfo * Update generated files * Add service.spec.AllocateLoadBalancerNodePorts * update golang.org/x/net and golang.org/x/sys * Update 1.18 changelog with changes from v1.18.11 * fixup! unblock resources that the storage version manager depends on * fixup! add storage version garbage collector * generated * GC integration test * unblock resources that the storage version manager depends on * make storage version manager wait for lease creation * add storage version garbage collector * Fix cacheWatcher leak when time jump to the future and jump back * Correct rebase issues * Implement shutdown manager in kubelet * Add systemd package to interface with dbus * Corrected CSIDriver validation rebase issues * Remove duplicate CSIDriver name validation * Adjust CSIDriver validation to check objectmeta * Enable logging and drop permissive targets for CSI mock driver * Update the mock driver to use 4.0.2 * Included e2e test for CSIDriver FSGroupPolicy * Move CSIVolumeFSGroupPolicy to beta * Relax validation for CSIVolumeFSGroupPolicy * Fixed quantization and made monotic time reversal not panic * Log defaulted kube-scheduler component config at startup * Updates related to PR feedback * core/v1: document that topologyKeys requires the ServiceTopology feature gate * Use K8s in the README * stop serving deleted APIs * Increase watch timeout when scaling Deployment Replicas * CHANGELOG: Update directory for v1.18.12 release * scheduler: Implement resource metrics at /metrics/resources * quantity: Allow quantity to be converted to float64 * plumb service account token down to csi driver * remove generator from service in kubectl * add myself to sig-network-api-reviewers * Add datapolicy tags to staging/src/k8s.io/client-go/ * cleanup: fix log capitalization in scheduler * Add --experimental-logging-sanitization flag to Kubelet * Run ./update-all.sh * Implement e2e tests for pod scope alignment * Add tests for getPodDeviceRequest() for devicemanager * Add tests for GetPodTopologyHints() for devicemanager * Update topology hints tests to use pod object for devicemanager * Add tests for GetPodTopologyHints() for cpumanager * Refactor topology hints tests for cpumanager * Move scope specific tests from topologymanager under particular scopes * Move common tests from topologymanager under scope * Update topologymanager tests after adding scopes * Implement devicemanager.GetPodLevelTopologyHints() function * Implement the cpumanager.GetPodTopologyHints() function * Update logging to use a format util * Implement topology manager scopes * Add GetPodTopologyHints() interface to Topology/CPU/Device Manager * Add flag value validation of TopologyManagerPolicy * Add flag value validation of TopologyManagerScope * Add kubelet configuration flag 'topology-manager-scope' * Support custom tags for cloud provider managed resources * use uncommon ports for e2e network test * fix pull image error from multiple ACRs using azure managed identity * add e2e test for dual-stack secondary service IPs * Verify iptable rules are applied for tcp, udp and icmp * Choosing the right source VIP for local endpoints * Configure StackdriverLogging Windows service to restart on failure. * Adding sample files to demonstrate how cloud provider leverage CCM. * Updating EndpointSlice strategy to cover alpha NodeName field * Support high availability ports * Allow debugging kubelet image pull times * Separate in-tree gcepd driver for windows * Cleaning up EndpointSlice update validation tests * Removing "IP" from supported EndpointSlice address types in kube-proxy * Updating ControlPlane to support NodeName field * Updating EndpointSlice controllers to support NodeName field * Adding EndpointSliceNodeName feature gate * Adding NodeName to EndpointSlice API, deprecation updates * update bazel * Promote Deployment lifecycle e2e test to Conformance * CHANGELOG: Update directory for v1.19.4 release * handle the case for slow cronjob lister, add unit tests * convert to stardard lister, use []*batchv1.Job instead of []batchv1.Job * actually retry if we failed to reconcile some objects * Update storage test suits for Windows * Promote Pod/PodStatus lifecycle e2e test to Conformance * Fix failures in TestBindPlugin and TestPreemptWithPermitPlugin * Set 0 sync period in scheduler integration test * CHANGELOG: Update directory for v1.17.14 release * GA of RuntimeClass feature gate and API * put a message, not a stack, in the log on a timeout * Update snapshot CRDs * Set priority of Event v1 higher than v1beta1 * Implement TopologyInfo and cpu_ids in podresources * Convert podDevices to struct * Generate podresources API for TopologyInfo and cpu_ids * Add TopologyInfo and cpu_ids into podresources * Change GetDevices interface * Revert "Merge pull request #92312 from Sh4d1/kep_1860" * fix all Sting method not check nil in "k8s.io/apimachinery" * fix the validation logic for Job/CronJob RestartPolicy field * fix note delete to update according to code * Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy * fix(test::npd): provide NPD with proper kubeconfig * Bump kas to v0.0.14 * Capture defaulted plugin configs from framework * move lease controller to k8s.io/component-helpers/apimachinery * Bug Fix for process_start_time_metric initialization * add V(4) log when apiserver lease was deleted before this controller reacts * generated * integration test * add apiserver lease garbage collector * update violation_exceptions.list and make generated * add cronjob_controllerv2.go * Add CRI v1 proto * dualstack: Use Agnhost in place of BusyBox * Downward API hugepages * added new runtimeclass test and changed Disruptive to Serial * kubeadm: mark the "master" label/taint as deprecated * dualstack: use correct IPFamily list for conntrack checks in e2e * move service controller config to k8s.io/cloud-provider/controllers/service/config * Use FilteredDialContext with quobyte API * Update quobyte client API to v0.1.8 * import restrictions: allow k8s.io/kubelet to import credentialprovider apis * hack/.golint: ignore golint for new kubelet and credentialprovider APIs package * pkg/credentialprovider: export URL parsing and matching helper functions * pkg/credentialprovider: add initial exec-based credential provider plugin * kubelet: add initial credentialprovider v1alpha1 APIs * feature gates: add KubeletCredentialProviders feature gate * kubelet: support alpha credential provider exec plugins * kubelet: update pkg/kubelet/apis/config/OWNERS to include api approvers and reviewers * kubelet: add CredentialProviderConfig API * Change at which level klog.Fatal is invoked * Forbid creating clusters with more than 100 nodes without vpc-native * Change the logic of pod volumes existence check during kubelet cleanupOrphanedPodDirs, cleanupOrphanedPodCgroups and PodResourcesAreReclaimed * remove label dependency on k8s api in Azure * Remove duplicate import * Add --experimental-logging-sanitization flag to control plane components * FsgroupChange policy test suite * Improve observability of node authorizer: * Adding some metrics to the graph * Adding log message when node authorizer has synced * Remove ready directory which created in empty volumeMounter setUp func * cloud-provider: update docs and guidance for InstanceV2 and Zones * fixing issue where SMB share paths cannot resolve with CRI-containerD on Windows * Ignore specific Pod update events in scheduler * Support customize load balancer health probe protocol * Move fsGroupChangePolicy feature to beta * Add WindowsContainerResources to UpdateContainerResourcesRequest * Change snapshot test to use v1 apis * Modify storage snapshottable and disruptive test for Windows * fix: change storage account client API version for Azure Stack * Fixed failure: ProvisioningFailed: Failed to provision volume with StorageClass "standard": invalid AccessModes [ReadWriteOnce ReadOnlyMany ReadWriteMany]: only AccessModes [ReadWriteOnce ReadOnlyMany] are supported * Set enable konnectivity service to true by default * fixup! apiserver correctly validates encoding/decodable versions * HTTP Prove: Removes Accept-Encoding header from http probe * Update snapshot CRDs to v1 * Enable ConfigurableFSGroupPolicy feature gate * Add dangling volume check for vsphere * update e2e kubectl test * prune type in preserve-unknown-fields objects * Add AddedAffinity to the NodeAffinityArgs * Remove --redirect-container-streaming functionality (#95935) * Fix go lint on folder apimachinery/pkg/runtime/serializer/protobuf * Graduating AppProtocol to GA * Fix command and arg in NPD e2e * Call MountDevice only once * Mark MountDevice as uncertain after failed resize * Restore staging path creation * Add unit test for staging path creation * kubelet: move pkg/kubelet/cri/.import-restrictions to pkg/kubelet/cri/streaming * kubelet: add feature gate check for exec probe timeouts * features: add ExecProbeTimeout feature gate * kubelet: allow dockershim exec timeouts to be longer than 10s * kubelet: add e2e test for exec readiness probe timeout * kubelet: stop skipping docker exec livenessprobe timeout test * kubelet: respect probe exec timeout from CRI by returning utilexec.CodeExitError * kubelet: respect dockershim exec timeout * Implement log sanitization * Update bazel * apiextensions: adapt error tests to fixed validation messages * apiextensions: switch validation to kube-openapi * bump(k8s.io/kube-openapi) * stops puting a stacktrace of aborted requests in the logs * require APIServerIdentity to be enabled to run StorageVersionAPI * apiserver correctly validates encoding/decodable versions * updater correctly updates storageversion status * return a Status formatted JSON response * generated * Add an integration test. * make some rbac and scheduling post start hooks tolerate the apiserver bootstrap delay caused by installing storage versions. * Add a generic filter that blocks certain write requests before StorageVersions are updated during apiserver bootstrap. * Collect storage versions as ResourceInfo when installing API endpoints. * Add a feature gate * add andyzhangx as reviewer * Add nodeSelector for konnectivity daemonSet * fix ingress comparaison * fix defaulting * add nil case in proxy * fix build * fix nit in validation * fix tests * Update generated * fix reviews * Update generated * fix review * fix typo * add owner for feature gate * fix rebase * fix review * Add tests * Add route type field to loadbalancer status ingress * Update docs and fix redundant logic of scheduler perf * remove kube-proxy/config/v1alpha1 from .golint_failures * Fix go lint on folder apimachinery/pkg/runtime/serializer/json * Change the features removal note * Promote TokenRequest e2e test to Conformance * cleanup dated wording "NominatedNodeName annotation" * fix formatting * generated * add kube-apiserver-lease-controller poststart hook * Add constant PodReadyTimeout to e2e test * Adjusted timings and management of pods in e2e test * Create Pod+PodStatus resource lifecycle test * Update UTs * Fixing expected pod subdomain to match framework.TestContext.ClusterDNSDomain * e2e: add APF flowcontrol request drown-out test * Less restrictions for AWS NLB health check config * scheduler: remove FrameworkFactory. * PV e2e: fix race in NFS recycling test * Add support to size memory backed volumes * update max azure data disk count map * kubeadm: fix the lint failure where return value is not checked * Generated changes * Move the remaining kubectl bits to k8s.io/kubectl * Introduce kubectl-convert plugin * Adding config extension to CCM. * remove annotation cache sync because of code removed * Increase the timeout to allow summary test pod to start * removes filter metrics test retries * Use topology labels instead of old beta names (#96033) * CRs: Default non-nullable nulls * Move kubectl get-context validate logic to Validate function * endpointslice API: rename 'accepting' condition to 'serving' condition * endpointslice controller: add test cases to TestSyncServiceFull for terminating endpoints * endpointslice controller: refactor TestSyncServiceFull to use test tables * endpointslice API strategy: drop disabled fields 'accepting' and 'terminating' * endpointslice controller: set new conditions 'accepting' and 'terminating' * feature gate: add gate EndpointSliceTerminatingCondition * endpointslice API: add accepting and terminating conditions * kubelet: Use CRI SecurityProfile for Seccomp * Switch GCP list calls to paginated calls. * dualstack: cleanup IsIPv4 duplicates in favor of utils * dualstack: incorporate IsIPv4 updates from utils repo * abort if namespace doesn't exist or terminating * proxy: validate each CIDR config seperately and check for errors * minor changes in adding tests for checking metrics labels * make flags of TokenRequest required * default `service-account-extend-token-expiration` to true * E2E stress test suite for VolumeSnapshots * Update Microsoft/go-winio to released version * APF metrics: set StabilityLevel to ALPHA * kubectl debug: allow set-image-only invocation * Introduce a simple datapolicy library * Remove the dependency between create priorityclass command and generators * Deflake existing configmap count * update features to indicate beta in comment * cleanup: use i18n.T on all command descriptions * Revert "add e2e test for Service ExternalIPs" * CHANGELOG:Fix kubelet flag enable-cadvisor-json-endpoints * client-go/rest: fix finalURLTemplate for url base == "/" * Correctly fix clearing conntrack entry on endpoint changes (nodeport) * Remove Const IPVSProxyMode * update changelog-1.20 * test images: Authenticate in order to push images * Support multiple standard load balancers in one cluster * Use user facing field names in validation message * report UnschedulableAndUnresolvable status instead of an error when PVCs can't find bound persistent volumes * separate RootCAConfigMap from BoundServiceAccountTokenVolume * Add mrunalp as node approver * test images: Removes -p yes flag from qemu-user-static script call * optimise defaultpreemption: enumerate fewer candidates * apiserver/filters test: fix data race and do not leak goroutines * APF: use snake_case in metric labels * Volume snapshot e2e test to validate VolumeSnapshotContent and PVC finalizer * minor changes to tests for checking metrics labels based on review comments * check if kubectl version required values are empty * Exclude KEP-1933 from verify-all.sh until after alpha status. * add GVK to fake dynamic client to match actual behavior * demonstrate existing generated client and fake client behavior is consistent * remove dead apiserver field * Adding an owner for addon/dns folder * fix: pass bearer token to curl using -H instead of --oauth2-bearer * Remove alpha from kubectl debug * do not allow inflight watermark histograms to fall too far behind * test images: set DOCKER_CLI_EXPERIMENTAL=enabled * Remove maximum volume limit comment which is easily outdated. * DelegatingAuthenticationOptions: allows for setting a timeout for the TokenReview client that is used by for the webhook authenticator * Update staging/src/k8s.io/kubectl/pkg/cmd/create/create_rolebinding_test.go * pause image: Disable DiagTrack service on Windows image * replace string casting with fmt.sprintf in test * Fix paging issues when Azure API returns empty values with non-empty nextLink * change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver * test images: sets HOME=/root in cloudbuild.yaml * Update CHANGELOG link of older releases * Remove TaintBasedEvictions Feature Gate * Replace calls to cs.CoreV1().Nodes().Create() with createNode() * Add a function to ensure created nodes are present in scheduler cache * local-up-cluster.sh: Use config file instead of flags for kubelet * Add a verbosity option to exec * KEP-1933: add static analysis target to hack/ * kubectl debug: Allow mutating image names * Increasing withTimeout for ReplicationController Lifecycle test steps * Propose seccomp/apparmor protobuf type definitions for CRI graduation * Update Klog dependency * Remove service load balancer feature gate * resource-metrics: add pod metrics e2e test * reenable e2e_node services & debugging improvements * resource-metrics: add pod/sandbox metrics to endpoint * Removing Alpha annotation as the feature is graduating to Beta in v1.20 * Add runtime representation of []v1.PreferredSchedulingTerm * Move pkg/kubectl/cmd/auth under staging/src/k8s.io/kubectl/pkg/cmd/auth * use patch instead of replace to test the dry-run option * CHANGELOG: Update directory for v1.20.0-beta.1 release * fix CPU time of pod stats with cs.CPU.Time * Skip the sig-storage e2e test as early as possible * Remove useless variable and if * kubectl debug: add tests for Complete,Validate * Move Snapshot to GA * register controllermanager.config.k8s.io group. * fix(test::npd): fix node problem detector test * fix n to nodeInfo easy to understand * Update cobra dependency to v1.1.1 * Adjusted e2e test watch timeouts, logging and pod management * Update usage information for --http-override * Bump agnhost version * Add override option to netexec * Add a redirect handler to netexec * Add optional code to netexec echo endpoint * Honor disabled LocalStorageCapacityIsolation in scheduling * Build files * [kubelet] Allow priority to be set for kubelet process on Windows * add e2e test for Service ExternalIPs * e2e cases for apf * Move helpers from pkg/registry/rbac/reconciliation and pkg/registry/rbac/validation under k8s.io/component-helpers * Add runtime representation of v1.NodeSelector * Remove variadic argument from storage interface * Revert "Updated golang/x/net. Also updated golang.org/x/sys" * Add multi request test * Fix issue in missing metrics of terminated requests * Fix bug in JSON path parser where an error occurs when a range is empty * set webhook retry backoff parameters for kubelet * thorw error if webhook retry backoof is not specified * make backoff parameters configurable for webhook * fix vendor/k8s.io/apimachinery/pkg/api/meta staticcheck * Updated golang/x/net. Also updated golang.org/x/sys, as required by hack/lint-dependencies.sh. * Disable watchcache for events * local-up-cluster.sh: Remove ineffective parameters * Pass all packages to conversion-gen * refactor: migrate health checks of control-plane off insecure port in tests * Implementing ExternalTrafficPolicy: local in winkernel kube-proxy via DSR * add a jitter to bound token renewal * Add datapolicy tags to cmd/kubeadm directory * devicemanager: fix race in stub * Add datapolicy tags to pkg/volume/ * change bucket from 0.0s to 0.0001s * refector service some e2e cases to make it runing in multi providers * Added tests to check metrics labels * Move CCM to staging k8s.io/cloud-provider * mv TokenRequest and TokenRequestProjection to GA * Populate ClusterIPs on read * test: remove flacky ut * Add json-response flag to porter * local-up-cluster.sh: Pass CLUSTER_CIDR to kube-proxy * HTTP Probe: Add 'Accept' header by default * Add keep_time_key setting to fluentd configuration * Enable filter latency tracking for request filters * Measure how much time a request spends in server filter(s): * hack/local-up-cluster.sh: fix API_PORT * exec credential provider: exec -> client.authentication.k8s.io/exec * kubectl flush profiling when get a sigterm * Cleanup non-namespaced objects in e2e test during interrupts * remove dead negotiation methods * fake dynamic client: support *List kinds * Move informer_factory to staging * Remove behaviors * add tests that update services while gate is off * Add datapolicy tags to staging/src/k8s.io/kubectl * Add datapolicy tags to staging/src/k8s.io/legacy-cloud-providers * Mark SecondaryRangeName as deprecated. * Move MatchNodeSelectorTerms to k8s.io/component-helpers * exec credential provider: k8s.io/client-go/tools/auth/exec helper * exec credential provider: ProvideClusterInfo and kubeconfig shadow * Remove FieldMatchingFlags * Adjust conversion generator to new converter changes * Add datapolicy tags to pkg/scheduler/ * Add datapolicy tags to staging/src/k8s.io/kube-aggregator/ * Add datapolicy tags to test/e2e/framework * Add datapolicy tags to pkg/apis * kubeconfig: add explicit path, if specified to loading precedence * Introduce api-extensions category in k8s apiserver * refactor(apiserver): ignore the insecure flags * Allow for configuring etcd progress notify interval on GCE * Fix seccomp PSP docker/default annotation handling * fixes max-min fairness * local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager * fix kubectl debug link error * Added config parameter for CPU threads * Updating EndpointSliceMirroring e2e test to accept multiple slices * pin to latest k8s version * more versions * rev versions * use current method signatures * Update csi-proxy version * add audit-log-compress to apiserver * Update PriorityClass conformance test to cover DeleteCollection * SetCondtion updates generation * Update testing-manifests/storage-csi owners file * CHANGELOG: Update directory for v1.20.0-beta.0 release * Re-add the event recorder in the release test * Don't clear the cached resourcelock when errors occurs on updates * Add failing test showing release is not working properly * Wipe some fields on service "type" updates * Make some methods into non-methods * If image has stackdriver agent installed, use it. * remove the deprecated client that we stopped generating * generated * Update function setting master node size for GCE * dualstack endpoints integration tests * fix case when HC timeout is 0 * pv controller test: more test cases * pv controller test: use sub tests * pv controller test: enable klog output * cleanup: fix some error log capitalization * fix unbound variable on upgrade * add godoc for events to events.k8s.io * Event: Document TTL and best-effort-ness * Add the pod_resources_endpoint_requests_total metric * Update podresources api e2e_node tests * tombstone-ing IPFamily field(15) * fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList * Change function signature for MatchNodeSelectorTerms * Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck. * Webhook: handle error when calling wait.ExponentialBackoff * Fix cacher test after bumping fakeBudget timeout to 2 seconds * Move pkg/apis/core/v1.IsScalarResourceName under pkg/scheduler/util * fixed addons fluentd-elasticsearch statefulset format error * PV controller: don't delete PVs when PVC is not known yet * follow up for #94109 * Enable Volume Expansion tests for Windows * scheduler: make Profile an interface. * Promote verify PriorityClass endpoints e2e test to Conformance * add e2e test for services with hostNetwork endpoints * e2e use functional options to configure NetworkingTest * fix e2e service test container listening port * dual stack services (#91824) * Kubelet now implements the V1 podresources API * Update generated files * Add podresources v1 API * Fix cacher test flakiness * Make versionconverter functions private * Reuse SSA type converter for resources in the same API Group * Change pvc describe test * add an APIServerIdentity feature gate * DelegatingAuthorizationOptions: exposes and sets a default timeout for SubjectAccessReview client * Fix the kube-proxy comment so that the document can be generated correctly * Fix a lot of typos in Azure codes * pause image: Stricter registry prefix regex * apiserver: use canonical egress selection names in EgressSelectorConfiguration API docs * apiserver: update TestReadEgressSelectorConfiguration to use 'controlplane' egress selector name * apiserver: add validation for EgressSelection names in EgressSelectorConfiguration API * apiserver: support egress selection name 'controlplane' and deprecate 'master' * Update test/e2e/storage owners file * Report a metric for time taken to perform recursive permission change * Log PodExec stdout + stderr * Add e2e test for the newPV Controller metric * removed whitspace * added xpack gem to enable ilm support in fluentd-es-image * Add yaml util to unmarshal numbers into int/float * Update the frontend IP config when the service's `pipName` annotation is changed * fix typo in e2e test * Add MrHohn as an owner of ip-masq-agent addon * Bump ip-masq-agent version to pick up CVE fixes * ipvs: check for existence of scheduler module and fail if not found * fix: do not hardcode nginx image URL in rc e2e test case * Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane. * Add configuration options to specify --detect-local-mode on kube-proxy. * Fix static checks for pkg/controller/podautoscaler * proxy: label kube_proxy test with more unique label * Optimize NormalizeScore for PodTopologySpread * Add 5k nodes benchmark for pod topology spreading * PV Controller: PV plugin and mode metrics * style: update comments in topology manager * Optimize string building for NamespacedName * Clean code: optimize some logs of mount * extend request interval to make session affinity cases stable * Add jingxu97 to volume/util owners * Delete framework/v1alpha1 folder and change remaining import paths * Fix a bug that Pods with topologySpreadConstraints get scheduled to nodes without required labels * Fix staticcheck failures on apiserver/plugin/pkg/{authenticator, authorizer} * Alter wording to describe pods using a pvc * Deflake PostFilter integration test * allow component-helpers to import util and klog * generated * generalize lease controller * move node lease controller to component-helpers * Add integration test for Default PodTopologySpread * bump qemu version * Rename flags * Replacing factory tests with scheduler.New and options * Add SETUP_KONNECTIVITY_SERVICE flag * Separate network proxy flag for apiserver egress and starting pods * kubeadm: validate node-cidr-mask are correct * kubeadm validate maximum service subnet size * write checkpoint only when allocated devices updated. * kubeadm: validate podSubnet against node-cidr-mask * Properly quote flags passed to Cluster Autoscaler * Update nodelocaldns yaml to use 1.15.16 image * remove unused const failedExpiration * If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly * format incorrectAddresses in klog * fix: add missing patch flag for kubeadm init phase control-plane * fix loop bug for verify attached volume * test: Add service cluster IP range unit test * prepare node performance tests to move to separate job * ipset: Address a TODO, add test for TestEntry() with IPv6 address * Fix labels for spreading benchmark * Added functionality and API for pod autoscaling based on container resources * Add more Pods and relax skew in E2E spread test * Adjust the acceptable value of UsageNanoCores * Return non-zero code on logexporter failures * Fix default values for logrotate in /var/log/ * Add integration test for kubectl debug * Fix golint failures in client-go/transport * Update the PIP when it is not in the Succeeded provisioning state during the LB update. * Support cross compilation only on amd64. * Always set relevant variables for cross compiling * Use host IP instead of localhost for control plane component kubeconfig files. This is a part of work to allow control plane components to be moved off hostNetwork. * Allow deletion of unhealthy pods if enough healthy * iAdd host IP to etcd listen client URLs. Allow kube-apiserver to use host IP to connect to etcd. Update etcd/migrate to allow additional client listening URLs. * Add error detail in log * CHANGELOG: Update directory for v1.20.0-alpha.3 release * fix the fake cloud provider * Warn that hyper-v featuregate will be deprecated in 1.20 and will be removed in 1.21 * Do not skip externalLB update if some nodes are not found. * Promote Replication Controller lifecycle e2e test to Conformance * Promote Replication Controller Lifecycle * Move client_builder to k8s.io/controller-manager * Graduate DefaultPodTopologySpread to beta * e2e: topomgr: fix ginkgo log * netpol: Add CRUD tests for NetworkPolicy API * test images: Adds Windows support (part 2) * refactor: migrate node e2e tests off insecure port * Generated bazel * Generated conversions * exec credential provider: wire in cluster info * Fix dependency linting * Kube-proxy: Perf-fix: Shrink INPUT chain * Fix flaky unit test Test_Run_Positive_VolumeMountControllerAttachEnabledRace data race * conntrack log delete operations * Bump github.com/Azure/go-autorest/autorest/adal to 0.9.5 * kube-proxy: log stale services operations * staging/publishing: cleanup import restrictions for csi-translation-lib * tests: Refactor agnhost image pod usage - common (part 2) * test, e2e: Remove duplication when using PodClient.CreateSync * fix test flakes * kubectl: allow users to use args with KUBECTL_EXTERNAL_DIFF * e2e don't use hardcoded name for containers name * avoid apiserver/cloud-provider/controller-manager deps from k8s.io/csi-translation-lib * Add client listening URLs flag to etcd migrate. * test: Fix using deprecated default cluster IPs * Disable test for large clusters * The function shouldRecordEvent will panic when the value of input object is nil * Fix catch all regex and missing DryRun Options * fix unbound variable issue in verify.sh * support multiple bind records (fie nodelocaldns test regression), by first replacing PILLAR_ and then replacing other vars. * Add back openapi gen for generic types and clean up doc.go * fix a nil pointer ref in slice allocation * warn user about resource being deleted * Use gsutil to download kube binaries and release * staging/publishing: remove release-1.16 rules * test images: Switches to buildx * Add new way to generate leader election lock * fix staticcheck vendor/k8s.io/metrics/pkg/client/custom_metrics/multi_client.go:49:4: ineffective break statement. Did you mean to break out of the outer loop? (SA4011) vendor/k8s.io/metrics/pkg/client/custom_metrics/versioned_client.go:38:2: var codecs is unused (U1000) * kube-proxy ensure KUBE-MARK-DROP exist but not modify their rules * Remove redundant variable * Switch events conformance metadata from v1.19 to v1.20 * Fix windows node startup failures. * CHANGELOG: Update directory for v1.18.10 release * CHANGELOG: Update directory for v1.17.13 release * kubelet container status calculation doesn't handle suddenly missing data properly * enable benchmark by matching test config * remove debug print from create quota * Move SCTP to GA * remove secondary client retries in e2e tests * Add support for create ingress in kubectl * Fix metrics reporting in kube-apiserver * Fix --dry-run invocation in kubectl e2e * fix: smb valid path error * Fix staticchecks in vendor/k8s.io/client-go * Replace non-ascii string under test/ * add methods to deallocate and starts vms in a scale set * Removing flaky tag from test * Use fluentbit as logging agent. Replace stackdriver * e2e: node: topomgr: avoid plugin leak on test fail * add a local tlsTransportCache to available_controller * Move dirExists() to kubelet_test * Map SelectorSpreadPriority to PodTopologySpread plugin * CHANGELOG: Update directory for v1.19.3 release * Fix fcpath * Ignore deleted pods. * Make copied `localtime` file write-able * Reorder default Filter plugins to have UnschedulableAndUnresolvable first * Add unit tests for dockershim/exec.go * test: Fix deprecated --dry-run parameter * Enable XFS tests for recent GKE COS versions * CHANGELOG: Update directory for v1.20.0-alpha.2 release * PriorityClass lifecycle tests * Fix log dumping for GKE * Add `create ingress` command to `cmd/kubectl` * Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` * Remove dependency between create rolebinding * kube-eviction: Fix SI of process quantity * add systemd mount options interface to support the no-systemd mount * Move scheduler interface to pkg/scheduler/framework * Fix vsphere disk detach failing * - fix golint errors by adding defition comments - remove /pkg/apiserverinternal from .golint_failures * [auth]Check verbs for nonresourceurls and resources * add a OWNERS file under storageversion * generated * add the storageversion.Manager interface * kubeadm: add some output to the generate-csr command * Fix the busybox image tag in kubemark hollow nodes * fix azure disk attach failure for disk size bigger than 4TB * Add PULL_REQUEST_TEMPLATE.md and state the repo does not accept any direct changes * Run hack/update-vendor.sh * Add rule for component-helpers into staging/publishing/rules.yaml * Removing GetPodPriority from pkg/api and importing PodPriority from k8s.io/component-helpers * Duplicate a single helper from pkg/apis * simpler addition of nodeport basic validation * Replace Branch Manager/Patch Release Team with Release Manager * OWNERS_ALIASES: Add xmudrii to release-engineering-reviewers * make new command functions to keep private when they are not required to be public * wrap errors from NodeLabel, NodePorts, NodePreferAvoidPods and NodeResourcesBalancedAllocation plugins * fix azure disk data loss issue on Windows * fix upgrade test * Add defaultingType to PodTopologySpreadArgs * Don't depend on DNS in NetworkPolicy tests * kubelet: fix iptables setup under dual-stack * Improve logging of iptables canary test * Update addons volumesnapshots owners file * Clarify that we don't audit events due to performance impact * don't cache transports for incomparable configs * Update write-pki-data to give read permissions to KUBE_PKI_READERS_GROUP, for components running as non-root to be able to read the credentials. * Update to Calico v3.16.2 * Update Windows Pause version to 1.4.0 * Move cmd/controller-manager to k8s.io/controller-manager and cloud specific configs to k8s.io/cloud-provider. * API server: fix default_konnectivity_socket_path typo. * cleanup: fix golint errors in /pkg/kubelet/stats * cloud node controller: handle empty providerID from getProviderID * always collect containerd logs * Upgrade snapshot controller to 3.0.0 * log-dump.sh: Fix shellcheck issues * test-integration: Fix using deprecated default cluster IPs * Initialize k8s.io/kubernetes/staging/src/k8s.io/component-helpers * Update the example for kubectl port-forward * Upgraded aws-sdk-go to v1.35.5 to include more regions, i.e. Millan * kubelet: Set dual-stack hostNetwork pod IPs on dual-stack nodes * utilnode: fix incorrect documentation about node name vs hostname * kubelet: allow specifying dual-stack node IPs on bare metal * kubelet: Remove unnecessary sorting in NodeAddress tests * allocate service-account flowschema to global-default * Fix reporting network_programming_latency metrics in kube-proxy * Allow configuration of etcd healthcheck timeout * add ipv6 support to the image issue-74839 * set lastterminationstate for container status even when CRI fails to return termination (or any) data * Remove the dependency between create quota command and generators * make download-or-bust compatible with both sha512/sha1 * Fix documentation on EndpointSliceCache map * Adding marosset to test/e2e/windows/OWNERS approver * Add SELinux labels for kubelet on Fedora CoreOS * add CAP_NET_RAW capability to CRI stats summery test * e2e hostexec commands does not need sudo * Update after code review * Update cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Mask bearer token in logs when logLevel >= 9 * Update test/e2e/framework/network/utils.go add logging about min/max interval Co-authored-by: Antonio Ojea * scheduler framework: document how to make plugins configurable * Send node startup scripts to console and journal * Disable the Accelerator metrics by default * Adding Bazel dependencies * Adding failure scenario for long FQDN and setHostnameAsFQDN feature * add unit tests for network plugin manager metrics * clarify help for --api-version: note it's API group/version * include APIVersion in output of 'kubectl api-resources' * Move cloud related feature gates to controller-manager * Replace AreLabelsInWhiteList with isSubset * mark node-problem-detector as serial * Cleaned up and fixed: the potentially misleading comments around Event struct * Update DialFromNode to return values as is done w/ other tests. Update comments to clarify missing probability check function (since they need to be updated anyways b/c of the return value introduced) * Azure: fix node removal race condition on VMSS deletion * removed links to soon deprecated helm stable repo & added artifact hub link * get kibana up to speed with es * rev version of stateful set * v1.18 support changes * kubectl: Update triage/support label references to kind/support * Fix golint failures in pkg/registry/core/replicationcontroller * kubelet: do dual-stack iptables rules * use new fluentd image in daemonset * updated fluentd and all plugins * fix staticcheck for kubectl pkg files * Add gate to install CSI proxy * SetHostnameAsFQDN will be beta in v1.20, enable feature gate by default. * test: e2e: fix race in pods test * Fixes high CPU usage in kubectl drain * proxy: Add tests for kube-proxy config defaulting * test/e2e/framework/:use the term 'Control Plane' in comment * Do not update managedFields timestamp when they don't change * reconcile NLB attributes on service creation * fix detach azure disk issue when vm not exist * Mask Ceph RBD adminSecrets in logs when logLevel >= 4 * Update triage/support label references to kind/support * Update addon-manager makefile to use the new staging repo - for real * Remove unused FailfWithOffset() * Verify pod termination with E2E PreStop hook * Move predicates and priorities configuration creation to Policy mapping * Make the creation of namespace using POST and PATCH consistent * vsphere: improve logging message on node cache refresh event * Tag LabelSelector with +structType=atomic * Bump to latest kube-openapi and SMD to pick up structType=atomic support * just log essential pod info * Add error text to kube-system wait error * Change kubectl clusterinfo to non offensive words * e2e can't use both pod.Name and pod.GenerateName * Fix test "[sig-windows] DNS should support configurable pod DNS servers" * Fix lint errors in pkg/contoller/endpoint * Update Makefile to point to the new addon manager gcr repo * Fixed percentage behavior in instr * remove dns_common.go delete configmap stuff * kubelet: remove some redundant iptables option checking * Remove federation tests entirely because they break clusters and aren't relevant anymore * Don't add empty AZ labels to OpenStack volumes * resolve PR comment ( add nil check ) * fixes test/integration/ttlcontroller staticcheck * Add CSI proxy log to fluentd * Update Windows image patch version * Updated symbol 'framework.GetAllMasterAddresses' to not use word 'master' * Updated symbol 'framework.GetMasterHost' to not use word 'master' * fix: use ">" instead of ">=" in resource allocation * add configuration for controller migration. * Watch bookmarks may contain version of objects of other types * Support sharing one IP address for multiple services * Add unit tests for feature "Support sharing one IP address for multiple services" * Graduate SelectorIndex to GA * correct 'information' spelling errors * correct 'admission' spelling errors * add note for kubeadm cert renew * Fix UpdateSnapshot when Node is partially removed * Add LookForStringInPodExecToContainer that takes container name parameter, modify LookForStringInPodExec to call the new function. * Fix test name TestDump * kubeadm: deprecate self-hosting support * make update * fix integration tests * fix error message * fix goroutine that lives too long * wrap errors in selectorspread and podtoplogyspread plugin * add unit tests for getStorageAccounts in azure_storageaccount.go * Lint ttl_controller * Fix staticcheck failure for vendor/k8s.io/client-go/discovery/cached/memory * kubectl: deprecate --delete-local-data * wrap errors in service affinity plugin * [pkg/watch/json]: remove dead code * wrap errors in taint-toleration plugin * pause image: moves wincat binary location * Adds support for building Windows pause image * tests: Refactors agnhost image pod usage - network * tests: Refactor agnhost image pod usage - common (part 1) * gce: redirect handshake server requests to metadata-concealment too * Disable one subpath test for windows * Add csiproxy log * Collect debugs before framework.Failf * Enable per-zone logexporter pods creation * e2e/storage: disable caching when writing/reading to block PVCs * e2e: add option to create pods with different image in pod.Config * Clean up nits in delete cascade * wrap errors from DefaultPreemption, ImageLocality and NodeAffinity plugins * Fix LookForStringInPodExec(...) to take container name as argument, and refactor function usage Ref: PR 92127 review discussion https://github.com/kubernetes/kubernetes/pull/92127/files#r447853904 * switching to stable version * Fix kube-addon-manager overwriting resources with EnsureExists * apiserver self request metric * address instance_test nits * It's an 'Instance' of apiserver * upgrade test for BoundServiceAccountTokenVolume * kubeadm: make the CP join handling of kubeconfig similar to "init" * kubeadm: warn but do not error out on missing CA keys on CP join * using structured logging in scheduler framework runtime * agnhost image: use actual DNS domain instead of hardcoded cluster.local * add aojea to test reviewers * Use the exported struct member directly * fix: correct glbc ClusterRole * Updated vendor by `hack/update-vendor.sh` * Update bazel * Update dependencies * Remove kubeconform * Remove dependency on behaviors for conformance generation * Fix typo & documentation on kustomize.md * Remove unmaintained stackdriver logging e2e test * replace sha1 with sha512 * Use pager's context instead of TODO * kubelet: add unit tests for imagePullSecrets keyring * Keep the imagePullPolicy of kubectl alpha debug consistent with the default * Remove ext2 + ext3 tests * Add failure logic to tests that rely on side-effect-free dial functions. * Adding back in the breadth-first-polling logic. "Revert "Merge pull request #93837 from jayunit100/DialFromContainerB"" * Update the use message for kubectl debug * Graduate kubeadm alpha certs command * Fail test when Cinder volume deletion fails * Add extra log when Cinder volume deletion fails * Delete pre-provisioned Cinder volume by ID * deprecate scheduler metrics BindingLatency and SchedulingAlgorithmPreemptionEvaluationDuration * modify static check * Replace e2essh on e2e service tests * using kubectl apply to create metric adapter * Allow the lifecycle of kube-proxy to be managed independently of the startup scripts for GCE * Fix `kubectl describe ingress` format * check readyz before adding endpoint for kube-apiserver * Bump network proxy images to v0.0.12 * Bump konnectivity-client to v0.0.12 * tests: Refactors agnhost image pod usage in tests * Revert "Merge pull request #93837 from jayunit100/DialFromContainerB" * CHANGELOG: Update directory for v1.20.0-alpha.1 release * Move Kubelet Summary API to staging repo * removing deprecated scheduler metrics * refactor(kubeadm): make `alpha kubeconfig user` command accpet --config * wait until the iptables rules are programmed * Add test for listing Leases from all namespace * use GetInstanceProviderID to get instance provider ID * Remove mattjmcnaughton as a sig-node reviewer * Enhance the prompt information of verifyRunAsNonRoot, add pod, container information * Update nodelocaldns yaml to use 1.15.14 image * handle longer vendor paths without go files * Show error in status if preserve unknown fields is true for nonstructural schemas * `find . -type f \( -name "*.go" -or -name "*.md" \) -print0 | xargs -0 gsed -i 's/the the /the /g'` * endpoinslices must mirror services labels * kubectl: add a space between effect and operator when printing tolerations * Return the Kubernetes version which stopped serving deprecated APIs by default * log-dump.sh: Do not modify logexporter-daemonset.yaml in-place. * Take into account latency incurred in server filters * test images: uses nanoserver * Remove kubeadm audit package * Do not assume storageclass is still in-tree after csi migration * fix kube-proxy cleanup * scheduler_perf: use time.Ticker in throughput measurement * Remove testcluster check for csi proxy * Add cheftako to KCM owners. * Add an unit test for requests including value after token * Limit the max number of splitting * fix: detach azure disk broken on Azure Stack * [pkg/api/podsecuritypolicy]: fixup typo * Add a check for crio service before starting node e2e tests * apiextensions: prune array type without items in published OpenAPI * test: add unit-test for TranslateCSIPVToInTree. * apiserver: fix healthz vs. livez vs. readyz log output * test(kubelet): deflake TestRotateShutsDownConnections * kubeadm: update vendor to exclude kustomize import * kubeadm: remove the --experimental-kustomize feature * update-bazel * use more granular buckets for azure api calls * fix duplicate testcase names * Adds filtering of hosts to DialContexts. * update storageos vendor for FilteredDial change * kubeadm: remove the --kubelet-version flag for "upgrade node" * Adding cheftako to CCM owners. * scheduler_perf: refactor to allow arbitrary workloads * Tests for empty constraints array when DefaultPodTopologySpread is enabled * cluster/images/etcd: Build etcd:3.4.13-1 image * build: Update to debian-base:buster-v1.2.0 * build: Update to debian-iptables:buster-v1.3.0 * test(apply): deflake run_kubectl_apply_tests * fix azure file migration panic * Add support for s390x * test images: Fixes echoserver s390x image * Change code to use staging/k8s.io/mount-utils * enable gce InstancesV2 * implement gce InstancesV2 interface * Update csi proxy to v0.2.1 * cloud node controller: implement with workqueues and node lister * CHANGELOG: Update directory for v1.19.2 release * CHANGELOG: Update directory for v1.18.9 release * CHANGELOG: Update directory for v1.17.12 release * test/e2e: Busybox image is not being templatized * move dashpole to emeritus in kubelet * LockToDefault the ExternalPolicyForExternalIP feature gate * Fix resource location for ipv6 pods * Refactor kubectl without stdin test * e2e sctp support for ipv6 * Fix e2e autoscaling namespace error * reduce cloud api calls in cloud-node-controller by passing instanceMetadata to updateNodeAddress * Ensuring EndpointSlices are recreated after Service recreation * Increasing acceptable timeout for EndpointSlice garbage collection * Delete namespace parameter in create adapter * verify-generated-swagger-docs: remove unnecessary build * kubeadm: relax the validation of kubeconfig server URLs * Graduate WinOverlay to Beta * count of etcd object should be limited to the specified resource * Run gofmt * run hack/update-vendor.sh * Move podresources api to k8s.io/kubelet/pkg/apis * optimize the use of informer for scheduler * Revert "conntrack e2e test debug connections" * ingore apparmor on non Linux operating systems. * test: ensure WaitForCacheSync is called after starting sharedInformerFacotry * Move the RuntimeClass tests out of node-kubelet-orphans * Test watchcache being updated in multietcd setup * Enable progress notify events in watchcache * Allow tracking resource version for reflector store * Implement etcd3 progress-notify feature in etcd3 layer * Pipe newFunc to etcd3 storage layer * Update kubeconfig command-line help message for kube-proxy * Clean up remaining ns flag * Revert "Revert "Switch cos version to M85"" * ubernetes_lite.go: remove image argument from SpreadServiceOrFail * Don't attempt to detach an FC device if we don't know its name * follow up cleanup after SupportPodPidLimits GA * Mount kubelet and container runtime rootdir on LSSD * avoid potential secret leaking while reading .dockercfg * clean up podpreset deprecated client * generated * remove generated podpreset * remove pod presets * test/{images,utils/image}: Add justaugustus as reviewer * cluster/images: Add justaugustus as reviewer * hack: Add justaugustus as reviewer * .github: Add justaugustus as reviewer * kubeadm init phase upload-certs: add flag --kubeconfig * portforward: Fix UDP-only ports calculation * chore: add network rule support in Azure account creation * Fix misusage of RLock in timeCache lru.Cache.Get() * e2e test support microk8s * test(iptables): deflake TestRestoreAllWaitOldIptablesRestore * feat(iptables): be able to override iptables-1.4-compatible lock path * test flake: fix data race in csi_test.go * Move podPassesBasicChecks() to VolumeBinding plugin * Remove pvcLister from genericScheduler * add retry for creating metrics grabber to fix test flakes * Remove tests related to HTTPS support for ingress-gce * make kube::util::find-binary not dependent on bazel-out/ structure * output go_binary rule directly from go_binary_conditional_pure * hack/lib/util.sh: some bash cleanups * bazel: Replace --features with Starlark build settings flag * [go1.15] staging/publishing: Set default go version to go1.15.2 * [go1.15] build: Use go-runner:buster-v2.0.1 (built using go1.15.1) * [go1.15] Update to go1.15.2 * [go1.15] hack/tools: Update to k/repo-infra@v0.1.1 (supports go1.15.2) * [go1.15] build: Update to k/repo-infra@v0.1.1 (supports go1.15.2) * Graduate ServiceAccountIssuerDiscovery to beta * avoid logging token in RunDeleteTokens * gpu device plugin uses EnsureExists addon mode * Non-zero cfs quota period duration requires feature flag * Use namespace flag passed to RunKubectl* methods * Update etcd to dd1b699fc489 * Fix some shellcheck warnings/errors in cluster/gce/util.sh * kubeadm: remove stray "alpha phase" command * kubeadm: remove the "alpha kubelet config enable-dynamic" command * Fix index out of range panic for kubectl alpha debug * rename some files * Fix minor comment in a script * Wrap errors on VolumeBinding plugin * Wrap errors on DefaultBinder plugin * Wrap errors when running Bind plugins * Wrap errors when running PreBind plugins * Remove field disablePreemption from internal scheduler codebase * Run unit tests 2 instead of 3 times via bazel * Add the storageversion.Manager interface * pillar_dns_server remove change so as not to break tooling in the near term in the kubernetes/dns repo * Fix staging/src/k8s.io/apimachinery/pkg/labels golint findings * Use EphemeralContainers for storage validation * Hold error in framework's Status * Increase time it takes for second pod to startup for offline resizing * Read PV object from apiserver to prevent flake * Migrate scheduler, controller-manager and cloud-controller-manager to lease lock. * fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR * Update csi-proxy to use beta version * remove feature gate SupportIPVSProxyMode. * Revert "Switch cos version to M85" * bump the version of k8s.io/system-validators to 1.2 * kubeadm: Update versions for 1.20 * Handle nil elements when sorting, instead of panicking * kubeadm: print warnings on invalid cert period instead of erroring out * CHANGELOG: Update directory for v1.19.1 release * Prevent deletion of namespace again * Deprecate Dockershim * Tolerate NotFound errors when deleting snapshots * storage E2E: explicitly wait for PV deletion after ephemeral test * Add vCenter info metric * Avoid unnecessary calls if other error occurred * test(portforward): deflake TestGetListener * Add roundtrip tests for metrics repo * generated * Let kube-apiserver host the storage version API * fixup: add podLister as a member field of DefaultPreemption * Preemption plugin to fetch pod from informer cache * Switch cos version to M85 * generated * fix import paths * add internal.apiserver.k8s.io/v1alpha1 to known gvs * update doc.go and register.go * move apiserverinternal types to kube-apiserver * Initialize scheduler's podInformer in sharedInformerFactory * Sort list of formats for --logging-format description to make it deterministic * skip TestClientReceivedGOAWAY * Count storage requests as whole byte values in quota * Add Stephen Augustus as Reviewer for staging/publishing * e2e: fix deployment non-unique env vars to avoid SSA error * Remove pkg/api/endpoints * Stop container before remove for Docker * fix golint failures for staging/src/k8s.io/client-go/examples/workqueue * Revert "fix cluster/log-dump/log-dump.sh shellcheck failures" * deferredResponseWriter returns after calling the Close() method * test(tools::events): deflake TestEventSeriesf * Fix typo in comment of hack/verify-shellcheck.sh * Fix staticchecks ST1005,S1002,S1008,S1039 in pkg/kubelet * Remove unnecessary double-pointer * Add metrics for azure service operations (route and loadbalancer). * Add tests for daemonset view history * Add commend for printHistory function * test(watch-tool): deflake TestRetryWatcherToFinishWithUnreadEvents * dedup the printHistory logic in DaemonSetHistoryViewer,StatefulSetHistoryViewer * Describe sts on rollout history if the revision * kubectl: Use Fprintf * fix golint for pkg/volume/azure_dd * test(workqueue): deflake TestMetrics * build/lib/release: Explicitly use '--platform' in building server images * build/common.sh: Remove extraneous reference to debian-base image * test(kuberuntime): deflake TestRecordOperation * prefer NoError/Error over Nil/NotNil * Deflake serving options, avoid hard-coding ports * Deflake port forward tests to avoid hard-coded local ports * Deflake cpumanager checkpoint unit tests * Use unique socket name per cm test * fix(azure::cache): TimedCache.Getter should be called once on the same key * test(azure::cache): deflake TestCacheNoConcurrentGet * Run slow kubeadm upgrade tests in parallel * Ensure kubeadm tests have unique names * Avoid mutating global variables in kubeadm certs phases * test(iptables): deflake TestRestoreAllGrabOldLock * Skip TestGOAWAYConcurrency * test(apiserver): deflake TestClientReceivedGOAWAY * Deflake TestSetup * Deflake TestHTTPProbeProxy * kubelet: remove alpha warnings for CNI flags * Add more tests for LRU cache lookup * Move ResourceQuota admission to k8s.io/apiserver * do not mutate endpoints in the apiserver * remove DefaultIngressClass feature gate for 1.20 * Cleanup custom metrics conversion functions * feat(kubeadm): specify resource requests in etcd pod spec * Stop ignoring unit test flakes, require multiple successful passes * kubeadm: remove the CoreDNS check for supported image digests * Use ExpectNoError(err) * allow to map the same container port to different host ports * Updating winkernel kube-proxy OWNERS file * consistently use double quotes in proto files * Deflake TestServiceRegistryExternalTrafficHealthCheckNodePortUserAllocation * add more testcases for GOAWAY filter * prefer double quotes and consistent usage in .proto files. * Improve ability to debug Events e2e failure * Added support for register-with-taints setting #93608 * AWS NLB/ELB health check config based on service annotations * kubeadm: adjust the logic around etcd data directory creation * fix vendor/k8s.io/apimachinery/pkg/runtime/serializer/versioning staticcheck * test(csi): deflake TestAttacherWithCSIDriver * Remove HeadlessService label in endpoints controller before comparing * Remove default conversions * Update security contacts for sig-cli * Allow to disable logrotation of kubernetes and pod logs * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Enhancement on the testcase to cover more possibilities * fix kubeadm update coredns with skip pending pod * address review comments * Update kubectl to use new vendored github.com/fvbommel/sortorder dependency * Fix broken dependency vbom.ml/util * Add exp backoff for connection refused errors * proxy/userspace: clean up and consolidate testcase setup * proxy/userspace: use waitgroups instead of sketchy atomic ops in testcases * Start CSI proxy as service * remove --verbose_failures from .bazelrc * fix a few missed references * CHANGELOG: Update directory for v1.16.15 release * update scripts * fix doc file * rename * partial * move port definitions to a common location * remove iperf e2e test ip family tags * modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly * kubeadm: Fix `upgrade plan` for air-gapped setups * Avoid the API call to update pod if nothing is changed * moving files from k8s.io/util/mount into staging/src/k8s.io/mount-utils * fix: return error with fewer mount options on Windows * fix: smb remount issue * Remove driver letter assignment during volume format * Revert "Merge pull request #166 from jingxu97/May/drivename" * chore: add more logging for mklink on Windows * fix: remove unnecessary readlink check in IsLikelyNotMountPoint on Windows * Remove driver letter assignment during volume format * Switch to klog v2 * ignore golint for some stutter that we want to keep as-is * fix bad spelling * Revert xfs_repair fix * Fix windows MountSensitive error * Fix subPath mountpint check * Fix mount_windows build error * Introduce paramater for sensitive mount options. * FormatAndMount unit test only checks for MountErrorValue now and closed gaps for some error values * Add more detailed error output when disk formatting fails * Split MajorMinor into two fields * update after review * use xfs_repair to check and repair xfs filesystem * Return typed error when Mount Fails * Validate the existence of filesystem before attempting to mount it (linux) * feature: implement Output method for FakeCmd * Fix golint errors * Update doc.go to show k8s.io/utils * Extract pkg/util/mount and drop BUILD * bind metadata proxy to 0.0.0.0 * Add e2e multiple endpoint services test * spdy: add optional periodic Pings on the connection * fix vendor/k8s.io/apimachinery/pkg/conversion staticcheck * Handle eviction of pods in deleted namespace * drain: eviction creates in a deleting namespace will throw a forbidden error * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5 * Stop setting SelfLink in kube-apiserver. * Fix FakeClock::Reset to always succeed * add myself to sig-node-reviewers * kubeadm: make the scheduler and KCM connect to local endpoint * kubeadm: Ensure etcd manifests are regenerated upon upgrade * Add WatchListPageSize to cache.Config * Allow 404 error on lb deletion in azure * add lock for csi node update * fix typos in cmd/kubeadm * clean up testutil/metrics content * Update comments in pkg/scheduler/framework/v1alpha1/interface.go * Update `kubectl diff --server-side` test. * Skip TestLoopbackHostPortIPv6 run on non-IPv6 env * relax matcher for ResourceMetricsAPI test * fix staticcheck errors in resourcequota * update test to match validation filter of pods * Omit optional field when empty * Update CNI plugins to v0.8.7 * fix golint failures * Mark SCTPConnectivity tests as disruptive. * Add tests for SCTP network policies. * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null * Improve the prompt message when kubeadm init is successful * fixed golint error in pkg/apis/admissionregistration * Add 1.19.0 API testdata * Remove 1.17.0 API testdata * chore: 📦 update generated files * Update max data disk count with new instance types * Getting rid of the Salt DNS replacements, addded / back. * tests: Refactor agnhost image pod usage * Improve docs for client-go warning handlers * Override hostname with instance name * Fix testpattern check * chore(openapi-spec): 📦 regenerate * Moving e2e tests to e2e_node directory * Combine switch case into one case * Ran hack/update-bazel.sh but discarded changes to root build file * Move common portion of dynamic snapshot out of switch statement * Remove custom hash function, generate a random UUID for snapshot and snapcontent name instead * Stack snapshot tests into one to reuse snapshot resource and reduce time taken on prow. * Quick commit * Remove snapshot class from prepv test because it is not needed. * Combine two tests with overlap to reduce overall snapshot test suite time * Add pre provisioned snapshot tests * start kube-apiserver and webhook server only once to shorten the webhook audit test time * Minor cleanup in snapshot test suite. * Add a link to liggitt's deflake docs in Flake template (#94243) * Deprioritize extensions/v1beta1 in discovery * Update cri-tools to v1.19.0 * Update default etcd server to 3.4.13 * fix(azure): check error returned by scaleSet.getVMSS * fix cluster/log-dump/log-dump.sh shellcheck failures * Remove azure-load-balancer-disable-tcp-reset annotation * Remove duplicate nodeSelector * fix linter issues for pkg/kubelet/cri/remote and staging/src/k8s.io/cri-api/pkg/apis/testing * Fail early on stress test and improve logging * kubectl wait add ignore not found flag * Support kubectl delete foreground * remove deprecated kubelet endpoint /metrics/resource/v1alpha1 * Update options.go * Initialize candidate directly instead of iterating the array of candidates * Move brendandburns to to emeritus status. * fix vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured/unstructuredscheme staticcheck * only update Azure data disks when attach/detach * Enable IP Tags on Azure LoadBalancer public ips * Add PR #89069 Action Required * Update etcd makefile to build 3.4.13 image * Update etcd client to v3.4.13 * update drain message to include namespace for pod in kubectl get compatible format * CHANGELOG: Update directory for v1.19.0 release * Fix issue on skipTest in storage suits * Remove file_mode args for Windows test * Update Calico to v3.15.2 * Set snapshotType for tests with NTFS. * Update CHANGELOG-1.18.md * Add logging if container or pod fails to be killed * Adding label NodeAlphaFeature to include tests in Node Testgrid * Add impersonated user to system:authenticated group * Verify running mirror pod has running containers * Only process all nodes when incoming pod has no preferred affinity * test(endpointslice): deflake TestSyncEndpoints * Remove unnecessary conversion * Detect change of volume attachability in the middle of attaching * Promote PidLimits to GA * Ensure backoff step is set to 1 for Azure armclient * [pkg/registry/admissionregistration]: fixup wrong copy&paste godoc * Remove StartupProbe featuregate and related logic * Make ProjectedVolumeSource optional * Track pods with required anti-affinity * Updating kube-proxy to trim space from loadBalancerSourceRanges * let panics propagate up when processLoop panic * Allow to configure clustername in creation of kubeconfig using kubeadm command * Make similar buckets for api and etcd request duration histogram * .github: remove stackoverflow from support issue template * Refactored pkg/controllers/resourcequota * fix: use sensitiveOptions on Windows mount * Cleanup kubelet TODOs that are no longer pertinent. * kubelet, cgroupv2: do not create /sys/fs/cgroup/sys with cgroupfs * Update wait function w/ descriptions of global node states, TODO for kubelet API. * ARM client: survive empty response and error * delete tests which use container manager stub * tests: Use Windows absolute path on Windows pods * Only lock statuses map when status isn't successful * Do not allow manual changes to manageFields via subresources * Change nodeInfolist building logic in scheduler * do not create StatefulSet pods when PVC is being deleted * fix misleading comment in expand_volume.go * Simplify and de-lint GCE Windows kube-up docs. * Add context to x509 verify failures * Read ssh username from env variable * Fix the logging message * Use /usr/bin/env bash in Makefiles and scripts * Scheduler auth stop using legacy scheme * allow adding annotations to pod when using kubectl run and add tests * kubeadm: Separate argument key/value in log msg * update ResourceMetricsAPI node-e2e test * docs(api): 📝 Fix HPA docs with addition of "External" type * fix vendor/k8s.io/apimachinery/pkg/util/framer staticcheck * Removed broken link to Analytics * Make CSI mock driver log parse more flexible * Verify that an ingress with empty TLS is valid * Update client-go out of cluster example * Update yaml files to use seccomp GA syntax * go fmt fix * remove some notes about scheduler/algorithm * get: -o yaml, json set ServerPrint false * Add test for `pkg/kubelet/util/util_windows_test.go#GetAddressAndDialer` * back out conversion of DialFromNode->DialFromTestContainer * kubelet: assume that swap is disabled when /proc/swaps does not exist * e2e storage: skip multi-volume generic ephemeral volume test * Reduce test volume sizes * support ipv6 in e2e policy tests * modify the warning log format from %d to %v * Update snapshot controller to use k8s.gcr.io * Seperate registry and feature gates * names unnamed testcases, adds name to t.Errorf msg * Improve running time of TestSchedulerWithVolumeBinding * Add maxTries logging statement, otherwise the numbers are really hard to interpret * implement breadth first try * fix test/e2e_node staticcheck * Fix error messages * Fix Poll variable name * Fix waiting for PVCs to get Bound * Number of failed jobs should exceed the backoff limit and not big equal. Remove patch in e2e test of backoff limit due to usage of NumRequeues * fix vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured staticcheck * Fix some typo * golint * fix vendor/k8s.io/apimachinery/pkg/labels staticcheck * Enable completion for `kubectl config delete-context` * vsphere: remove inactive members from OWNERS * sig-network: remove inactive members from OWNERS_ALIASES * cluster/addons/dashboard: remove inactive members from OWNERS * apiserver: remove inactive members from OWNERS * Fast return when no any matched anti-affinity terms * Update seccomp e2e test for GA * Fix an error in NodeUnschedulable plugin comment * Format Codes * minor logic fix * e2e test intra-pod breadth first logging and summary * fix incorrect comment in runtime ObjectKind interface * Fix job's backoff limit for restart policy Never, rely on number of failures instead of number of NumRequeues * test(kubelet): add a regression test to verify kubelet would not panic * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes * refactor(*): update pvc quota name typo in comment * fix: azure disk resize error if source does not exist * chore: add diskclient.Update interface * chore: add diskclient.ListByResourceGroup interface * Remove false positive warning in kubeadm cmd * cloud provider: add zone/region to InstanceMetadata * Sort kubectl top output when --sort-by and --containers are used together * add testcases for kubelet getters * fix a typo in the comment * Use v1helper.GetPersistentVolumeClass for compatibility * Add tests for managed fields tracking. * leaderelection: Remove doubled space in "attempting to acquire leader lease" log * benchmark-dockerized.sh: set KUBE_ROOT * kubeadm: reset don't unmount /var/lib/kubelet if it is mounted * PodReasonUnschedulable is not a pod condition type * Fix kubelet log message when starting a container * kubectl describe pod: use ReportingController as an event source * Fix TestScorePlugin: numScore should be accessed with atomic.LoadInt32 * expose Run[Pre]ScorePlugins functions in PluginRunner interface * Cleanup wait forever loops in pv_controller_test.go * Strip unnecessary security contexts on Windows * Updating the Reviewers / Approvers for WinKernel Proxier * fix the remote endpoint cleanup logic * Add chendave to sig-scheduling REVIEWERS * Adjust default replica count to 2 replicas * Run make verify with python3 to fix publishing bot issue * Document blocking behaviour of RunOrDie and Run * removed k8s-master label * Add example of using resource builder to load a manifest file * tests: Fixes variable expansion false positive test * revert auto-completed package names * remove legacy leftovers of portmapping functionality that was moved to CNI * mark this test serial due to race conditions * Clean up daemonset test names * Remove phantoms from dump_requests output * deps: opencontainers/go-digest -> v1.0.0 * Update k8s.io/utils dependency and use ebtables from there * kubectl: Allow --patch-file to be passed to `kubectl patch` * reduce type conversion and correct variable name * Fix verbs reporting in kube-apiserver metrics * kubectl: improve the warning message when doing kubectl apply to the resource without expected annotation * Fix label reference in deployment checks * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB * Update readiness checks * Update ready condition * chore: upgrade Azure/go-autorest to v14.2.0 use autorest v0.11.1 * extend ShouldCallHook benchmark to verify performance imporvement * [kubectl] Fail when local source file doesn't exist * nodelocaldns.yaml: remove force_tcp option which used for external dns query * Create Deployment resource lifecycle test * apf integration test: ensure no rejection * skip mismatched webhookAccessor and object * return err directly when nodename is not consistent in cert * add bootstrap policy for monitoring roles * unit test * move to cadvisor.MachineInfo * Delete ILB FR in case of changes to port/proto. * fix windows container root validate * hack: ensure go version is not specified for master in publishing rules * publishing: remove go 1.13.9 for master branch for controller-manager * add test case for kubeadm memory check * add more testing cases * Shorten watch restart test, run in parallel * ipvs: log error if scheduler does not exist and fallback to rr * fix golint failures in pkg/kubeapiserver/options, fix some incorrect replace of receiver name * fix golint failures in pkg/kubeapiserver/options, rename receiver name of BuiltInAuthorizationOptions to o * fix golint failures in pkg/kubeapiserver/options, use API Server in commemts instead of APIServer * e2e node: fix kubelet service restart failure * Mention background deletion in kubectl delete cascade help * fix bazel build file * correct the sandboxId attribute in unit tests * address review comments * add sandbox deletor to delete sandboxes on pod delete event * Check for sandboxes before deleting the pod from apiserver * fix(kubectl): warn users that flags cannot be placed before plugin * Avoid using socket for hints * regen * update build * remove serializers from codec factory * update * clean up unused var containerCache * cleanup: print warning message after timeout * Revert "cleanup: decrease log level from warn to v3" * cleanup: decrease log level from warn to v3 * AWS: increase io1 volume IOPs limit * Add a preflight check that the control-plane node has at least 2GB RAM * Handle int -> float conversion in FromUnstructured * Fixed potential nil dereference in hostpath unit test * Fixed error string should not be capitalized * add GetAddressAndDialer unit test * [k8s.io/apiserver/pkg/server/filters]: fixup go vet warning * [kubelet/dockershim] : Use local copy for range iterator * fix(staticcheck): fix static error of package `/pkg/volume/gcepd` * Filters on kubemark nodegroups when selecting node template to enable hollow node clusters that contain real nodes. * Move MasterUpgrade() out from e2e framework * Use temporary directory when creating temporary file in tests * generated * add vendorless to client-gen * use canonical import path in client-gen so that package comments are * ipvs: ensure selected scheduler kernel modules are loaded * Fix NetworkPolicy describe for egress-all policies * Export WaitForCSIDriverRegistrationOnAllNodes to be used by external csi driver repos * [e2e/storage] fix range issue in getCSINodeLimits * kubelet: add operations count and error count metrics to network plugin manager * fix HandleCrash() order * fix golint failures in pkg/kubeapiserver/options * remove duplicate path import * AWS cloudprovider allow nlb-ip and external type lbs to be managed externally * Move WatchUntilWithoutRetry() from e2e framework * Add metav1.SetMetaDataLabel func * Remove resize map code * lock-free broadcaster, use chan to ensure thread safety * [test/kubelet]: Fix deadlock in watch manager test * kubectl: remove the dependency between autoscale command and generators * cluster/addons/metadata-proxy: cleanup inactive members from OWNERS * test/images/pets: remove OWNERS to cleanup inactive members * apimachinery: remove inactive members from OWNERS * [pkg/controller/certificates]: remove staled func comments * Remove DeprecatedMightBeMasterNode() * TestCreateInvokeAdmissionControl: remove unnecessary goroutine in sequential processing * Add unittest coverage for boottime_util_linux.go * dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default * Adds additional documentation for job status * Set the oom_score_adj of guaranteed pod to -997 * Resolves staticcheck failures for component-base/metrics * Change the node name from "machine" to "node" * Fix a typo in PreBindPlugin comment * Replaced repair with returning error, in delta_fifo.go * Fix description of conversion generator * Don't create a new sandbox for pod with RestartPolicyOnFailure if all containers succeeded * add defer * SIG node owner files clean up * Refactoring: Reduce unnecessary lines * Fix a typo in comment * code clean for podgc * fixed e2e vsphere statefulsets test * Repair instead of panic when data corruption detected in DeltaFIFO * conntrack e2e test debug connections * disable goffuzz in binaries * Add get-users and delete-user to kubectl config * fix typo in runtime/interfaces.go * Return nil as error when instance is not found so that node_controller could delete the node * Cherry pick the fix https://github.com/kubernetes/kubernetes/pull/70291 * Find what fails pull-kubernetes-e2e-gce-ubuntu-containerd * Review update * Sync with master * Remove previously added '' no longer needed * No quotes needed/wanted for CURL_RETRY_CONNREFUSED * Add fix for run-kube-controller-manager-as-non-root * Updates after review * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Mitigate newly added shellcheck issues * Updates after code review * Update after code review * Code review update * Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh * changes in imports was unintentional * fix S1000 simplify ch switch cases * fix S1000 simplify ch switch cases * fix S1008 simplify bool returns * fix S1002 omit comp to bool * Warn when creating roles with custom verbs kubectl * Fix static check failures for staging/src/k8s.io/apiserver/pkg/server/healthz/healthz_test.go * cleanup tempfiles in unit test * Enhance apiextensions-apiserver in standalone mode * fix CHANGELOG typo * Mirror pod without OwnerReference should not be created * Add unit test to kubectl/cmd/run * remove stale TODO after this PR: #92204 * add line break when describe hpa * basic regression test of runDockershim * fix func name NewCreateCreateDeploymentOptions * Fix error check logic * Fix broken format in CHANGELOG-1.18 * Remove contemplation of invariant violations from delta_fifo.go * fix expanding rbd volumes without ceph.conf * Adding tests for Kubelet pod update functions * Update Calico cpva to v0.8.3 * cleanup: remove useless methods * Modify the kubelet document * fix golint errors for pkg/kubelet/dockershim * cleanup: no need nil check before range * Add lease release tests in leader election * Generate complete leader election record to resolve leader election issues with LeaseLocks * fix: comments(only create parent dir) * make kubectl/kubeadm completion script support busybox * Add node-local-dns headless service * Made containerd-namespace flag can be used when kubelet config start cmd * fix comments * fix: ignore dir check in csi node stage/publish * Link to krew's new project site * Remove --include-uninitialized flag documentation * Use canonical URL for the krew project * return success if cordon node by replace * kubectl/drain add support for custom pod filters * do not wait for node ready when starting kube-proxy in 'nokubelet' mode * validate KubeletCgroups and KubeReservedCgroup- Initial Package/bin/sh/bin/sh/bin/sh/bin/shlamb08 1651054827 1.20.131.20.13-lp154.1.71.20.13-lp154.1.7 kubernetes1.20manifestskubernetes1.20kubeletkubelet.servicekubelet.service.dkubelet.confrckubeletkubernetes1.20-kubelet-commonCHANGELOG-1.20.mdCONTRIBUTING.mdREADME.mdsysconfig.kubelet-kubernetes1.20kubernetes1.20-kubelet-commonLICENSEkubelet.1.gzkubeletvolume-plugin/etc//etc/kubernetes1.20//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.20-kubelet-common//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/kubernetes1.20-kubelet-common//usr/share/man/man1//var/lib//var/lib/kubelet/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.4/standard/b79f7f7c2430259a79b4528b8280d09f-kubernetes1.20cpioxz5x86_64-suse-linuxdirectoryPOSIX shell script, ASCII text executableASCII textexported SGML document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R0xGutf-8cfa2933ec1981c2ea631884a7b0c494b5cb3e84397c10290c784ba523e076cf3?p7zXZ !t/] crt:bLL ?d6eKLs$SO{,+L]˲ l +Dr.jD 9Lm4=Ƌw%h/ TPCMX)J 7eeX*ڎ*颀չn6O~LƆJ牥K4`- 2Ag)Ȱ8AUok~"QpgX׊"u: Uv0?=ӕo>^E#ژ7;OZDhmB,Υ"ZWG$&' #1WoٓκX&!q 5.Ъ_ υ(+H.hB/|މ{M5A{G z͆r܍F)7LӪ!W, BLf_`l38+M:ᬵ#sf7^Vߝ7mlŠg'"2ӈXNvBŭ댳qDƂa9DrPTX{n'˥=4v_Ȕ'3X$3S;tyJ+Td+~Ϳ⦙ ~Rbq!W5j56.tO8p)@P{@ s`ެ[ _g̏kcG1{Ԩs 2A{]B%zg/M@PVFA)K8f:ΏG{Cz,wT˥ї̒Ia4t;vP n3J4燛 V7|()Vx#4VX22 pιJ@ze ajIJ~@ 1:D; h6cŹb{@^X}*Aq(~W$0>{58DzaN|.LM6`p"*ɐSs' 5f! ^0Rf2\FU)U\"ϬOi9-4d}XC_i%w1X O{Do^4wmWK}VD8 =GZ'ڕT`;炡m>9_Ċ??$v~9|g%VOn՜J^a \Efףue i{rL _UM1vbTne񚴔Әt@ٲ ٪OW$ ~1$W5:ھ^|00Ms>2jMn*?lM,& 7on\>2Uo_;a `dΏ:V7L^>pɗԩui3'CW<ׄI7#cl29'Cu2}2r^)[2L*3fQI|OˑHLG{*%c i-^~tbVcIӀ觕 򤅆2@GY>`3@AQh%V7eߕ rfw֜-qFF(ۚR^U86x+X.BXG"R北 yniDPh\'B*mv It+I).C3>P6hyvEK4 2IxgK g'oGc*t."M8\zӽȑ+n.;N4N9+`6b LRB|Wo)Yz_?d/جd8z=vJ}V'˄a$i@EzF:EָM @thXɵ7KW&"`^ϑ=|mc.Z froUhClݖ[rꀧ=%Fg* CכÑS.P+IO7"5ߠٞnRLdHzMr?Ly/2FdB\<瘝h',e۹v6A ("K2<v>R*Xoue̴V塐Y@72/VS|]K O;:?p)&:WåҞ}F[z nŒ.cn} y"D(R]"~*='np9Rɖsr:}ϰkH[mo-ǜ仈EH4||2ȘA\NC*/K ۑ)G=@ɋ6f:len<v9yEf:XI"&#-Kal|bZO."* Y] _}ӈx y֔_۬')1݋Ʊ] FN} A).BjٱRyk)SE~^"0FH{`E0cxߖkXހ}KWvh Y_۠ 3Ȉg`;ٮ(F? s쇴 xt$ F;7_XRtl鿃 " C\ְnPRS7/ڋ|! ~/s^v\|NE ҡUAƽ TdUP`S" G[ t(ٌ"ag8]_NaђׄTg|6fʰW^G&Ǐya5h<4Ѓ5]V 6K$ Lm~^.IFNG#O#6K,\A{ 81"mN/ܤ޾-gPcLS٦^=e%u;dGÞ H\Τx;eV [dL.ԡ݊0v g}e^f.6ϑru%w*} jX"NĦ)݇Btkϰ 8ko@=߁86!Dk61ƈ08jp<zkpo|=X-C"5>4Ծy_ԥ5JeU$G$ 0&.!T(µ:}2;:8WuA_BaHǵ`}@e)91wfaDG37oְ3|)`nН/?Tjd]5=׀Q婚zTc4JƿPOC31c /C "3>(O-a:D̝% vDZ Y_HD.0Ažܹ 4yPZiQ:>eX(˛AWZ7.2۩M[S sl_+极}(i㲣C%Aeg4$_g9pC))<+Dg|8ow-DJakYi0Ia]+Py!A sZ#KWnk;cuNFw*Hzal_03uցDc`t~t~(o݂WNM2|Ŀr G?ĔW޳;s;lӃW$q{A-T>ZfY.D~/Rf45G扟QMlg?m Xcr&IM{F?늮$3D(r+VǛ;*2"KlXZoW? #s\,X1KA~JIʂjb{se(4zw >I:*}ym B\ &7-lfz\rWs]\>liXpG@;#, YY !yʡeY4)[DTK8._*2hc\EѾ[kz:tr<&SFEOm>>m P-!dBajVzSEC~mRFر^w^Tp#<^'cKcB?DŽ^?:pߧq8+a\~+C<K2"C"-No٤y::A2q%k/e{"f6#T "jKui5[ 8:z@П^$=L[L%zdž(.|P#fS+d%GL_ta5UElW3͛kypYH2&CwbsDoHcpܝ3 HxStAHy,TZ<2ZƕhD P`~9ct)6:vw7>z PY7`mAnױQ! z9;V| PH+[j˭ٯ~@gHOR L``CK*.X6q*yΕ)GIشk,} ΉC?@A-ѐn&qCoB"~MbiJ9PFO/_.6`铒E"eۅ@kJ&˺ce;~90oⶖ,' y~X]JZ$At.;"PĦ8B8~3*P&ιԏg11~6_ʺHR\h}ZTyCFtvNm>pzr7J"$]A<סa ‡Ʌ19M$6 B_&Gɿ} Am٨"rgp.RFc+ｬ[LX,TrőVV @y!DT^0D_)!o.R6X V#Ȫv1y fdb&`A4}jP4)U)o-%8[O Ws1p<@P[ۯ"[ /.8Z`yt0z0 /ޚ ڸ͚cЉf @ B ;tR5Vs)'= ,<{`_޻mDER?;߱?R% %*T%t<SʅDiA_jJLc7WɫS <2{R (r%=neGuJlwƺk#,ԗzCR<}d?ae>%c8+EOxQ*7\D˒8Y,,xy Ru?GSVFCFI-ibޅ21BT+;uNLmF6Mp3̙1QpK#fPfFyj6 V\^p= ̨յ⠤$~J 9=l W,vН0ŅK7Ug9U0U7,@Uo +3 q]n{Y`n,nEk!JRKv;Cj&jP)>k{<r?Ѻm6)!ΎB˞>5IeN4=Y(*fܞE~ΐt'IHsvgJ܁bC)1({_߉|;^W*LI3CN݈v)e7@{`d#'7ߩQ 6/ZiBí3y

.io _) Č^|eoQ` ^Z6Vӫ: PPe`lme~g  Tm8͹ 䀖Hm.G)uUy +~V9Juݜ,)nmqܮHq(eat K yܬb1I1L">G|o;4Â^O1C hn3{^:i*qwpMz6ϛn *rKxkm ,PE(# 1z'J#'͓b-H#O Ux~DO`y2WvȨkH|؋W6cU1pȮ->[bY(8j=T 7WCJoI̥7oADR~R/ AW]g?}b.Eiҟ~?el1U0`dž*V s~}ٞtVJ30I{R{+[ճS#\>w-]H"jyl,RwW'Ĥ_IE@:lTٱ޾ˈhǤmQp'JI:gu{"3A0w#&MpXK&~}R҉b|I>)Qx H-&F*h[eRVnD2iJG Vxc㌫$YS™‘=1Yb۽hZ֞A7ZŮw(Q`E,5X\;fbKD7Iۀa:-8)-pyO \HQFy%,;wt7K53P~ Esb17'-@ߧDJ,!ƷoM ` WA_E@SLwOaUS@~Pثj3˞QѶL 2FO*f kxraZ!V׊ N=wfK_52h{. B3OځWl!0J$BHMf䬥Ucx4| \HyE`q%jȦG\jOTOaҊ >e K,u$,lW>bx9zjÓYĺѬR‡6u{ D"fnX#}2ޢ&S/y!"m@-sI&-r[LwP$stBjI"QiB#{ЎyhnlT'%#X8[d,l{X=ߦ?U F_ FB3ҩ)z}ti(ZͿ\`/5^1/~?d[4P%tr0n 7 ёe(2]WxGUt\Ҏ|Y= !Q _eDL Jܔ`“%ȍAӀm#V]#>at$UM"8cGSf͹$HL:O"֚4ufm:++S>*z]4Us;e3avuz B }/וlF5&ze|pt#AxFTtbdZ.*+禩epSĤ} HYvId&2 @VZ.# MGWȟ>sB+-㕏>kWP JLu|v;RRSр/Yo{Z`hJз"++d3A~@&:& im圻?=]Ճ`ez jF EA.`(aKV$a1/wSSyfؕT׀KVJ(5y>uEa%e՗}ih,$Q{.Ulv{ )kUMXEPWk"uJZ=-d1)c`Dv"?@B 1E-bdH$U od307oTڟ/'..;󆣬 @ե8i\n.fchD=ij(ZsT՝[SO= >?n2̜+ a/K1<5MNjB3Ǿ^?>~b:u NnKR0wվu 2 yIJk S ]l,z;`azvd d+Ϭ`b[pKt4O sQTCHyf09$R%_}ڇ)/Q!1zL ξfLnoP{df/czx2.gE!O)f8*?0#@%[v^,sTGVݾr"~G!Uٺy؃hXYpQ<ڠ3I j-4? -JNݮVF ?꧟ 94^.|!T8&+wKM4ᯓN?-kpH6j( ɾW^+^T<܊B:;1n֞ۛ~FƛӊR]xZ/,d]2ۑ$ִpu sLq Q¥80< {=2[HEIilc̱f͝a2<' VnHC;R|,rg^8t[(>;kBցQ[h_)V8TQ/PLx[+X=Fb{3nGt#"iKèMaU`B.]]w=n)rQrXHeZ܉fIf() ,M}X^:<?TlAe#N)PB$onKȱPrlN}wgB峟zК.*n E5T9 +04Na‚y[xᇽ3AS䥪Jэ$O\߁]VIkiDΥ? xp79،){.v]W|7d4k8C:3;zSZjKϛyj,ڒGP Pb#Rwuv~:u+q݇{ \0 h9)&z6VqX H$ڈ.SddkH_;P֔ @." x(ےJ WKӪº`(PZQ1hИ\Y{D84 d`& *%[`%m )/XIUB "LunM|z{lq EeCd({>8ޟ68UfCw5<;2BjB&=6zxT<6 40Gڧv^ *]?xX+Lw+)G06~PkLhZlll@89\"}cL?B͗[%Fn~ԙl?)OҢM9Ns=nEF2Z>2o36R`:W"5@*J"P ?OxUK@"wjFqx;+ԟ,3윪~G3rgAxgKE$ lOkM͚;$MBRT6`,ۺɄ4u ~yj5 LN604G7k.M|PI[(Yc!Bt dLʸюB:XĠ/AptvTJ֒g̅QWI=$#k-@5xj{LIEv6J+iz$Ypj IyEuh}jn`&׃fW2 d5ӿbqZܑAh57- m_̿رVm Otj(֠[z q51XNɲe?:4r Y?O_޷+L̉mbD1=]rswwƑI6j8 lW"֯.} KhG1wIH=ڥqǴɨ%ʺ-MڶrX3)i+G*1B@ 'AƄG=)WY]8(g.b0~5Q*Xċ@Ň },r2HSH2'/`չI(ay41b ,{ pL8CXyllў;޽σvɀ0̇b1W ^``e[R6|ioњǩn>MaJ^ص5VLEif;Zgd,= $I$~E9?pT!>:T_RȜ*}/`82!|t Ť9AB&Mހc݈/ijo eYCdOm ROt2̺N3ď 9/P,5'Kn+˃^(=2.~sKTܖhU]-KUa!%+Yk}=a8:#&^{,e3*Q2"M12+ROorA*> *&:6듵+ u݄9E޵([vr]+jrp%lWOuٻ렜K<ƶdǰ0"z>W8q[D#b/OE,[TO='ɺ)gtiGZ2e:&rw":<ӝx _h5#lpJ7WG?p;E=M&B&o7T{_}4tع#KheAd^x>1ikҡ?п!g+tJ+?w4}R`zN]Ol mCzp Do\z%8,`Nv/? P2Tlon|@u'_1_Qfç hVhXmUk {j>)^Y_}Cݝc,sT$[^l*٩+j7#YVy*x+&ܿIæB`QiohVeƖBȡhOvj\an XsSKF,rAMdOqV >"[7(uJðݙ͇0;+[SÌM#9<%89&u؈-i-$j#NuyR6,"MF|!sG1ia[lg+쇙Q9"Ubq"ϝ[Uye8Zu1eXQF\fg6ݪܑ@8q=pBEX?B05lm;g'gb{hP>?:LxEM?.t4Qz=;,Qpy\]b]mjh-q(Q^:̨T- 04RtuM T^ZVt0]\.0&ֶSQ% =^2v|Ѷm;ٻ*Q @|}΂|Z*[ywP QXv7Bnk?I=Y}[x;ٙ #'8 qml?1PruyŪttݕ2haY29W=f$J)H媽ތ- ,4j10 9|~_Bo![Sn1t]{W'-Dq7v+/npZ=<@t/%sEsiߎt0Ncy!>;UȬbZ9mV-MzDnxvsha矯Y1':mOh[8msw;v7ۛ?ϽWTv7`\d-kFu(Q$;@NńVVX-i`3R\|C["]%o3{n6>X{0nHYX+~ ̝FylQ?7BY6:ukNchm+3ȣW SהWgߛbͿ?2ÓOLe&,Sn ʼ_kW>5-{»wɸU{b)KɗW:wf0F r%5 hhT !2tBD3 pCem =@l+onjڣ )vY.I aWҭ,S&*oA{9=H8VLR.8T K PwʹVX#r~6;se;/Rg10Q*t! "j&<Oο;Z/,1qw,d83BEF?2BK]$ݓHa6`7wg. kf%R%!G pZ"bu|9~(\'ݢ#p>\̗?Fh}w##8@H* k8gII'1ˉ`is?BO3ʒ#ާpՇ|#iZIEb ^aQi[x&<FQTlNi{e)~3 WO[5_!pf-3R]r; TL2ԴBO"s5؃ekv)Sm8Ċ9壢HE03Umre,*=ChSۜgr>UϸݏSV#_Lx&QkMM; ^[vÛiDvecȔKj,mR=k {/g܍MY| =@qڦoyhh2h3GXS:C5&[k,{!Mp Ƞ8"cb g녺 _>Pc6BEb/OicjDo Z=?qmOjo9-_ZU[W4Fq^FFGa '1ǺyDMCVְS5-wYf6*(AXRS|ksn_/'>]()mL6<9:L:!\r4 G˪vg R Ї~ו6q[E+8ӓ.j-q]+ZNgn>׌oqve7^ͪGDe,ѧ_Rn#@K$u]r]XY(of5824˃Sk~1CV 5Ӌ:ft_%efC߈V.ض@4ߋ?~/P4ϗ]oէ@ևafbM)1i[ =ؚ>ٕ?#NHoۯHLNx,}>jH#`Id.SFB4gkZ_7l+䕨ȰYqSNVǗ';޺`5o0PzzIb-Q^3se#䥃OR~PF9xbdBJ, ^V6__/ .}~i-b͸ގI;eq_cnem\'6_/kw(t4I%Nva˯ᝌ#|0Z^PY Tk.G7D! tsdZ=3n.Vp]E?)o>s[9_zh| ɁMiMZ)O6ZMy$Je[PmtzHۏK%H41!qgM<`UxɊa v+9 }2Ief~gd`fm.$bgB,X?eQ2WDk#jvVf@V"yr9#8DwA2;4,fVzGj&MfA]BV%ʥR;~$:;jb01{5 بPI~>Ώ`[h,48TxƴEx(V<ӯE(6m9`x} ;YyvJB'>nwVҎ"3˴\ }ر?TZ+3#1NNB jnd8&3V|ď_8C }xyQgI U|3.jNhG戮U9ãyow=$Sank '˛B ͐xutph2AŸ;Y!~Ⲃ  ؝E2W}mY}Cr%1XnP#ALA6^XXV\/0|J /h>=_d.TM+QE>h-]%UwlqYFp{qmPޣ[5)=,O &}U78ѪNQŰ'D}S!Ԍ~w{HW%Hz%nAפ\tkvf>9d69T?!/V uQOsar oA5]PTl?&7GF|e9SAim?( RȑT-0MDV`89$f ŕ%mz>[?bqW 8/R!mer0Q0jI*+vΝ*bU20TuF݃4r kF}5ISQ4atu%I)?K J6P%ÏF%<+hKVy<cz5* &B殁$j/M $"FT{l]HsxxnܘxnԔ"ߥȩz,u4XC$C/f\1& }^okP` l=A]+9Z3ل"r[r̻>PfF7&H`8BQ9ۂm VsLJCF~Q)d崿I,\49 .!/ xԈw i 1:r ښ.9O ޣ'̄b*B=Z/j*ɟ(cZ~^dIF \ \>,+ALqTY'wɑjf&e#F]Hl8Xfz]e'u4[ŻsW,ߡೳ]m>S}='!3g0bOmP!ˮ/߇4RF(ucBM$U9cg.Θ BD] F? j o{cwΰ*) K'ɱa](2LN\U/fՋr~ѻDcv 9gr/I+9q)"7,G>FG]K  3_5169BKuOٰV6g1O'qL=!fAT:m=:Z%' nKԏhN??, Fo/MJg[⫾e r/O: _Slb鵞X~kmzY xɯ[sTyxqtɝJi5Ii>k>B-;㙿3$M![q]ـ0wU#Ѯz Y/ uUN˽}n >El?#h3fiٴ*zi Əm --[ڣ<=ٖ7`ʴ;Ei~,vtr v3K}=PUjTx1ѷHtjtܫJvSŒ;d5(gN0I,ϐ?+E}}_',@dz㎶ {7'2S[Uh$pKQq.dΞCv [|mq)!!Ztw"ro(D|d֞,[{Pg0l0\nrgA"ltapq|³Taʭ{L؏/ܣ)PR8Yo|+$?#3B&DdR84QgB'=d| `DWr'Cմ@vV+ ij)Ԩ_RZJb!U,0'FRSf({l7|cbG0zz|􃡺EB[{ϬF< RcNGf ^ $wf=᭤ݴJ ]ZiZljF[MeH=擧gN|+B+Us<##BU%ZNݦ[W!PD/һB,)`$ZM:gDaȢx3l~dLήջ}i#WЊP`(f:i/Xb{?̧}I1ml jm\KV8X,K>\j4B@9 "/Ro>s]ͱ#5 -lD|۞ՙtq"@onF2uPCLŽ$pT=z[;815߳Aw|5U9x\zIR\^|9?4Ug-8F6g!E.Y"06].tIiHE F ,:k֣UklZS&^B1i M s[W7ن NqL%#Hlo8Oiݴ9UDY1b0pp P.AjvKDjwVk:Ͷu[ ;$p9 J{w!b X De@qZq3r   Aze-9Qe)N^zLe/U`x_g0{—#d@J+RH ?mӲ ҮfڥmWu/k5@Y~Jr`0VF(5)l 5 ZbMȎŁTy7 TV<tTrONUYᕩW(Ќ fŦ?-_+ChLo* =OQOx$!.* bB~\e$2z6ìK+դ0)D7R^ٶWyۄLȥJ15Of&tylPhch>qs# @η9PiFd;\=(N׌9TKMy[޳V=Xv|MRL,e7Z/^SW}UǞO )˔+*s8VF=o KjڐZ O2WGj0e!Ufڽ/?HbNJ/\]3^NfRNgm6m+G/ʸܐr# (y!ǨD5} $٦T{U;PEG.;w#ηl!AE,SˏOz58!G(Ho tj1gm@ 7`yNL4~9g:Z<ѹv!n~.DW  s`ŲU;l*fO(eYԵ JxO㐞آ!-U%傭( =[:O&AtG͑GEDkb(' b]ֿU p|izcPėaߺKn o|6shFƪf瞱W^eAnsFb|kfOö!܋d_t{5%[NQ $@ 239t'C F.Ü`.]DbGEqI:Ԭ;?`_7mʔ- 9v> D}ZyXۚZ X{N+ M4='uvw)lzCp?!_, խ6gtW6w`ݴ< -|OpA.BwSʯw$ut+0'VKmJq9%>{_T Ԋu + gKwUW3鏣qsy(d 1]`KmAy'NfGШyt l[ODlE$i2p(tvꭌs XE#T[R.*( hVa}m.%F\9wT-ԎjvyV iP'ZŐS:ko1g^W,c&&̢,ndnY Nd~7 .\&lOD]Yh-d0*d"F3yxlgΎit7jI7=%Z͋fE'DJ8,x5=DHLb;zDPbs y%xEEvib $Wx_xh!4K~ Ϫ oGHɸ~ aLR}J=[SjU=}"oEK7|^E2pUZ"1!`a҇\lA>7j6] pM>[~iw*i=⊻煼Y _֎q3Lv-bO %#='kL* HW|빍Hfg[nEv1 avvϲ/S?kʹdf m!!A\uWpGBIl(@Kho\ǀ8$85"](2mO-cnNQQ@wd&qE{/_;?:'ުk3N:H@][2>vOcr\z.h=,x8Ѫ[ ?.x&Q>=~kmd+ZzUBm3Fx0edGj3d-\iSCk@9KL>%2lu?kIaWՒDcqIbb7}L4( gt$ 4^ʻZ:dzJ~%ׁŶu +%|2C9F=IĜXlDE>Z; uZ]&xdX`AwLҒ.N:*Mmۿ'XdҐ16[G ;WQ=hyȪsH*9Ol28I kn_3u\wr`7q"޻F8_=+8Ay`/&P\M,2"=?Q|\c](C`5l8^B ]#ܐ4*y)vA5W$!4m$׽|OER;KM `wbPJ)ŕ~&&]z.w66!WvB}WYs/3-W!Æ|h݁~("9.z|QZoiȭg|J¤ǒM l6TGG7 }B+5D78TY<5S7FWW< 7|IT*ܷϥ:'FwДʞmx%_ ʃ:'aYw 6-uW,ϪOW"K?3{?4.=J$GyX-, ȧGlx^$C-f h# Qw§"=|djH€L[TZb99s! _I{{]ʛ> :YY)Ï"k6#MǮ5iء:w+fyS*qU§ 'XRA Wk&7֕h 21~si5KЋ`ZmgwqR[vBn¾S5s,%Kw*gZTۙd  @(ڞjn9/"ύ2B,Skٓ闔/) zz̻G[ɆXA4׍y<6_hX<*mW?99m5_խM~}#bjp^F|w$rPTޤ>-*  ||g֖w :~B=ejP []\2Cfoz,$7q& U#y=J5IH{Xzv6Q\7#L`Z>n8 wjX-r֡0,N ިLQ3+X"J'/Yjd8X4{|[渋]46Y6%L~ONGp*cN#>__Ou6ZMIXs= ~-" d}HyWykܾ&4/M&d49`A0'貏<γԥ, #8 lyk wHdMA0W ;?fIEV+)&nes'66 :o@0D(jJ+ZOUöv jGTbHkĥTCgM?7p/)כD"y{/GC8\l7~&~[_HaDT+/D23Lk_)A,h27QO[GA|!Rwxf!6:b>ug,f.uֈ$=]M7z ?A-<XuoI/5f4.׬ ܐݤkwUjNKwIZ dGuTU*;uT5`m>m="XяWENrdI^I˿p,f]!#m^dg-KlI/&jҶMՕ'=BxK>a#_찙<PALC_:zUL:/CpNXB4Ę6yLrɐw:B!ǎ 8%Fp Tm'g}jg:a1je tTD.ÍPꋅH~`^ks>O溈K.U,n7Б}xKڻmP X@6@Eנ \! O2|]hTX q"j~R;~!Ͷ掠MFlBy'L7|os=LV<$ϙ^ۗp(*e]9]1w5eȠaBD>bZUw ;DsHHyk,h YV519}KXFH7N*rSn.pp&3Ljdߚ LTi 2=NPo$RJjФ19ۘnM_bfgs@雺j$r zHia/3%u4D4$nɹZ[S'JWl93?)O 㺠$:8y F"Fm c8ՅcsKm. P)nn0$SjJNVW" 䌄w~j0 :.iAcɘS6}gp$M52SЌ"o~)b+rJ4`2$#=p]BTU #'#~ D[8(;-Ȋn'7\Ij&^=x^,gZӌ,9c^ 12O(^w]T;iؒo f$5hOgL3 `q{uiI!f7-^5Ryn 05zY} O,9ײ `J^OѢՙAe|Ax`quĸ BE9n}""8mgT!*^"?Aa ab@V ZdPR'ܗ\ЊGƷtI\ܕ^Z@TDiXU Jz9 z_X(#q[(ټ7&n~*Mx+k ]cMjhI.s)9&b"o-rF2p+Dk] EGV|Z]OS`- T So:.=2Qpe^;#D& zٮ#X 4ɘLe\GR+?ܘ}Y?V }s7ʫ6lg\} r޺$-Ll< "+f1_剥>Ng6 @UtJt?4-H?kA@3&\3׌G'dAv~=~ԐO<5rB,$qjsNgNGcoZ*:Jן5]ud Zn/*#MGքpH> NMΤ1ިӢg32#CwÎrn8X80lmoɜU*=>Sr@nA}+gF4@{S>#xY7S=*k=gn[)JND?qŋ_FPG_j+Um/7ZB5ǖGx:Gj"oi ѭ !/qiߓ9Iv?TRԮao&$0㮜EF`rd@QS޳Jca8[NŪpcߕ1j>B]q8l58_A;/[^l@ wvPAIx(Ap(Ko^od)pF~pOĿ%c*%G_i.L5,Z*hYtURMa6!G] R5Mc*jnI΋M x+F%30W;?Y.J7 D4(.ƊIH`k>1]rZ;Ԟǎ&C^}M~ht62yzs2cỚFYNBZ7"v{2~qK!̃$M# hMf21o(]ip{|wmL)CwHBtDE]|Pq}NNC==`n0M.X%ca0بS7PRJ-vU|aX F;-1S|>||t8rړՠL9WfeTu.@>̺ w24 u2-{>nIGQvJ TnitOI?HlC֠Q刪L 8\u kKڭ&ƈdRwS|@EF.Q/O?F,D\PCjdjʺ95uK U2VP '3Y;z#n֠ )$X³+<0}PDqG;`=Ÿ¬&G*&)y47Y RD+Pje<[b(W8-yڵ$;27&lHeUkH)B6UnRkJV=Iéù}\#[% nF: ~Y?xAl^EK*nw[kd gJh\ldû[ N1IsFqk"uQȎq<=4*r%}jB2Hqc֖PuZ;@H J$4@UPH.En)YhZiRWfGvQI&6E5pKz@vd摙̐-m.)%!ɺVpGhltq)4ZjBG.UvNJG]poAA< 8C K/X>oPHy/^jqt: @Kg1A Db!WMm.OA^w}1.r㘙dYS}%3jsy7VbjoqAUL$8%g h}Ʈ9}>5} } Ԣ!pKLΥɣȆC6lmr`~qHqTש-~ "EƌTҀ/9!8 (ӗEe1{es 2g2Iwvĕw-ܼA @ u1T24$P)%+2] $-8j>{LxE=[Sx*h--r2 1'a@aL5\``t[E%x\;ECYx?C@&@\ 8<;^&ɵ\~j&ȝ`J{؟wTf]ςh 5K-QfZx-Isƨ2aӦFq*+jwZHSKʵ~eLW'!80U^2Wm-p&a?-Jmi@klI_ =ZiR(YmkNM"򎙩kJ?[40PS3/:z|Gx _?K~\~;Sn;,Hѝ=d.W1Ic3:a\CLWT38 Y*Cyfq/Glcsf ,CD4F1;蘋QkBu-&~.k^-OQ~,Gh Uh;p7|7pթ*L?jԒ[VLdfO"ts~w.ȣ.E;YX(}d..ZRmFqz;㾀1Kpk>^ ;Ax!nݙDq$ | ςowS?@.Gy KQI)&ve.kE=;1}vJ˰\>vaݧp=Q&"pÁɺq/.X{ʫ4jj=SJEv_w5^gPKHRsn)9=TтDL׋-[MѠUJg!߾ qbP6楝/&S+]q"X# 8ԫrV/bc?ttC}ν|^rp?.Z֢*wQyja?S:O8989 jcHCu'f p3蕛^}qN c䍕0C[qm `y!fx8|0_>vjsw& Rm&R)PQOZ~xQf2;U~G̞C9sF:8)CqVHH$Sw .N[Jmjn8hC9#W )jAk4-`ze*]/N$85KreZEa3_FhsZ#ljK>_sɂK6R,{3ͩ0yq>oI!zݚ”ݞFZ65=okK! k<tb+T'=кߴ2ldH,PIi|oql}ߡ EN{e-$ `J4 'g[ ZKٺgAom6GH'&iNFt!?hj#,WL.K铻1$u=:1s:H?VyЉT UKq#ya%>ζQ` &o;x9K{pvi}2چg`Sz5(tG^W& h0_EU;u*2@1(1bQbϒ, S'oRſ"Xsg߾3 Duj!8F @ ̞sL^@'.B670JDWr(~N+fCVMhs{xvs S7<2An)0a(x~' DGͳ]3'npV[e0ca&%0}ok:]QAlV0.\QqX8-Cȶsfq/C4#sM/%B+/7N'T?ׯx1 ǎsy?/K39inƠpϙl O#(8n*v Vu/@sj|⸩t:154Z)=5x3b?}<` ^cྜ(FJ@D@CXf*K", ?y2xx J/Qn%:e0cͼL{x2w?l b׃`szLzLz]`EV^ӫ(S:Ymff"PkE#Ҹ$`> $JàR{N'1dAd/@wLyE۵<&UTGY ˠ8ŽtqHF| z0^զ&[7sp-$:+"6̔2xPrd2٭Ki.ot^THiy݀8'$¶y|`_EB7ЦU4LzV#ԛ 76_ɂ mޛAzLӊ峿HqƵ)ɚԃ3̲Ʉep0\'6 .9ɒBw(MK^з }iFx&o~xR8heU_TNٷeEo WMZ~GK/+E/*G\A1<>MxZXδzibڞr4rs6egc*Nz%%5tgk=R)qQM&թWnk^7vo*Yw$swTTm'"FXzȓrdk&]8ՐɠOJ7i$7Vbp l2EKs/3ҫğ\].PLe;(> ^6rUUvw 1OsaUGAm/l$nṆ' Iːꤷ^}j,M;1_>4L呾 9 Q[t)7w%4阰* w`:aE(5<ֹwdkLեo 9pĒ^ݔW+gWdSɞV'HifME:o8x$UA_ %خ1ƙ |Y[3e{[tҾZ?kSá${gG%7-CYwWy#G"(L\K6nT鯹8W$uMLt&jfa `i~])M0K@ EI͓'1 =U;,(wRSǡ*y NxDRNxc Ztb3-Cm,ƕy|!3d_Nܽ0?F?sXwwȦ-~Z[nb4.֍ 1?s$a_$DMF+pHiYQi=L[ޥ Dw-cSxاMtQ.Q"A %3xZd/qHNw9 /5aSmFyel²@X$SrNOw)2[G z:Y,Xf5?qj֩Ңf~ U52nfO)@^%jmB k+h7շ$Ӫ$6xѺcݻ OyRq0i_в54"sŠ*/ /l^#7W6l 4oizSpw }?tO(ž',,BbE}$e/$aߣSmrvc0aW,Tw`trS,Jߦ_2dmyzE F'Cw|݉]Vu!ʜTiu%f=L"/*C9<#栋jdwdy"ݶJl3J!&u) @s$W ԃBr㉢PEЍהGnAAc"۸A5xfxݴ1:uB Tۏ.Q@q^‡᭰ ԩd)Α礱(h|9Ln 5x35% .G{]_hCb!go2:k"GKsddfVXbCNx[͸,/Jk S m1` bmTqenYhv 24(ebt':WՀ2t`ʄ 1 3iOuZy*SGϾJ/w"AA,z֐ˑʹwdȱd?Xi63![pJ N r3M]e|P](OkPg{'LZ ǜJN6Y)ol&*4NlsJe☦Dr!zOaq3ٴ# 4o~/z{1A`6~ȳ9ͻK{U/-m#N6$b]3 lopc k@ fK󋗃{"[rO.q`( < pHR2KB^Ǝ!nGgIppEMPo_j1T(2h 3cpC[skB׸"I?hgvb`s`:{%BMSEܣ 3p8 {uB=[~A "QP?@I;Vpy1Gt]0ܦ-*NV;2U>ʶĖ!ld}% znY4f%s`%&RIl9k*K'СjqwIu (9 Zx&:AF?iK$xx.[*Xl 4p/)ß<'kꧬ xM臥'~sIvk,G=~!(!p/ V٣H;_ڌY^t @G=GSFA#~n$oD G%'[&2HAp O B+ǹeƂ:9T׿;̑x́@,20S3]#7`}q XEPt$@H (&69vBi!sQtz;(Ѝxp?TQ.TkSKΞJ:I.$˔x5޷F/9^0?Mn&fƦbXVv&6˭wA,k gIfC4O?B  !JFC"3DG Jpd&*@?m It_F50<ċ{Ma,H8ohsGxdŴriԀ2Gؠ.YbMpU[H呗y[rBs6~sګHEDTYStW`rugMO}``M lIεdN䤵 8, s`-L1%op~IHOv>=Zn8pBacFVT}vBOCD~VĶ9S;3AiO]Er ZՆ kܷyh'n<`!8 u3cRKjb-VK2-;м]aՖ# IDBK]A*LRi|!.;(~i.^E7%Cw Ž&Z:L7u +b]+It nK$D Ed0l+_S6lLfc-!v&"Q,XǒcͶVnOB1jJ.G5$NVA!k ۋP9S^736&'*KInS_7]_*P-Z^1Nz$yN̦ ْ>@n:d47t VWil?3bX-~bؖFPa[sj0Q(-2?FCg$(aO7a/^K2;z۩gl7';}[ VV"vM?ȍRRweq" 9Lк9PR~36ZE&YOfke{pq=y.:L5:ɿtl(c{YpniH)TŒE;pl-lLv_!_i&ʶN9SC)#$pW@~o0 bdBNu?DЎ}!3b#[E_qu3i|2d~(hH+cQrcv] 'ۿp^u7,ȋNa5?>NQ'I4 $bBꦈYt,ikwF4!(5RnMh :{ ekZ&<MAT+MOQ0?~B;aNʲŊa Pݻ6UŦ#pظg Vݔtƒgp^JtF'YlOc:ނtʍO]EhH}5 &{HjY#9)^<Vo`aFhRŢHf S"$;"ɜ.+,trc1m pXxiɁTdù(NMM; =<OzHx/r-UȬBd,ʞY[VZǮviH殟cpw㉈y*z@)ԋ83_k g3Z1rl@z~6I ˑCr+ka1Kgoǃ͜^/,<8c^@bw׆IdҤ|Bf~|MNcNd8&zn($\X-cSkBA&hWM fM Hi{$<[=c{Yy#N Ew6܄Lik , p/eBp(>RQLzza %@zҾ%XA&c+vx ]#jVBoCg3~q_M0Ъ y7 /{xR A[QufJrn9&-~Du쾒M!QwK>޽j`6W,Bz8 Y[6R8 j)Ux>&/^4H&2!]W*@4߫e_R@õ%XWtCW'U iP24;| ߠ#̖| |eo*|S|'OT'8FYC̓$Rw*IFhX"o@ TmPE;opu7vLm<*WEQ#kL"فnZ0ɵ$f HMS]oqh$-.'"@hjM\uWr{O5MɽSoCq:H vI} }XiqOfª'Z(ρg2{i+@fZڔVd\6t)iOv`"8sesOR_ Km%76{+H|mO_Ğ4yyڼ q$BU}B`:z-rl`laAzx}*tNoi&6WV7N*6~锹~bϏ!Wh w:wJ&¢^v۵%پk59N[b2E5-YZe4G~v=6&(wmS"kezoUOllk=fM@u8c}ŽE,"LpPI#n,;bKq`+7/+A)( r!pJ"^oc %q1dj̪Սq:^>X__nrGH;Foz5! }MlףR~ r.qH4J moAo eeMGE0^YzVףb?U5"s9 & P>$\15^,+>^ώ վF V.ܣp c$M  >^ѲUt|Wj O5nk@p Yfj4%>Jev^V{]>!JK4 ]_xş0{}JpF}v{Zֽ\蟝u/ʮ;IAZ6z.5o 7ǜu4itA sVLPOgo!3A9ƗͼE=篖p; @I%E~16U22ҽ J_1@>+ޢȍ6B F)E$0H`JObqؕ1wrbjѶXUr6ᩢUsӟ=H}KzEF6|-T;kcY.R ەإזY!BO1sSl腐Mn1 $$?F:~胦%B,y&EU^J+NSZ0gjdMBo(.yLTMHϮ{5+i.cW,6Tn8[huZUƕ zfK]!" GKh.]Y?#HC(oZ d. b5 vGDgc_ŪtͅaZ{=Bi>mH7OsP N;GXL/gC5A|K/v7O)֜}#yM@-+At\" tU\t 'pL଎Oz#.fP؝nDMsGQT^ѻҔL咎*zuUwrhyt *wwjWz.U4Q`9Xi'5wHźZle/w7xgȏ 6;"љH1Qb `ϐ(Ҕr9,Bji G M$bݾ"1Ųպ)߯oEaLWPnhDZ^U.#CvQٻuo:dK'z_ z(k0~=}oCӜIIBb(_P[OFUB8`{Cpr E+L'k_DgVyOOsm-/sdi\(V 5bZRWd1>)l6873 Z'U.O<#G|եF+)3f@A/F g`_`Ӎ/;v$<ղ(>b<1$)2<U"Duq1]"ksW$'_{V/Ԁf_uBOqQMk+zڹGѥ4`Q%-M~u$I}y%t,Ñ̾gՆzHԍSA+4^R?DRb]W?p;vLΔ\9F#<ĸ6f12f0 !^RnwŴφٜԯMDb?ǡ7-ƥ@WSg[2%a s6L! -mIo(=ǎ] {@|𱵭[za$}(jnN8q#i6 n'y~Rk'plMGy V/ ;nB3`ij?mȕףkO*HYnk*ts{&r{\ o=0 HF&G1+֌O xc#nl] T,غCMxv;-L6ËHTM}biK_v?:.HkhO|=`|#ש]w1HOFzf-Vjr> %Rq1I?>|&SoA;99RL\/uQ5>:] cI;My@< 18/"U~@:=x;&.Unv573{@7|;B"TG{A_7]8D '[T ֕ 'P*',ޅ8=2z"ɞh_P=ꉰtNbW!񮴣݆-oK6)F4jTv 0C p'.ڠk~;޶z|rnK~͘dC͇V:Fدy_ T}QpG>ݚB/l Ū%p9KCldS޻M_?v}8?  LY=j9K+nm xIdRIIz1E)lQ|t0aYU"&P38KEB飌șܷ# ȴՙ|[1l v+ahW-ץ6(PDxKNN]`]z'`TM7&-O(!5 ,H`LJ=5v^oe=ʂ[sWx _51$/ =dT +yXaz|Aq'|}mhwٹ!lgDߚn|uxv;4' #BN-+ K O .rL|ѐʧ s\am<(b} NOLy7;>4'b|иAL CZX81Wr0/)vF`sFLJ;dR[ny,eV ٍ^5%x^&Fl⮳ MjR*]ڶxfïT_:Sa_'2#\Í;U`8{ [-!pt%BoDuΡ8f$)ù<]ABLIWMce "α=4wáym. .}-*>JT56kי)Lw2rݒ*Д,$/cZv;hA++ԝn3Y42r@_&XWƀ(`~A<<ˇIn.ͻ2Ig@٢ ƌuP َk`FҘm ޻dZ,ʮͦBmcbv!P@MU~SA G1QW$wW5=tD0zvÏ"r"' ,.~Kww< DZ̋n0H/aXpKw YG%|vȨ Úi㵹>{jׄޥK򅵒ʜY"m1=LABAj/Lfpѣ>P! ki_46ΰDVTٍ$J{jQ!={)nhC#j J: z >0OU^jT(:t$? -g#8a4г @Z$edV5]z, xYqum?@#QxXD]7(\{tƷʛJ4k~߼bE+=dnH:e7|Fe|uYjϓxy=xePGm;[gΕ|X ,5-qxneٳ=kT )1>(Dxwa ǂׅ?\za Ty}n!_-b}1Q_LU1}:KJ{ s=~ 19vQS4dHOVˋo@cr7[jF+J$*'O5 Kۇ:x(BJ}<4fȿ e?pg)#}?^I~]F=!MDEHi^OELY2~9bUh%!WC˛"݉k v"{@*:Dh/K'O˳**5Q^:s}PHc6Ź%NCp£Pz{IS*y l4|^1M#a5>%&GbWYp*]0X;A&x- 69 &9r":S%>fL9,Ŏzx`wPI d<,.+\Nh AÌ܂٘! f h,k!ߝ߬ў".@isPG\+`k׽.:̕>88":oBr(= `n.8;?a)YAGN~)sS/IS\ [6WCӡTȏQ#c^zn[Nlk@FA_ I9`+SOS)k?kC5ɚ2FtmWhef(u0lȀ36dh%06 X=^N-J;YQhJ|FRS>LWy:#(NSiA2d`2x~hH4N[ɠx?}U1mί];#R9GdObwB'sV! IE*_ȭ: F4{.ם<_јTJҟRZ\Tصm3aSV EpauTF>Zz@PRbS0[zQ =[j-6_, C"趟*0hnٌѝkP6~f j6u'5 \Nph.ꢨ jRK4]iJ&pAӼ0N 81`/&Q҇.ܬkgR΁"FYF&KƸT6ZG<6(3üm)ןB|NT1ihh<=Xǥ-ﳧ4~PW4dۅD0G kH' #Vhؑf@\:eL}8\OJ"pkʲq8 PS%`@{bv3EV"Ļ" J6L3&Kp޿ʊaa2i+>("viLݳhGQ1leIsueLmV4sh`Io݃ *xhsCMyB['n)0-{%*TNէ{U yY"3}i~kd^R`vbS+SN0@OԌ,Ol1R\ۣ0Sy,XnږP&WG?pU>aa {+.Ά)huco.*WUi< L>fޟO[Ϧ^dQ_gOR̫/ u*HݓM 3}>d)aCOA+/Մ fYֻLL}V /I$K0Bw o8|~1_80n8mo 3,Ru2ƹ~D&+m;!E gSl  Q&={}7h.!Kie "#deU.|j~i, nI0r^"  !rٶ 1gY3}(^E5ZXv/zދ|\vsd%sZQ4R$`"CūyrL.q Z^[.JZ ݙT<pmy3tVWȑF3/bkK\K?мZDSr7omz7XM0Xr# 5p%l;ʲ lJl\2d@3]>Os9vBoXn:&S'm-(YF.-q[jݲ~]bk:i.B2Uki?TY U{> z!ڋӥBWq LO E2~o{9=h_9%ҏ=IacF\ OYZtrOao=εJ9\oKMr<B..w%!z6F;g+Yt{#ܖZ̓F-V׶)[Q [海S~`8!h%z6oKD\d~@bV &Ap(v6o/*[ "FϿ}F*p;6\̤{A H^,ڼp\ǝ.^?E赛ypOVR5*qn#IZ%(џ ΕtkK4U 2}? 0Yos%l1tTH.Cڲ 65BDjq-eUdVJӖMEn)ew5>05^Ƨ$l=kLMT4zٜaȈiR49 W@<Xzݬقxf?W}1.3][}ffUff#쟋O~y{ƞdmsԬׁ7[uoU\ni-<}Yt.J+}BkDʅh>~(;^ \Km5='lIs; =`apv,[άN% R8@+f^B P}'g5Ty^Lo[p+gY8&]-GD|i2Jy+yWq" [Lୠ12] ·Y6r~g{6ۘiZ%6;Aj;fKT;IgwĒ<Pp;ͦ$2ܚmވ8ԍYVGH"ܢ~͚ć\~+Yx(ЊpG-6ak1mg'O&Gd$0ApՎI)se0fn;9JKh+.4 0_jJz>j4Q^$ JT ~A!NH= b~iioF^σˑqH)-B ױPvYDYwƃ6m^ae>Cd蔙)05A7>ep3fu0SußhE]C*?Gf%k =/h6 |oc?)Xc.1xp8nn4KRj?ZvOp9,d7Bubh{*q=3rtByVo6:Ɲ$lp-]n''dw9Rl7XNa/ԺQUG?F"<-RDQ;갧7DlF}'Zԃ=1Њ"`HdsPY;J/Rbyc6Әӡ# M)Vۉ="e9!V< oTQs1M,FsjQ:w'kI!V&r`#8ғrO`Yފp 4(!l/9m~%lDPC[*D>>cE<IG{SדUO$Hzh OzCu+L*Մ+A$bmBU(JcYqDP1~>bIbmBMs)AQG9Jtהr*_d֋^韪BkLZ/z!?ђPN7@/O>S bv& ?Ia08Zѕc~:gAqɈa8.'/񰊌,KOr?mڬs!=@pº*;i w}0kC([-z^3qK[T-xij[H:#+Juո`ϗ6:ӳ梟$LSa h}O8I/Z G>ksD>8PGRT,bo8LMI=sЎ_ <7N듗-4S2rz5{7#Jڒ<$b7kP-xQ{ &6/ ޞA{jٸdGvzD#MDұ>`=fTޓKqh[] A?Ŋ <Ƽi,48@|w)˅mѻRxNy?k܆xenC'XXA:_=EC2>)D çr&ξA]}N7 yStVN6Im 1'b)7Nŕ'+BuŁëj1#2ܝ uiQ*. m?S(5X:,zQ׆b̠O |J:g&s;s{>l\٨li&{᜚j#\̆e@ґO;6*t) W;vXy]ⅸǭdxO[ RJ ]vVE-Prf-* zu9 _[JN gq D?-c^4=y:X1E#4ݽ#ȫ`b 1b&/IT=1Z2!0poC9A3|iQC6g!S db킨^`%4$eAEbx&z?!qU*zXm[aIsC+eEȦ}r?֏6y56ҟWAC:/8!΂taf+vha@QQv$ޯ*Jΰʗճ*Kwkm\ !,m$t( ;.EGwm{3"tr*2Pw}5}7/}nz0/z̽g"|T2f/]2I7af;r)QrhsW-l GӌNˉƝF9P&c[lwGg73yu6|5+ [l=Nosg-GM ^ Of3( }aaq/MJ o%kX(tmQmiN}ڣ3Le$ 054*-Ċz?9<ٛh`,cKoJ:z A'kDx1r3f2xQA]'v!P`S*7Ws'p(憺5'M vf5 ~r+`3 -s<>u8e:!-HCj'!b}Tt]4Devy~enB@e%)8,|jtiѻg/#Q|/E}6QM81GlD"B*uhE1Tnvq2ޫ]_X;O0bsY%D4*2ʲ3☡xɐdB~{rԶT{L9 Ku]RoI6EbfWk}!XC'-w,arQdhn'Gx_kN& ]BIlhy<߾GdKsZZ* +oUЊ &ݚGoNKbC0*E;SD2>_q W{N5dW7%&4ġZ-ؼhH&yyT N>QEʹKn[|8kF0쪠؜VOCG7f#o;'j 8#^߱"!nB -G?R!f|&D/<Pd *l=F Y.,F`VXZXyW;0l:# E"'Ea`+y ǿwe;oiV h>ぴO I'ф " ԾSZNŀg+9WBPtZHMFS6I,he\a88hc狰|N-$[LcܪaPx"٧tߑ\7UˇiCxԆqFץ^Jf=bִǷ- YoG=H1x*_%H5Xd/1}_DU\~I /UG%I1ViBPϡJOxu]U1mT6oDF$YJ{a}ꤿ!@z`.GZ#h]^W ~9Tv.8I*oR!Qj..ei[lΨ:&qݸ+LK p`2AЃYdbRkVg{;y!NQ`qi$بul z?FG˻K,"K=h;MUre5o*rGGS0ahXM|@Y]8/x.&)7 K糁@@M471EGU<ׄfQ/%jo TR* iׇ˧)J0L-o)`ZFc5jXXn* r>f/w`޼Pil|]i?XJ{=ld[WjR +!qE:x)Jsz\)((ڏx4H8 l%2?fe0jmMOY3ܥ>ʔȢ(S{.tZ7nhg~fEيGuq&0~Q|#hn?y/|Eܫ /yTrgsgcH!+y,絀2*I#&6.yf5E^ۤrdT\ImβA]D"5Hπ`@W]&{Gc$Ae_~F@ ~:w.gVa;Vz c{3YW@79Cޟѡ_ &W-ܐN>&ٶ@Z%ur)_vnHL5Eg-b]P;ڳ߮zW^/cb x %ꋱ9\F=5Վhrv{Ʋj˚ከ肑GE\v*RZ2y۽TU U[.Hz&$}fy;aε oqB]sz>soƿ觳<G(xbg a.,P *|BdF̏zLidL؃ ĴoU[ ĠQ3M2{w<ƤdY!;‒` GlSۙA925u/+*:s!@d؆˓Fd^4Ԥ`jޙj!FL0vCu8`rL*u `D=O8U`p ' ^gp!śOn fe򄉧&ql@G^.~Oanj\z^hefWTI@Ķ&d ,Ӑ8gS ;+2>9CE 0b:Ş~iL2{!:h.keN8#7k"ʰYY{Rji u=;O|=/؈68)y׭a^/(Qx针vM2Ch{"eI$[K*C2ѤnvL; wv*5_UW#>#UqSIHTb ;33'ؓ J$3=D5eu8 ^Fڛn.Z KȰ 5~~\g&9aޞ$:ijR=(LHNo`wX.q8fGRiו䡬 7R[עD ;kg=J `}&jZctɞF柠C[\LQf>d5ê<5<hwWzBDwr2 SJlN>-{7F }z-sZ7ֿ޻U.͠=,Q,s Q~39 hi0Ba Zߛ˦8 e4JעC[wu@09Ag2͒<VEX{ Q`|1h.α;f9;J{lW4"`5O޹bЖ8",~2,͛_7-١@'dGϒy3'向SM5桤`3NG5J*hDuC뽍r1qT8d~w!5qB%;VVDv/`1ah[n p(`lR2$[FZ,ʈqowZ&Ι-= x֥oWG,ý>J#O] vШxFMS!)mk!K@\ eYhϮu8:4' B%9}Bu#ADykuN]@ \DoȦc=_NY߀^NpS<7|[%Hu]벎gEha\,4xuWzF^=#`2K$/`WzNF.d,##%$OaQ9BHdU?"瀇K G;ܗJ0M>y 갂k%ne/K:Ĝӫ.yV1\'.7Rľwa vJ mua&eM"\bubz]$U@`'P/ 4s^H"I#AwY@]vz~J%]:n4#JG4xX&.4ڪ/= ]Q;9i%v><ϐ\ #*C4XW>u4 mrLQT,G,a*"Jzs[rjЦXE8uXtJ`ʤpk7ƥ,L'Dh(p KC&'Zi|NP^q F$Z-x*aTTHOI4 qRQqg&AhFg) #^Y:Ɲ_D^>bvY,c MyƒIkK8M*ܷDJ(B+OZ ڳDKm~ܣWlL7[H bh)Kw>տ2Tp_Rԡ5XxIXX&g )\Ygӄ]]5Pv%,4 i((WQMJDcV8tRVET6?|BsIq i^\rgT{ʩOie1X)9ɏ?;[ K#ϯ})4$-ZE6n@UVǘҶ@vM" ĺT@.2 iQq2u@P+`5f->75Jv,n^6GH#$PXyI.nGvs* Z`Ah;eARǝ=|3`C0eUeg-W J=z rbڔlcS-.TxX},; ^`˦h") J o'1G#vI3^(d;ɑW1[8t70K^ưh:4򐑔Sx+E2'o!{9<-"\of]g %b J6%s'?acҮ͏R"dHЕ(Q!/yd.D#TB9l * o2⋋{q\{&U5uZ8Bo+AAҾ"Brt[0꾐-& ]i0Pl?azJ[ @xj\6opV&(E,Eu,FG\T)>vNF9a[jD!68 ‚ڍ{&S H,~al\{3PJ0$k UaŒ 3pΒD:5OD՝'A2 [o-7dsZb (vn&G UR ` dŕu0Á.UJdgFh7CpvUu_ G)>c~)$uķBBǬ<+VKd.FfikX 0I$M6;O lJu)30;q㡜7 ɾ'&栦ff ۖ"R_6@Faz헔YY=6F17P9QS]=JuqR1зH4xmr" ..C.+CBqw]~L|HsaC4 _@WbK?nx[T݁n#G#Fdg%HV.p͌DoBqBu o8x'q`,h\; opJDT[Ģ10I[ګ3CcLuP~>ϔ 뒹|"s3 YKh9g4B};b5I|-;Mw~.XL<Ӝ᠗겸 TZ=جᇳkf'˻F3dz4Ko)h)9Q9Q?!(=iR<"P鞺iQ$dB|uoi? )^pK0ʯ<ݨ"n" F l;ű(bgmB|Ȗ]dyl;d-{XƟKu\G>׎ʁ p /x"AeNN ,k ݈9ؖ:0W΋$L->?I}˩ˇbX :##*i'=,QvCTR)V/+(L AJo/j_FDEh?yHˑmlVŮugJA}aΝA".QbVpwz7hiܭVj&T52hNr}} $-e'O:kLq^o7PbLM<R}+\mwno5c 3 fWX]b;lՐ5Zjes$n8L `$jRW(/xc{_)͊Cet~9~i=%Nl~+d6WB7&A;V9vޠ^n'T/(jlbd]cNWӚy_&RĬ1MW{Âܙ "UV][P'=Ѕ~UЂ!3]z{' 9](n.H^׬=jEۓoRYsuG;gakM"Ie-+sS_8lBGOWg1} ,SuV!U:Xl?JrrĦ+^?)Y%] N횡$f,r kI>~U6/F0[U"aNE (%7Sb)eltiD#!. l]?$)4VHo7Cx5A3`}JzD ȎHaI`@|mz=L`Z,~(Ez9ghW5۫[q$ X}/05gx/ D4\\1)Ltc!U^Dj%'Xħ:9M"$RHEKy/tesok(y.N!\]RN]WjR;;lV!'UcWZtF!r;gF[`7t&"Yj;@`#1ӥEv:оBߧ;~/K2Q$F 3J\{Xk'&mY-ž,1|o6.^I4yxyZe }.j6֓Nki0A␶OR%..@K\mB4k B=t"&OjVOrs> b%lF_Hf*#(=ILC&^ ѫm`uUV/22dM64$깙R*+'}(`[m:ep=JBL27|A=ю/moEDC+Aq0?<"wNpv3xϲ/I.N"}_4@' 0?]]FX1" |a׫m qm@O mh́7&|~`K|<_}F*;*-#?azξi<)JCMz3eW8FaFLڇ{@zcҜRNn5z1R)WX[ߩ]Y0;0 .ȼ=ԨX08~Zf:;Z* <jWk6W6<]1+JJmƝ|G.UIz#i@y+r?seKCڞs\ޠ*W8O2{ !(ͬDD΃7=U}Լ4x`bHG ;_[YNfG+\HjVϩ-PFa uk븉K'3r&X?%ck@#-ptx|ٙoA5`V"բΰ ڪĞ\2^72ŵ CgvC"6j22dJ ʠ,D~n39d՛V S<ۥҊS`Nՙ62 *lEk}ܯ} '$',Du1]{qsE"T,k~ ,"Ʋ=iMy8V1#E#<[bdv| V1/Ѡš6ej.~O[B@-jn~17` U3Ror @:Cx~ GWI>,wfY\o~8^4U] tOwQ tseW[4#K:K%F*QI ʕVE_@WW8LlXIć.7o[lZa4rjQ7=ͤ$1u)M4ۀho 7Ǫ4޷LDn ^,3fئ mPY?ʹ`eoٽbPݭ( BЮ4v du֋j H/] 'UX |k5KZCNZ+.F͎&sGk l^29oDǢј].M%}e+X>Gk~'7UM وנ˅C& #"šgxmQ26"aXH=H>pHRrx ۃz+}"-TXJ_67k=G{m]˒R\F$ BۆT%0U ޕ l0@Qv(K.u4ʞ;p5s7K?D70M*Y@pxq+I,#<ؿ Y=!3 ]l %<ZԏMDKCVLѮ?&Qh:JФH, $x9s[j/Dʡ"@l-fEj5ZTXUYm7cUgi,q.Z nV^Φlwm笲 f(#\Y'aY]HqwvKEit 646iVf[\Q}j*J02AiXzdJl_h6EިӹAC㪤bPɴh/?8ǩXTi!nhgBp;$ō cܷK4{]`MytAc{ڂ;vIDby8oeT!ļ^1>* j䤵Ň%z*ᢆQ/\Хd uc_%I֤\,kնr#TTIxi)r:NJ{[ :!06>t0NVM-+Bq>Po]l , ;*Ϻcb24V0fáw[l=u zi? 3G.ouZjco:0]pbFk,4%g0M$VC0xDODK2 *| C/3˓*++F5d x2haŠBuom Aejnfȫ`'E~g9~6@|/6}PoL+=D!ւ,cL.9V(7$JA?D7(ďȺGf뙻9z`eV#+p" 2= nxzW2Ӯ6Cff Ӽ5Kր܊ѸU -$ã3֫}N\)TwA5G+ B=q#pY Ϻax/wh2yJm=2 YAPRs3Ɏդ *Ƌu8Ձ7)xJ8Xo i UTI3]U~jԄfl XqznM(sӭfDY،2:ݣ5DRw`61v񌖒5Vb='!{<4/[-'W%ƤϙdKC2 rʛ1Km$l:)j7r̴!t洕jI>˘e͑uqϡd祸q Lh1^U5G;Y%ZӴڽ<6$~kVkmnOKHf(L>ѩj+@&Ar̈́<^8@7Ծ%X&7GXy74̝nC~9յyw7f4(8t}ZzJc\ viBԴ*4i;v2?y)n(Մu7Eh B /3wq`αՇ)ʖ}JФ[#>Q) -_8(\co9roPÓat/{fa)uДOz[) ?Li)MYY3=߁k a*j &`+ݥyn0mHayOb3UlBn>Ru*]+z~9Y k0q~3\LSحb=Alm?wEԈcn-G'Ad'о}Ӹ$,׆,iXvc_"6q$xTS($lsZ:vrZ´ctK"G[Nɠ)jI\VO"˯9`:!|s 6m1p۟ӺTOx踎o4;Œ:J Ddi;%@Z\ țԙ.R\.I:S"G#dUL-'+@/o6 \#ٲ~Au__~ G UAO"`0کIyA' P߰=U-NiRmk4M E5 г&bU{^mʖf<}GcOF1UKj' my|nah%nqPeG`C?c l[j/Jd>=zq+WqG$v"NDOyt%r(he1ӻIbMD, e(hn\úYuK,i(39{ct8~ ,j30yxFI޾%DA~ ΂'k۹lG ^W; )LQ*Mx%K϶Wȸ.e۸xGgƊ4/\b|[1}oPۻş R;>G|f8\b1ST .1ޡT\*g} =#m/zCs,*pccAh^'=g4Jb"[d3+Y{/ *DOkZqT(ҿAtz[y٤\E; wӖܰGDF@<~*08\'E8nd?y oK' }ĦF[r^Tcx=t3 -LCN+[l73{bqO`e{] ]klrd"nJ`!jf{ׇ߹29 P=v ި -"hTb^\Ưu'BZ4/mMd ,)}=g&RjyECL/ ~63{/3vr,jb 8g"n[c.ɜ{MVm$x,ϼFG 3zH46鯱]4]/)b󵴓.Zh7֯/#1o1aaD5D#&c;}Ȏu.H R4m\R kd 5]mmu$U $Lr^4q IiKbn.KEo0ɡq9}m" 409kՃ;N;z죵iJ` -;0i$#5XK޾s #߮>V-%1@P(9qk8y] AkB1LQq|R]*ObO+xx{knC&5$UFlu/ϕüC#$0~2G4">Eb=`Jbh>kBOU b+>i%" *9;Il0Z1hZ9"Se^?-e>'Z.:r?\J@ցiI\PZQv?QhOIm3?;4rYe `\WV~Ͳ]oZ.FtL譿"T?~x3rSN& MR/_T.8]^*4$ۯr䰨nrIiMAV ԫx肍XW0`M./Ym*Ν/l Y#$a":+Ssp 2 iu.`Z6*Ns|&m"Esi"H0B]RKP=ku+)']`Ti,, "dJz} mY7g`((1o>sǾe㯫Ez,_aԚLZONQ=P;,u4L#*qw|:K0ɻԇ:?= hU~ee9;v'1T^Oڠ$> zz&zB4̤gwW+Zu&[ ~Կ̢sa >{e|VUXvg DhËsI1[j 1$SLťoQ7KѦhl:)ͲKb;d!#EX*s(4CqnQ3JH]YaS(gax5Dd#~*1N\gŠO|ZEv^i߂.aRB* ȭxE_y.[3d<8)leL x"Meb^JOyv.3oZ$k~W|1  `zW/zOX>Fo8cH/  M枛{vBZb>6k;?k߮Cj r/=4|3Hx_vQ%\)\~SqFXy/=1,,&F7kZygyV95?X#xsv U)@>)m:=D;Ss <"l0w8^-oW}fb*󙄄eo_՛ ؼlF-qZh*vK,8Ϣ3c' T5fm]VXo9Sp_'J}X"kTu#VV:3V65 cd(AU8%(/Hv4 d@[ZDUY!+DAK*# EAΗ*=Mr P?@-؃~؟Z_e;$dX(#DgH0*HDY7 G^`+3͊U/^ xne#̸m̸ H@jxnXqj۫~ɔDe>1t&E@|Q#8sIvs&5;DYeL}Y 0Kš;*UO>迏f7.8#/s)"x9aN^ F؊@=&8}D_㈂ wcUXL`7_)w[aGJ`B ~ɏma)2ei͐ͬ gjcFzng&-i$i+ gCrJp5Hd,`*XO2Ǐ͵Z8pF'nh+&9Tc:x9 [}\_E-)-MZ_svKn޳%HK_^DGlA";~Y1la@٘Dg7m HأSA4D _>ޚ&Z5'YQzޘ-L,8Mmtr"h?j0-층$a F͏X 9g3D5>rCTefi!yꌶ&-(~~9Xe2TYGͩNL7V=T^XEɥ*+tZ)Xq 3W7=1ݔ$=۰ʍ73 (:r mRÄ׾BY]=jz/YHP yk^lcHMvvmem/H~Lh$iwܚEGS5<&[Jqkp,ΆHKQimp!=?lvvjױ&w6ARϒXX( [m9 pT ZR` l?&),ɽ$6d.F2<\; ]Ф:ť/y^t: Xgc6f ݓuz@13q|~0[ޚ죺GG-wuPقr9S=jĺ,+|Ahu `d5 AJ qBh:A1ORЍ.c4[aqD) QB i$\-j?YUyӪr7`38צ'EcɪPzHeByd2ih%I3V87#8kBz% NP~߽4E? vrb'Y!Wm>d^ރ$Z/Iml$M݅}0uj}FHQKp`A9( dZEQĸblH>qXDo)$Aj+I5fw$K=ɵ?6]M1 .|1EJxSٽYqph >4nu2n|_&`h'ʍc-dI\eݠWs8YǪ]q6H Bt5z|B88_&a!ɲ *$Puwl:Ta٘&vKP rɊr($XR$wOu4gU_kDFO{θ5BE:߿ΘEC)z~6 sbhfL3+u%OaM5;ǵ<ў۞qF};ʂ .${qm ?Ts=v03&qN`Yf zNCmOsUmH<,{^#t+~ V›a\d6w7vxWckKթ5zs#%7/(ڣ+sB*o%ޔ[ʲ,}j0 }"w=Ef| /3|̬m#ڵW&ML쬼}953RP! &B`4n8^ оMk%bx;YAdyF?o{4_s/ytզ)t#ӾB:@ qePڌ`KÃr((tȬ i/h !D(ű:i'GlRr bv= t#9S.>)%.ApdF ,=^?`(kc~*5eh~B=H?T er"{^W'*{k[ b^.}Im~8:c_D|*ֈozdF*DN**2oW^M ҭSƚ36,ob2X[QnFϾ0'1Es!`פO *㘂ph% FyדBDzG۾.ރ> tXRSaнM3!iuS ,)<|tpKqHN 噇}.S8o!O?=E{,D tUd;S$1 * #_)qqUs՘ai+055 TB&ysId〩Kq傑 O/ ڦ7 :K@1GK7O-l!ra(؜ষTH>>\CⰮJ6` b ( \բ1}NL4&, ki`0e/(>EI ATD2~gI NꖄV\j/KKfhC*Nz,Yo ,He-뭍&d tRB!7]SKιLQ<f;1*St)ȎdQ{Ujfμqњ PK/Av@ @@k+ Ҋ$ʄ湼m\ܱ|'";8ysM߸ Ϟ䒼zX~2%L "L!rpŻ@JuPfjRcV%3ASs͵Ӷo[V i2&FFT#I}ޓI7iuPHur88G"HtYo5)o>vpl }~f|I!ՅGyֵ(21fUEP+2*`X>e ~7p#dD}ٵӧ!{v\At4z/NvҺrl)UܺXVѤIE\ Yld闪~5gx) @mFh7R'O*La!RoDOKGlU/O yk!sr$nfWR@r_$$|5'pfLx@ .I⽇B4R$5Bs6~(psPihvVz-Ȼl;ɀ0{96x.hѷlg;ot*$8) :,V.B *Հg1>mCsO'i0d&ŠDf_7n!h#¿d_J]Q^;@*-vJ R@*mhXX9"fdG>/h粬iMU%_}΅erYZd _@׆qIJ{:~ /:7O.K}%%䖸V 4T D¡%=Z3oƻu]1,}z_圸ۜ(X&^E5YKHgN+*!U#]*n Z%yZ,Bj $|7-l.ȤmZ1T|;qa4FB塯SP&"nv}s0P6("7 sRxǍA8 .1ŞcI (Z XB9Aydie%Clo+*ey5c!EpmݶC`:ܱi[ 7*_40E~*}ϳyMϭ9mZRRVf7gT: K]ͼwAIgga|;7=4J9?C xB`{E\ JE^(`8+i8 abm<ڢՊօL /YH}+HcAp{|C1-dRYnW4sq8y ~/('N{Jl@eZPJwMPn iLxL OJB ?.u#04Aܗj%/[ؗ@itZ_}Cz Z4Vd# I`!bp ؿv ?y/l7"Wzj* IWqJYl#6n8Jv;*XQ 'nyqU rqRFa\=s7:q#MMJu+6iPnFAM(jLӵp Ķ[v\m더7E}HD +j 1w$K`loǭ ]D+!3ж)zt)4]I( <0xKwel2M7m?c2j @1/sj|sls$d?q;)ssderP\}](tw$xX5徤Y2n"ޥD_@hQ?UļBiyeV1*i:ӟ!#GqYqxn~*}]A$2IBmfe•kBa:zYp;U ?u|G xe `3jx\UFA29BǸ(\:;24/Bp.kbl`pqx+<EXpWb0;'H-ݏD4:jfaziÍS>*iy\,F^}7MteDCw˼>!}s}xC[|Z[ $>2~R~U hZ`k2^[ǀm#cn'zvei]nFr5.Hu;ةS萚%qx׏\dBQEi*uzF*F~TM(LQ$W-Cbci/?XW'!bo/3TL1 bկjv-C"RWaY|NQ?ΗvtQ#byG2p4Nh{s$r9"U:=g#CѤ`>@ِ :XV(?]yL&] ͑| $iCwP$ܣ|mU%jQgW*=W   }iRfy}1-&:7 ߬$[yQq+#q{"c_XgzXBaOT4ettDAsUrhx5 3rPK :ɟ&F S+fC:0T3;[.N(utFhN$)Cޚ$2~^bKٔhy3JtljoWc#SC=9[a)qʱ=ɚg`ha N mى0K? [R)Cwoiv f5{$Ĉ3bI$,AeCbN2$nΗ/zeuP{' 8;_V9LPrko ůY~1ϯt,ifa&ɝQb2aq#kNEΑjÀJ2h@ ahX<[Ő$q_X }}'G@$Q@ah8W2RTagTfMP29czK4$bLWkj{o:8lPWf@2v ̖]cQO-;z $.J->{sS4&˭.$w.9%`:ihrL@$?kH!2vwLlG kf|3^11.6 #m 8kRqrYKE` E z^I̎9B YZ