kubernetes1.20-kubelet-common-1.20.13-lp155.2.17 >  A dkG35n) O@9my!meInéAX| Ô.yA콰3vpMQU3[_gU8g@GjlkxyvYX;iW`^Ic9U+y~<0XJIc* 3߸HcȊ³w&ծ@} Vb&ln,Qsk 4 JI^NGΑƄL ?{fe1`aX2Ew(#?e*Պq?+)[@{L+P ٰfL(y2G^'>v5E1 |.HuT7/;ّb]i03ڞmp|2>? pbkĴ ڹo-H7 z{& c @u@<[w]=34ˀYtF]:}.TM ,VIYVDW녹"f~Q{P+954ac9d826b201ef71dfecd1e804425bb6320874b88128c04cdf0396592b044be9996b25a7a0f4d53a78bd961def6fbce4c6daeeHdkG35n) f+u:n!p\f $nZ1?VHŮ"Hݫ'Ha@#ab5{uV' $>%NIͥ]C>M\ҹ֦R350+7<:Yz»<~B.}-mA!6gg*Q^{F'KiK0?(tlHw!64-+>_D iy;5TLUpG"^*L!fQ IO&IC` kýG\Xy9*f"bU+A"='$$R|^ uEiHWϑς z5ޝ"nupb{.ic!Sz@ {sm5H MVUͿ8_fLd) V^|D~`OQOŷ_p^D'CC-ȼI}΄ЂK:Mxj;JiSU-lP[oKn ]_>pI4?$d ( 3 M  6<De  4 X |   0x,X ,  (8( 9\ :i =>"?*@2F:GPHIXY\0]x^bcdeflu vTw0xxyz Ckubernetes1.20-kubelet-common1.20.13lp155.2.17Kubernetes kubelet daemonManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubelet daemondkDobs-arm-1TopenSUSE Leap 15.5openSUSEApache-2.0https://bugs.opensuse.orgSystem/Managementhttps://kubernetes.io/linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in kubelet.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=kubelet SUBPNAME=-kubernetes1.20 SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in kubelet.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/kubelet.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable kubelet.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop kubelet.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in kubelet.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart kubelet.service ) || : fi fi$Dfp :,^AAA큤A큤A큤A큤AAdkDdkDdkD_к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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.20-1.20.13-lp155.2.17.src.rpmkubernetes-kubelet-commonkubernetes1.20-kubelet-commonkubernetes1.20-kubelet-common(aarch-64) @    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shcri-runtimekubernetes-kubelet1.20rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-kubelet-common4.14.3a@aC1a&0`t`@`x*`v@`u`@_T__м@_м@rbrown@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.comalexandre.vicenzi@suse.comrbrown@suse.comRichard Brown rbrown@suse.comdmueller@suse.comrbrown@suse.comRichard Brown rbrown@suse.comRichard Brown - Update to version 1.20.13: * defer close the rotated log open * Add tests for checking bind mounts * Check subpath file * Add check for subpaths * Manual cherry pick of kube-openapi changes for release-1.20 Bump kube-openapi against kube-openapi/release-1.20 branch * Update bazel * Fixed unit test SELinux support * Add shortcut for SELinux detection * Don't guess SELinux support on error * Use separate pathSpec for local and remote to properly handle cleaning paths * support more than 100 disk mounts on Windows * Support cgroupv2 in node problem detector test * Update debian, debian-iptables images to pick up CVEs fixes * Fixing how EndpointSlice Mirroring handles Service selector transitions * Fix race condition in logging when request times out * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.12 * Run storage hostpath e2e test client pod as privileged * Ignore VMs in vmss delete backend pools * fix: skip not found nodes when reconciling LB backend address pools * fix: consolidate logs for instance not found error * Revert 102925: Fix Node Resources plugins score when there are pods with no requests * e2e scheduling priorities: do not reference control loop variable * tests: Wait for the network connectivity first * 'New' Event namespace validate failed * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.11 * Refine locking in API Priority and Fairness config controller * kube-controller-manager: properly check generic ephemeral volume feature * Fix null JSON round tripping * Propagate conversion errors * integration test * fix 104329: check for headless before trying to release the ClusterIPs * Fix use variables in the loop in vsphere_util * Address review comments * Add docs about process of discovering disks from new nodes * Fix unknown dangling volumes * fix detach disk issue on deleting node * fix: ignore the case when comparing azure tags in service annotation * fix: ignore the case when updating tags * backported PR#97721 from v1.21 ("fix slice controller logging for services ipfamily") * remove listx from OWNERS, OWNERS_ALIASES * Add explicit capability for online volume expansion * Bump golang.org/x/text to v0.3.6- Update to version 1.20.11: * Fix a small regression in Service updates * Service: Fix semantics for Update wrt allocations * Fix buckets initialization * fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs * fix: skip case sensitivity when checking Azure NSG rules * Keep MakeMountArgSensitive and add a new signature that receives flags * Update the unit tests to handle mountFlags * Add missing interface method in mount_unsupported.go * Pass additional flags to subpath mount to avoid flakes in certain conditions * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.10 * Copy golang license to staging copies * delete stale UDP conntrack entries for loadbalancer IPs * job controller: don't mutate shared cache object * Set idle and readheader timeouts- Update to version 1.20.10: * Bump to golang 1.15.15 in build/** * Bump to golang 1.15.15 in cluster/** and staging/** * Bump to golang 1.15.15 in test/** * Avoid spurious calls to update/delete validation * Fix metrics reporting for the deprecated watch path * Update configure-helper.sh * Update configure-helper.sh * Update configure-helper.sh * Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools * feat: Provide IPv6 support for internal load balancer * Update to using apiserver-network-proxy v1.22 * Make CSR cleaner tolerate objects with invalid status.certificate * disable aufs module * update comments and owners file for pkg/util/removeall * kubelet: do not call RemoveAll on volumes directory for orphaned pods * APF e2e: wait for steady state before proceeding * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.9 * Updated to use konnectivity client v0.0.21, and implemented placeholder context * include google/go-cmp in client-go/dynamic/fake/BUILD * Simplify use of the fake dynamic client * fix: return empty VMAS name if using standalone VM * Fix race in attachdetach tests * Fix frameworkImpl.extenders being not set * Fix closing of decorated watcher channel on timeout * update bazel * (scheduler e2e) Create balanced pods in parallel- Update to version 1.20.9: * Bump to golang 1.15.14 in build/** * Bump to golang 1.15.14 in cluster/** and staging/** * Bump to golang 1.15.14 in test/** * Update debian-iptables image to buster-v1.6.5 * Update debian-base image to buster-v1.8.0 * Bump SMD to v4.1.2 to pick up #102749 fix * generate scheduler merge patches on the pod status instead of the full pod * p&f e2e test: log response header for better troubleshooting * Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default * Do not throw error when we can't get canonical path * Fix Node Resources plugins score when there are pods with no requests * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.8 * Remove error wrap from logs * staging/publishing: Set default go version to go1.15.13 * build: Update to k/repo-infra@v0.1.8 (supports go1.15.13) * Use go-runner:v2.3.1-go1.15.13-buster.0 image (built on go1.15.13) * Update to go1.15.13 * feat: remove ephemeral-storage etcd requirement * endpointslicemirroring controller mirror address status * sched: fix a bug that a preemptor pod exists as a phantom * Revert "Cleanup portforward streams after their usage" * Remove unnecessary snapshot ability check * serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match * Fix VolumeAttachment garbage collection for migrated PVs * Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error * Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin * Ignore transient errors when gather stats * Speed up PV provisioning for vsphere driver * fix error of setting negative value for containerLogMaxSize * Upgrade konnectivity-client for GRPC connection fixes * Update etcd image revision * Update debian-base to buster-v1.7.0 * Update debian-iptables to buster-v1.6.1 * Respect annotation size limit for SSA last-applied. * Remove unnecessary quotes from get-kube scripts * Fix expired unit test certs * fix: delete non existing disk issue * Azure: avoid setting cached Sku when updating VMSS and VMSS instances * Update cos-gpu-installer image * Ref counting is only applicable to Remote endpoints * Make watch order conformance test reliable * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.7 * fix removing pods from podTopologyHints mapping * fix: avoid nil-pointer panic when checking the frontend IP configuration * Use CSI driver to determine unique name for migrated in-tree plugins * Add jitter to lease controller * Avoid caching the VMSS instances whose network profile is nil * chunk target operatation for aws targetGroup * Fix watchForLockfileContention memory leak * Fix cleanupMountpoint issue for Windows * Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY- Update to version 1.20.7: * staging/publishing: Set default go version to go1.15.12 * build: Update to k/repo-infra@v0.1.7 (supports go1.15.12) * Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12) * Update to go1.15.12 * fix: not tagging static public IP * Add test create service with ns * Set namespace when using kubectl create service * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428) * Updating EndpointSlice controllers to avoid duplicate creations * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Updating EndpointSlice validation to match Endpoints validation * Make parallel build memory threshold configurable * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Additional CVE-2021-3121 fix * Fix startupProbe behaviour changed * Fix test * staging/publishing: Set default go version to go1.15.10 * build: Update to k/repo-infra@v0.1.6 (supports go1.15.11) * Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11) * Update to go1.15.11 * add duration encoder to structured logger * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6 * exec test should not run in Parallel as feature gate is not locked * hack/update-bazel.sh * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * list pod list once to avoid timeout * Cleanup portforward streams after their usage * fix smb mount issue on Windows- Update to version 1.20.6: * azure: fix node public IP not able to fetch issues from IMDS * Fix test now that empty struct are tracked in mangaed fields * make generated_files * Update bazel and dependencies. * Update to use cliflag.NamedFlagSets * Address comments. * Update NodeIPAM wrapper * Delete build file based on latest changes. * Update extension mechanism and related sample. * Address review comments * Address review comments * Modify integration test to fill CCM test gap * Update test * Move initialize cloud provider with client builder reference inside controller start func * Separate example func and add README.md * Separate func * Add demonstration of wiring nodeIPAMController config object * Remove cloud provider name as input parameter. * Fix flag passing in CCM. * Use apply to create objects in TestApplyStatus * Stop skipping APIService in apply test * Stop clearing OpenAPIConfig for kube-aggregator * Declare TCP default for service port protocol * Add ability to skip OpenAPI handler installation * do not tag user created public IPs * apf: fix test flake * update gogo/protobuf to v1.3.2 * Fixed describe ingress causing SEGFAULT * Update sigs.k8s.io/structured-merge-diff to v4.0.3 * Stop probing a pod during graceful shutdown * apf: handle error from PollImmediateUntil * staging/publishing: Set default go version to go1.15.10 * webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup * update metadata-concealment to 1.6 for removing legacy checking * slice mirroring controller mirror annotations * additional subnet configuration for AWS ELB * Revert "Automated cherry pick of #97417: fix azure file secret not found issue" * Use the correct volum handle format for GCE regional PD. * Increasing maximum number of ports allowed in EndpointSlice * Support > 5 ports in L4 ILB. * build: Update to k/repo-infra@v0.1.5 (supports go1.15.10) * Use go-runner:v2.3.1-go1.15.10-buster.0 image (built on go1.15.10) * Update to go1.15.10 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.5 * fix a bug where only service with less than 100 ports can have GCE load balancer * bazel * deepcopy statefulsets * full deepcopy on munged pod spec * remove pod toleration toleration seconds mutation * add markers for inspected validation mutation hits * move secret mutation from validation to prepareforupdate * remove unnecessary mutations in validation * tweak validation to avoid mutation * For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP * Moving docker options to daemon.json * e2e fix: loosen configmap to 10 in resource quota * api-server add --lease-max-object-count * apiserver add metric etcd_lease_object_counts * apiserver add --lease-reuse-duration-seconds to config lease reuse duration * Bump Cluster Autoscaler to v1.20.0- Rebase opensuse-version-checks.patch- Update to version 1.20.5: * Updating EndpointSliceMirroring controller to wait for cache to be updated * Updating EndpointSlice controller to wait for cache to be updated * Add tests for populated volumes * Fix comment on getPodVolumeSubpathListFromDisk * Fix tests to test for new behavior * Add warnings after cleanup back * Automatically remove orphaned pod's dangling volumes * Count pod overhead as an entity's resource usage * Ensure only one LoadBalancer rule is created when HA mode is enabled * Fix issue in checking domain socket for plugin watcher * Use Lstat in plugin watcher to avoid Windows problem * Skip visiting empty secret and configmap names * Number of sockets is assumed to be same as NUMA nodes * disables APF if the aggregated apiserver cannot locate the core kube-apiserver * Fix repeatedly aquire the inhibit lock * Sync node status during kubelet node shutdown * remove executable permission bits * Upgrading vendored dependencies * Upgrading cAdvisor to 0.38.8 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.4 * build/OWNERS: Add Dan and Sascha as reviewers * OWNERS(CHANGELOG): Move reviewers/approvers to CHANGELOG/ dir * Bump konnectivity-client to v0.0.15 in release-1.20 * Storage e2e: Remove pd csi driver installation in GKE * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3 * kube-cross: update image to use v1.15.8-legacy-1 * [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8) * Use go-runner:buster-v2.3.1 image (built on go1.15.8) * staging/publishing: Set default go version to go1.15.8 * Update to go1.15.8 * Fix dbus shutdown events not continuing if they are not valid * Revert "make hostPort match test linuxonly" * Revert "conformance changes" * kube-proxy: clear conntrack entries after rules are in place * Use -LiteralPath instead of -Path * Escape the special character in vsphere windows path * Include unit test * Adjust defer to correctly call * do not remove volume dir when saveVolumeData fails * kubeadm: drop explicit constant override in version test * kubeadm: get k8s CI version markers from k8s infra bucket * dockershim hostport respect IPFamily * dockershim hostport manager use HostIP * Balance nodes in scheduling e2e * e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods * Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate * fix kube-scheduler cannot send event because the Note field is too large * Fix nil pointer dereference in disruption controller * Update region_pd e2e test to support PV have GA topology * Recover CSI volumes from dangling attachments * IsVolumeAttachedToNode() renamed to GetAttachState(), and returns 3 states instead of combining "uncertain" and "detached" into "false" * Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states; fixes reconciler_test mock detach to account for multiple attaches on a node * Fix translation of Cinder storage classess to CSI * OWNERS(CHANGELOG): Add release-engineering-reviewers as reviewers * OWNERS(CHANGELOG): Add release-engineering-reviewers as approvers * Resolve IP addresses of host-only in filtered dialer * Deflake ingress updates * make podTopologyHints protected by lock * ignore cgroup driver check in windows node upgrade * OWNERS(sig-release): Add CHANGELOG aliases * OWNERS(build-image): Add Release Managers as reviewers * OWNERS(releng): Sync Release Managers * OWNERS(sig-release): Remove SIG Release approvers alias * aggregate errors when putting vmss * fix azure file migration issue * kubelet: Fix mirrorPodTerminationMap leak * kubelet: Delete static pods gracefully * kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images * kubelet logs print 'kubelet nodes sync' frequently * reduce buckets for etcd_request_duration_seconds * Merge pull request #96876 from howieyuen/no-execute-taint-missing * cleanup subnet in frontend ip configs * conformance changes * make hostPort match test linuxonly * Clean up namespaced children of missing virtual parents with incorrectly cluster-scoped nodes * Add unit test for child scope mismatch with missing parent * vendor: update cAdvisor to v0.38.7 * Use volumeHandle as PV name when translating EBS inline volume * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.2 * kubectl-convert import known versions * Revert "Merge pull request #92817 from kmala/kubelet" * WIP: node sync at least once * fixes nil panic for nil delegated auth options * Lower the frequency of volume plugin deprecation warning * handle webhook authenticator and authorizer error * fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable * Avoid checking the entire backend service URL for FR equality. * Use non privileged ports- Update to version 1.20.2: * move all variables in sampleAndWaterMarkHistograms::innerSet * use default unkown sock for kubeadm cmd if cri detect is not needed * cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip * Release reserved GCE IP address after ensure completes. * Ensure reproducible builds when build through docker * Fix cadvisor machine metrics * Create OWNERS for most of the API Priority and Fairness impl * fix the deadlock in priority and fairness config controller * Cherry pick 443 and 448 from cloud provider azure * Fix bug in CPUManager with race on map acccess * clean up executing request on panic * fix azure file secret not found issue * fix: azure file latency issue for metadata-heavy workload * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1 * Add more logging for Mount error- Update to version 1.20.1: * Revert "Use host IP instead of localhost for control plane component kubeconfig files." * etcd version for 1.19 is 3.4.13 for cve fixes * Flush FibreChannel devices before deleting * Fix FibreChannel volume plugin corrupting filesystem on detach * vendor: update cAdvisor to v0.38.6 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0 * Revert "iAdd host IP to etcd listen client URLs." * fix migration logic * Add AcceleratorStats to cri_stats_provider- Add obsoletes to -client-common to facilitate smooth upgrades from older versions- Rebase opensuse-version-checks.patch - Update to version 1.20.0: * APF e2e: disable drown-out tests temporarily * coredns dep.Severity is newdefault, not newDefault * addressing review comments and supports parallel run * Update ingress conformance test for finalizers * vendor: update cAdvisor to v0.38.5 * fix: change disk client API version for Azure Stack * service.spec.AllocateLoadBalancerNodePorts followup * [go1.15] Use go-runner:buster-v2.2.2 image (built on go1.15.5) * [go1.15] staging/publishing: Set default go version to go1.15.5 * [go1.15] Update to go1.15.5 * [go1.15] hack/tools: Update to k/repo-infra@v0.1.3 (supports go1.15.5) * [go1.15] build: Update to k/repo-infra@v0.1.3 (supports go1.15.5) * Restore beta os/arch labels on initial node registration * matches specific usernames instead of "*" * range_allocator: Test (lack of) double counting * cidrset: Add test for double counting * Fix double counting of IP addresses * ap&f e2e: eliminates client-side rate-limiting * fix bug: concurrent map writes error * Bump node-problem-detector to v0.8.5 * Revert "check volume directories instead of mounts for cleanupOrphanedPodDirs" * Revert "plumb context with request deadline" * Revert "use default value when the specified timeout is 0s" * Revert "add e2e tests for request timeout" * Deflake ThrottledLogger test * fix: resize Azure disk issue when it's in attached state * kube-aggregator: fix apiservice availability gauge * Fix TestStartingResourceVersion flakiness * make sure managedFields are written * generated * unit and integration tests * apiserver dedups owner references and adds warning * Add linuxonly on one multivolume test * gce: move iptables rule to mangle * APF e2e tests: add request drown-out fairness test * add e2e tests for request timeout * use default value when the specified timeout is 0s * CHANGELOG: Update error link in 1.20 * CHANGELOG: Update directory for v1.20.0-beta.2 release * APF e2e tests: rename request drown-out priority client names * Mark some storage tests as LinuxOnly * Add GC unit tests * Log cluster-scoped owners referencing namespaced owners, avoid retrying lookups forever * Queue non-matching children for deletion when a virtual node is marked as observed * Handle virtual delete events when children don't agree on owner coordinates * Make node removal conditional in processGraphChanges * Enqueue dependents for deletion when their ownerReference does not match observed parent coordinates * Short-circuit attemptToDelete loop for virtual nodes that are removed or observed * Replace virtual node with observed node if identity differs * Refactor identityFromEvent * Avoid marking virtual nodes as observed when they haven't been * Switch GC absentOwnerCache to full reference * Add GC integration race test * Plumb event recorder to garbage collector controller * e2e SCTP test not depend on kubenet * e2e/node: increase timeouts seconds to 5 for liveness probe restart test * correct e2e test predicates conflict hostport * Add a deprecation note to k/k/cluster/log-dump directory * Update topology tests for windows * kubelet: dockershim should return grpc status with DeadlineExceeded code * e2e dualstack test fixes * convert the runtimeclass API tests to conformance * APF e2e tests: use snake_case label * APF e2e tests: move common code into helper functions * Reduce volume name length for vsphere * CHANGELOG: add a hyperlink to issue 86282 * allow configuring ReadIdelTimeout and PingTimeout via env var * Add a unit test testing the HTTP/2 health check help the REST client detects broken TCP connections. * plumb context with request deadline * Fixes fake client test generation * Integrate defaults marker and remove ContainerPort defaulter * Remove StripDefaults from BuildSwagger * Add default for protocol and test that it works * Strip defaults in new places * Re-generate with defaults * Update kube-openapi * flowcontrol bootstrap: give catch-all PL more concurrency share * APF matching: fallback to catch-all if nothing matches * flowcontrol bootstrap: make exempt PL last * APF: graduate API and types to beta * Mixed protocol support for Services with type=LoadBalancer (#94028) * Fix test name in e2e resource metrics api test * Test CRUD operations on RuntimeClasses API * vendor: cadvisor v0.38.4 * Relax matching on pod_memory_working_set_bytes metrics * configure the ReadIdleTimeout and PingTimeout of the h2 transport * Match pod resource metrics to pod not container * add more e2e sctp tests * remove wrong test for SCTP connectivity * Update the route table tag in the route reconcile loop * Fixes sigfault in case of empty TopologyInfo * Update generated files * Add service.spec.AllocateLoadBalancerNodePorts * update golang.org/x/net and golang.org/x/sys * Update 1.18 changelog with changes from v1.18.11 * fixup! unblock resources that the storage version manager depends on * fixup! add storage version garbage collector * generated * GC integration test * unblock resources that the storage version manager depends on * make storage version manager wait for lease creation * add storage version garbage collector * Fix cacheWatcher leak when time jump to the future and jump back * Correct rebase issues * Implement shutdown manager in kubelet * Add systemd package to interface with dbus * Corrected CSIDriver validation rebase issues * Remove duplicate CSIDriver name validation * Adjust CSIDriver validation to check objectmeta * Enable logging and drop permissive targets for CSI mock driver * Update the mock driver to use 4.0.2 * Included e2e test for CSIDriver FSGroupPolicy * Move CSIVolumeFSGroupPolicy to beta * Relax validation for CSIVolumeFSGroupPolicy * Fixed quantization and made monotic time reversal not panic * Log defaulted kube-scheduler component config at startup * Updates related to PR feedback * core/v1: document that topologyKeys requires the ServiceTopology feature gate * Use K8s in the README * stop serving deleted APIs * Increase watch timeout when scaling Deployment Replicas * CHANGELOG: Update directory for v1.18.12 release * scheduler: Implement resource metrics at /metrics/resources * quantity: Allow quantity to be converted to float64 * plumb service account token down to csi driver * remove generator from service in kubectl * add myself to sig-network-api-reviewers * Add datapolicy tags to staging/src/k8s.io/client-go/ * cleanup: fix log capitalization in scheduler * Add --experimental-logging-sanitization flag to Kubelet * Run ./update-all.sh * Implement e2e tests for pod scope alignment * Add tests for getPodDeviceRequest() for devicemanager * Add tests for GetPodTopologyHints() for devicemanager * Update topology hints tests to use pod object for devicemanager * Add tests for GetPodTopologyHints() for cpumanager * Refactor topology hints tests for cpumanager * Move scope specific tests from topologymanager under particular scopes * Move common tests from topologymanager under scope * Update topologymanager tests after adding scopes * Implement devicemanager.GetPodLevelTopologyHints() function * Implement the cpumanager.GetPodTopologyHints() function * Update logging to use a format util * Implement topology manager scopes * Add GetPodTopologyHints() interface to Topology/CPU/Device Manager * Add flag value validation of TopologyManagerPolicy * Add flag value validation of TopologyManagerScope * Add kubelet configuration flag 'topology-manager-scope' * Support custom tags for cloud provider managed resources * use uncommon ports for e2e network test * fix pull image error from multiple ACRs using azure managed identity * add e2e test for dual-stack secondary service IPs * Verify iptable rules are applied for tcp, udp and icmp * Choosing the right source VIP for local endpoints * Configure StackdriverLogging Windows service to restart on failure. * Adding sample files to demonstrate how cloud provider leverage CCM. * Updating EndpointSlice strategy to cover alpha NodeName field * Support high availability ports * Allow debugging kubelet image pull times * Separate in-tree gcepd driver for windows * Cleaning up EndpointSlice update validation tests * Removing "IP" from supported EndpointSlice address types in kube-proxy * Updating ControlPlane to support NodeName field * Updating EndpointSlice controllers to support NodeName field * Adding EndpointSliceNodeName feature gate * Adding NodeName to EndpointSlice API, deprecation updates * update bazel * Promote Deployment lifecycle e2e test to Conformance * CHANGELOG: Update directory for v1.19.4 release * handle the case for slow cronjob lister, add unit tests * convert to stardard lister, use []*batchv1.Job instead of []batchv1.Job * actually retry if we failed to reconcile some objects * Update storage test suits for Windows * Promote Pod/PodStatus lifecycle e2e test to Conformance * Fix failures in TestBindPlugin and TestPreemptWithPermitPlugin * Set 0 sync period in scheduler integration test * CHANGELOG: Update directory for v1.17.14 release * GA of RuntimeClass feature gate and API * put a message, not a stack, in the log on a timeout * Update snapshot CRDs * Set priority of Event v1 higher than v1beta1 * Implement TopologyInfo and cpu_ids in podresources * Convert podDevices to struct * Generate podresources API for TopologyInfo and cpu_ids * Add TopologyInfo and cpu_ids into podresources * Change GetDevices interface * Revert "Merge pull request #92312 from Sh4d1/kep_1860" * fix all Sting method not check nil in "k8s.io/apimachinery" * fix the validation logic for Job/CronJob RestartPolicy field * fix note delete to update according to code * Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy * fix(test::npd): provide NPD with proper kubeconfig * Bump kas to v0.0.14 * Capture defaulted plugin configs from framework * move lease controller to k8s.io/component-helpers/apimachinery * Bug Fix for process_start_time_metric initialization * add V(4) log when apiserver lease was deleted before this controller reacts * generated * integration test * add apiserver lease garbage collector * update violation_exceptions.list and make generated * add cronjob_controllerv2.go * Add CRI v1 proto * dualstack: Use Agnhost in place of BusyBox * Downward API hugepages * added new runtimeclass test and changed Disruptive to Serial * kubeadm: mark the "master" label/taint as deprecated * dualstack: use correct IPFamily list for conntrack checks in e2e * move service controller config to k8s.io/cloud-provider/controllers/service/config * Use FilteredDialContext with quobyte API * Update quobyte client API to v0.1.8 * import restrictions: allow k8s.io/kubelet to import credentialprovider apis * hack/.golint: ignore golint for new kubelet and credentialprovider APIs package * pkg/credentialprovider: export URL parsing and matching helper functions * pkg/credentialprovider: add initial exec-based credential provider plugin * kubelet: add initial credentialprovider v1alpha1 APIs * feature gates: add KubeletCredentialProviders feature gate * kubelet: support alpha credential provider exec plugins * kubelet: update pkg/kubelet/apis/config/OWNERS to include api approvers and reviewers * kubelet: add CredentialProviderConfig API * Change at which level klog.Fatal is invoked * Forbid creating clusters with more than 100 nodes without vpc-native * Change the logic of pod volumes existence check during kubelet cleanupOrphanedPodDirs, cleanupOrphanedPodCgroups and PodResourcesAreReclaimed * remove label dependency on k8s api in Azure * Remove duplicate import * Add --experimental-logging-sanitization flag to control plane components * FsgroupChange policy test suite * Improve observability of node authorizer: * Adding some metrics to the graph * Adding log message when node authorizer has synced * Remove ready directory which created in empty volumeMounter setUp func * cloud-provider: update docs and guidance for InstanceV2 and Zones * fixing issue where SMB share paths cannot resolve with CRI-containerD on Windows * Ignore specific Pod update events in scheduler * Support customize load balancer health probe protocol * Move fsGroupChangePolicy feature to beta * Add WindowsContainerResources to UpdateContainerResourcesRequest * Change snapshot test to use v1 apis * Modify storage snapshottable and disruptive test for Windows * fix: change storage account client API version for Azure Stack * Fixed failure: ProvisioningFailed: Failed to provision volume with StorageClass "standard": invalid AccessModes [ReadWriteOnce ReadOnlyMany ReadWriteMany]: only AccessModes [ReadWriteOnce ReadOnlyMany] are supported * Set enable konnectivity service to true by default * fixup! apiserver correctly validates encoding/decodable versions * HTTP Prove: Removes Accept-Encoding header from http probe * Update snapshot CRDs to v1 * Enable ConfigurableFSGroupPolicy feature gate * Add dangling volume check for vsphere * update e2e kubectl test * prune type in preserve-unknown-fields objects * Add AddedAffinity to the NodeAffinityArgs * Remove --redirect-container-streaming functionality (#95935) * Fix go lint on folder apimachinery/pkg/runtime/serializer/protobuf * Graduating AppProtocol to GA * Fix command and arg in NPD e2e * Call MountDevice only once * Mark MountDevice as uncertain after failed resize * Restore staging path creation * Add unit test for staging path creation * kubelet: move pkg/kubelet/cri/.import-restrictions to pkg/kubelet/cri/streaming * kubelet: add feature gate check for exec probe timeouts * features: add ExecProbeTimeout feature gate * kubelet: allow dockershim exec timeouts to be longer than 10s * kubelet: add e2e test for exec readiness probe timeout * kubelet: stop skipping docker exec livenessprobe timeout test * kubelet: respect probe exec timeout from CRI by returning utilexec.CodeExitError * kubelet: respect dockershim exec timeout * Implement log sanitization * Update bazel * apiextensions: adapt error tests to fixed validation messages * apiextensions: switch validation to kube-openapi * bump(k8s.io/kube-openapi) * stops puting a stacktrace of aborted requests in the logs * require APIServerIdentity to be enabled to run StorageVersionAPI * apiserver correctly validates encoding/decodable versions * updater correctly updates storageversion status * return a Status formatted JSON response * generated * Add an integration test. * make some rbac and scheduling post start hooks tolerate the apiserver bootstrap delay caused by installing storage versions. * Add a generic filter that blocks certain write requests before StorageVersions are updated during apiserver bootstrap. * Collect storage versions as ResourceInfo when installing API endpoints. * Add a feature gate * add andyzhangx as reviewer * Add nodeSelector for konnectivity daemonSet * fix ingress comparaison * fix defaulting * add nil case in proxy * fix build * fix nit in validation * fix tests * Update generated * fix reviews * Update generated * fix review * fix typo * add owner for feature gate * fix rebase * fix review * Add tests * Add route type field to loadbalancer status ingress * Update docs and fix redundant logic of scheduler perf * remove kube-proxy/config/v1alpha1 from .golint_failures * Fix go lint on folder apimachinery/pkg/runtime/serializer/json * Change the features removal note * Promote TokenRequest e2e test to Conformance * cleanup dated wording "NominatedNodeName annotation" * fix formatting * generated * add kube-apiserver-lease-controller poststart hook * Add constant PodReadyTimeout to e2e test * Adjusted timings and management of pods in e2e test * Create Pod+PodStatus resource lifecycle test * Update UTs * Fixing expected pod subdomain to match framework.TestContext.ClusterDNSDomain * e2e: add APF flowcontrol request drown-out test * Less restrictions for AWS NLB health check config * scheduler: remove FrameworkFactory. * PV e2e: fix race in NFS recycling test * Add support to size memory backed volumes * update max azure data disk count map * kubeadm: fix the lint failure where return value is not checked * Generated changes * Move the remaining kubectl bits to k8s.io/kubectl * Introduce kubectl-convert plugin * Adding config extension to CCM. * remove annotation cache sync because of code removed * Increase the timeout to allow summary test pod to start * removes filter metrics test retries * Use topology labels instead of old beta names (#96033) * CRs: Default non-nullable nulls * Move kubectl get-context validate logic to Validate function * endpointslice API: rename 'accepting' condition to 'serving' condition * endpointslice controller: add test cases to TestSyncServiceFull for terminating endpoints * endpointslice controller: refactor TestSyncServiceFull to use test tables * endpointslice API strategy: drop disabled fields 'accepting' and 'terminating' * endpointslice controller: set new conditions 'accepting' and 'terminating' * feature gate: add gate EndpointSliceTerminatingCondition * endpointslice API: add accepting and terminating conditions * kubelet: Use CRI SecurityProfile for Seccomp * Switch GCP list calls to paginated calls. * dualstack: cleanup IsIPv4 duplicates in favor of utils * dualstack: incorporate IsIPv4 updates from utils repo * abort if namespace doesn't exist or terminating * proxy: validate each CIDR config seperately and check for errors * minor changes in adding tests for checking metrics labels * make flags of TokenRequest required * default `service-account-extend-token-expiration` to true * E2E stress test suite for VolumeSnapshots * Update Microsoft/go-winio to released version * APF metrics: set StabilityLevel to ALPHA * kubectl debug: allow set-image-only invocation * Introduce a simple datapolicy library * Remove the dependency between create priorityclass command and generators * Deflake existing configmap count * update features to indicate beta in comment * cleanup: use i18n.T on all command descriptions * Revert "add e2e test for Service ExternalIPs" * CHANGELOG:Fix kubelet flag enable-cadvisor-json-endpoints * client-go/rest: fix finalURLTemplate for url base == "/" * Correctly fix clearing conntrack entry on endpoint changes (nodeport) * Remove Const IPVSProxyMode * update changelog-1.20 * test images: Authenticate in order to push images * Support multiple standard load balancers in one cluster * Use user facing field names in validation message * report UnschedulableAndUnresolvable status instead of an error when PVCs can't find bound persistent volumes * separate RootCAConfigMap from BoundServiceAccountTokenVolume * Add mrunalp as node approver * test images: Removes -p yes flag from qemu-user-static script call * optimise defaultpreemption: enumerate fewer candidates * apiserver/filters test: fix data race and do not leak goroutines * APF: use snake_case in metric labels * Volume snapshot e2e test to validate VolumeSnapshotContent and PVC finalizer * minor changes to tests for checking metrics labels based on review comments * check if kubectl version required values are empty * Exclude KEP-1933 from verify-all.sh until after alpha status. * add GVK to fake dynamic client to match actual behavior * demonstrate existing generated client and fake client behavior is consistent * remove dead apiserver field * Adding an owner for addon/dns folder * fix: pass bearer token to curl using -H instead of --oauth2-bearer * Remove alpha from kubectl debug * do not allow inflight watermark histograms to fall too far behind * test images: set DOCKER_CLI_EXPERIMENTAL=enabled * Remove maximum volume limit comment which is easily outdated. * DelegatingAuthenticationOptions: allows for setting a timeout for the TokenReview client that is used by for the webhook authenticator * Update staging/src/k8s.io/kubectl/pkg/cmd/create/create_rolebinding_test.go * pause image: Disable DiagTrack service on Windows image * replace string casting with fmt.sprintf in test * Fix paging issues when Azure API returns empty values with non-empty nextLink * change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver * test images: sets HOME=/root in cloudbuild.yaml * Update CHANGELOG link of older releases * Remove TaintBasedEvictions Feature Gate * Replace calls to cs.CoreV1().Nodes().Create() with createNode() * Add a function to ensure created nodes are present in scheduler cache * local-up-cluster.sh: Use config file instead of flags for kubelet * Add a verbosity option to exec * KEP-1933: add static analysis target to hack/ * kubectl debug: Allow mutating image names * Increasing withTimeout for ReplicationController Lifecycle test steps * Propose seccomp/apparmor protobuf type definitions for CRI graduation * Update Klog dependency * Remove service load balancer feature gate * resource-metrics: add pod metrics e2e test * reenable e2e_node services & debugging improvements * resource-metrics: add pod/sandbox metrics to endpoint * Removing Alpha annotation as the feature is graduating to Beta in v1.20 * Add runtime representation of []v1.PreferredSchedulingTerm * Move pkg/kubectl/cmd/auth under staging/src/k8s.io/kubectl/pkg/cmd/auth * use patch instead of replace to test the dry-run option * CHANGELOG: Update directory for v1.20.0-beta.1 release * fix CPU time of pod stats with cs.CPU.Time * Skip the sig-storage e2e test as early as possible * Remove useless variable and if * kubectl debug: add tests for Complete,Validate * Move Snapshot to GA * register controllermanager.config.k8s.io group. * fix(test::npd): fix node problem detector test * fix n to nodeInfo easy to understand * Update cobra dependency to v1.1.1 * Adjusted e2e test watch timeouts, logging and pod management * Update usage information for --http-override * Bump agnhost version * Add override option to netexec * Add a redirect handler to netexec * Add optional code to netexec echo endpoint * Honor disabled LocalStorageCapacityIsolation in scheduling * Build files * [kubelet] Allow priority to be set for kubelet process on Windows * add e2e test for Service ExternalIPs * e2e cases for apf * Move helpers from pkg/registry/rbac/reconciliation and pkg/registry/rbac/validation under k8s.io/component-helpers * Add runtime representation of v1.NodeSelector * Remove variadic argument from storage interface * Revert "Updated golang/x/net. Also updated golang.org/x/sys" * Add multi request test * Fix issue in missing metrics of terminated requests * Fix bug in JSON path parser where an error occurs when a range is empty * set webhook retry backoff parameters for kubelet * thorw error if webhook retry backoof is not specified * make backoff parameters configurable for webhook * fix vendor/k8s.io/apimachinery/pkg/api/meta staticcheck * Updated golang/x/net. Also updated golang.org/x/sys, as required by hack/lint-dependencies.sh. * Disable watchcache for events * local-up-cluster.sh: Remove ineffective parameters * Pass all packages to conversion-gen * refactor: migrate health checks of control-plane off insecure port in tests * Implementing ExternalTrafficPolicy: local in winkernel kube-proxy via DSR * add a jitter to bound token renewal * Add datapolicy tags to cmd/kubeadm directory * devicemanager: fix race in stub * Add datapolicy tags to pkg/volume/ * change bucket from 0.0s to 0.0001s * refector service some e2e cases to make it runing in multi providers * Added tests to check metrics labels * Move CCM to staging k8s.io/cloud-provider * mv TokenRequest and TokenRequestProjection to GA * Populate ClusterIPs on read * test: remove flacky ut * Add json-response flag to porter * local-up-cluster.sh: Pass CLUSTER_CIDR to kube-proxy * HTTP Probe: Add 'Accept' header by default * Add keep_time_key setting to fluentd configuration * Enable filter latency tracking for request filters * Measure how much time a request spends in server filter(s): * hack/local-up-cluster.sh: fix API_PORT * exec credential provider: exec -> client.authentication.k8s.io/exec * kubectl flush profiling when get a sigterm * Cleanup non-namespaced objects in e2e test during interrupts * remove dead negotiation methods * fake dynamic client: support *List kinds * Move informer_factory to staging * Remove behaviors * add tests that update services while gate is off * Add datapolicy tags to staging/src/k8s.io/kubectl * Add datapolicy tags to staging/src/k8s.io/legacy-cloud-providers * Mark SecondaryRangeName as deprecated. * Move MatchNodeSelectorTerms to k8s.io/component-helpers * exec credential provider: k8s.io/client-go/tools/auth/exec helper * exec credential provider: ProvideClusterInfo and kubeconfig shadow * Remove FieldMatchingFlags * Adjust conversion generator to new converter changes * Add datapolicy tags to pkg/scheduler/ * Add datapolicy tags to staging/src/k8s.io/kube-aggregator/ * Add datapolicy tags to test/e2e/framework * Add datapolicy tags to pkg/apis * kubeconfig: add explicit path, if specified to loading precedence * Introduce api-extensions category in k8s apiserver * refactor(apiserver): ignore the insecure flags * Allow for configuring etcd progress notify interval on GCE * Fix seccomp PSP docker/default annotation handling * fixes max-min fairness * local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager * fix kubectl debug link error * Added config parameter for CPU threads * Updating EndpointSliceMirroring e2e test to accept multiple slices * pin to latest k8s version * more versions * rev versions * use current method signatures * Update csi-proxy version * add audit-log-compress to apiserver * Update PriorityClass conformance test to cover DeleteCollection * SetCondtion updates generation * Update testing-manifests/storage-csi owners file * CHANGELOG: Update directory for v1.20.0-beta.0 release * Re-add the event recorder in the release test * Don't clear the cached resourcelock when errors occurs on updates * Add failing test showing release is not working properly * Wipe some fields on service "type" updates * Make some methods into non-methods * If image has stackdriver agent installed, use it. * remove the deprecated client that we stopped generating * generated * Update function setting master node size for GCE * dualstack endpoints integration tests * fix case when HC timeout is 0 * pv controller test: more test cases * pv controller test: use sub tests * pv controller test: enable klog output * cleanup: fix some error log capitalization * fix unbound variable on upgrade * add godoc for events to events.k8s.io * Event: Document TTL and best-effort-ness * Add the pod_resources_endpoint_requests_total metric * Update podresources api e2e_node tests * tombstone-ing IPFamily field(15) * fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList * Change function signature for MatchNodeSelectorTerms * Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck. * Webhook: handle error when calling wait.ExponentialBackoff * Fix cacher test after bumping fakeBudget timeout to 2 seconds * Move pkg/apis/core/v1.IsScalarResourceName under pkg/scheduler/util * fixed addons fluentd-elasticsearch statefulset format error * PV controller: don't delete PVs when PVC is not known yet * follow up for #94109 * Enable Volume Expansion tests for Windows * scheduler: make Profile an interface. * Promote verify PriorityClass endpoints e2e test to Conformance * add e2e test for services with hostNetwork endpoints * e2e use functional options to configure NetworkingTest * fix e2e service test container listening port * dual stack services (#91824) * Kubelet now implements the V1 podresources API * Update generated files * Add podresources v1 API * Fix cacher test flakiness * Make versionconverter functions private * Reuse SSA type converter for resources in the same API Group * Change pvc describe test * add an APIServerIdentity feature gate * DelegatingAuthorizationOptions: exposes and sets a default timeout for SubjectAccessReview client * Fix the kube-proxy comment so that the document can be generated correctly * Fix a lot of typos in Azure codes * pause image: Stricter registry prefix regex * apiserver: use canonical egress selection names in EgressSelectorConfiguration API docs * apiserver: update TestReadEgressSelectorConfiguration to use 'controlplane' egress selector name * apiserver: add validation for EgressSelection names in EgressSelectorConfiguration API * apiserver: support egress selection name 'controlplane' and deprecate 'master' * Update test/e2e/storage owners file * Report a metric for time taken to perform recursive permission change * Log PodExec stdout + stderr * Add e2e test for the newPV Controller metric * removed whitspace * added xpack gem to enable ilm support in fluentd-es-image * Add yaml util to unmarshal numbers into int/float * Update the frontend IP config when the service's `pipName` annotation is changed * fix typo in e2e test * Add MrHohn as an owner of ip-masq-agent addon * Bump ip-masq-agent version to pick up CVE fixes * ipvs: check for existence of scheduler module and fail if not found * fix: do not hardcode nginx image URL in rc e2e test case * Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane. * Add configuration options to specify --detect-local-mode on kube-proxy. * Fix static checks for pkg/controller/podautoscaler * proxy: label kube_proxy test with more unique label * Optimize NormalizeScore for PodTopologySpread * Add 5k nodes benchmark for pod topology spreading * PV Controller: PV plugin and mode metrics * style: update comments in topology manager * Optimize string building for NamespacedName * Clean code: optimize some logs of mount * extend request interval to make session affinity cases stable * Add jingxu97 to volume/util owners * Delete framework/v1alpha1 folder and change remaining import paths * Fix a bug that Pods with topologySpreadConstraints get scheduled to nodes without required labels * Fix staticcheck failures on apiserver/plugin/pkg/{authenticator, authorizer} * Alter wording to describe pods using a pvc * Deflake PostFilter integration test * allow component-helpers to import util and klog * generated * generalize lease controller * move node lease controller to component-helpers * Add integration test for Default PodTopologySpread * bump qemu version * Rename flags * Replacing factory tests with scheduler.New and options * Add SETUP_KONNECTIVITY_SERVICE flag * Separate network proxy flag for apiserver egress and starting pods * kubeadm: validate node-cidr-mask are correct * kubeadm validate maximum service subnet size * write checkpoint only when allocated devices updated. * kubeadm: validate podSubnet against node-cidr-mask * Properly quote flags passed to Cluster Autoscaler * Update nodelocaldns yaml to use 1.15.16 image * remove unused const failedExpiration * If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly * format incorrectAddresses in klog * fix: add missing patch flag for kubeadm init phase control-plane * fix loop bug for verify attached volume * test: Add service cluster IP range unit test * prepare node performance tests to move to separate job * ipset: Address a TODO, add test for TestEntry() with IPv6 address * Fix labels for spreading benchmark * Added functionality and API for pod autoscaling based on container resources * Add more Pods and relax skew in E2E spread test * Adjust the acceptable value of UsageNanoCores * Return non-zero code on logexporter failures * Fix default values for logrotate in /var/log/ * Add integration test for kubectl debug * Fix golint failures in client-go/transport * Update the PIP when it is not in the Succeeded provisioning state during the LB update. * Support cross compilation only on amd64. * Always set relevant variables for cross compiling * Use host IP instead of localhost for control plane component kubeconfig files. This is a part of work to allow control plane components to be moved off hostNetwork. * Allow deletion of unhealthy pods if enough healthy * iAdd host IP to etcd listen client URLs. Allow kube-apiserver to use host IP to connect to etcd. Update etcd/migrate to allow additional client listening URLs. * Add error detail in log * CHANGELOG: Update directory for v1.20.0-alpha.3 release * fix the fake cloud provider * Warn that hyper-v featuregate will be deprecated in 1.20 and will be removed in 1.21 * Do not skip externalLB update if some nodes are not found. * Promote Replication Controller lifecycle e2e test to Conformance * Promote Replication Controller Lifecycle * Move client_builder to k8s.io/controller-manager * Graduate DefaultPodTopologySpread to beta * e2e: topomgr: fix ginkgo log * netpol: Add CRUD tests for NetworkPolicy API * test images: Adds Windows support (part 2) * refactor: migrate node e2e tests off insecure port * Generated bazel * Generated conversions * exec credential provider: wire in cluster info * Fix dependency linting * Kube-proxy: Perf-fix: Shrink INPUT chain * Fix flaky unit test Test_Run_Positive_VolumeMountControllerAttachEnabledRace data race * conntrack log delete operations * Bump github.com/Azure/go-autorest/autorest/adal to 0.9.5 * kube-proxy: log stale services operations * staging/publishing: cleanup import restrictions for csi-translation-lib * tests: Refactor agnhost image pod usage - common (part 2) * test, e2e: Remove duplication when using PodClient.CreateSync * fix test flakes * kubectl: allow users to use args with KUBECTL_EXTERNAL_DIFF * e2e don't use hardcoded name for containers name * avoid apiserver/cloud-provider/controller-manager deps from k8s.io/csi-translation-lib * Add client listening URLs flag to etcd migrate. * test: Fix using deprecated default cluster IPs * Disable test for large clusters * The function shouldRecordEvent will panic when the value of input object is nil * Fix catch all regex and missing DryRun Options * fix unbound variable issue in verify.sh * support multiple bind records (fie nodelocaldns test regression), by first replacing PILLAR_ and then replacing other vars. * Add back openapi gen for generic types and clean up doc.go * fix a nil pointer ref in slice allocation * warn user about resource being deleted * Use gsutil to download kube binaries and release * staging/publishing: remove release-1.16 rules * test images: Switches to buildx * Add new way to generate leader election lock * fix staticcheck vendor/k8s.io/metrics/pkg/client/custom_metrics/multi_client.go:49:4: ineffective break statement. Did you mean to break out of the outer loop? (SA4011) vendor/k8s.io/metrics/pkg/client/custom_metrics/versioned_client.go:38:2: var codecs is unused (U1000) * kube-proxy ensure KUBE-MARK-DROP exist but not modify their rules * Remove redundant variable * Switch events conformance metadata from v1.19 to v1.20 * Fix windows node startup failures. * CHANGELOG: Update directory for v1.18.10 release * CHANGELOG: Update directory for v1.17.13 release * kubelet container status calculation doesn't handle suddenly missing data properly * enable benchmark by matching test config * remove debug print from create quota * Move SCTP to GA * remove secondary client retries in e2e tests * Add support for create ingress in kubectl * Fix metrics reporting in kube-apiserver * Fix --dry-run invocation in kubectl e2e * fix: smb valid path error * Fix staticchecks in vendor/k8s.io/client-go * Replace non-ascii string under test/ * add methods to deallocate and starts vms in a scale set * Removing flaky tag from test * Use fluentbit as logging agent. Replace stackdriver * e2e: node: topomgr: avoid plugin leak on test fail * add a local tlsTransportCache to available_controller * Move dirExists() to kubelet_test * Map SelectorSpreadPriority to PodTopologySpread plugin * CHANGELOG: Update directory for v1.19.3 release * Fix fcpath * Ignore deleted pods. * Make copied `localtime` file write-able * Reorder default Filter plugins to have UnschedulableAndUnresolvable first * Add unit tests for dockershim/exec.go * test: Fix deprecated --dry-run parameter * Enable XFS tests for recent GKE COS versions * CHANGELOG: Update directory for v1.20.0-alpha.2 release * PriorityClass lifecycle tests * Fix log dumping for GKE * Add `create ingress` command to `cmd/kubectl` * Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` * Remove dependency between create rolebinding * kube-eviction: Fix SI of process quantity * add systemd mount options interface to support the no-systemd mount * Move scheduler interface to pkg/scheduler/framework * Fix vsphere disk detach failing * - fix golint errors by adding defition comments - remove /pkg/apiserverinternal from .golint_failures * [auth]Check verbs for nonresourceurls and resources * add a OWNERS file under storageversion * generated * add the storageversion.Manager interface * kubeadm: add some output to the generate-csr command * Fix the busybox image tag in kubemark hollow nodes * fix azure disk attach failure for disk size bigger than 4TB * Add PULL_REQUEST_TEMPLATE.md and state the repo does not accept any direct changes * Run hack/update-vendor.sh * Add rule for component-helpers into staging/publishing/rules.yaml * Removing GetPodPriority from pkg/api and importing PodPriority from k8s.io/component-helpers * Duplicate a single helper from pkg/apis * simpler addition of nodeport basic validation * Replace Branch Manager/Patch Release Team with Release Manager * OWNERS_ALIASES: Add xmudrii to release-engineering-reviewers * make new command functions to keep private when they are not required to be public * wrap errors from NodeLabel, NodePorts, NodePreferAvoidPods and NodeResourcesBalancedAllocation plugins * fix azure disk data loss issue on Windows * fix upgrade test * Add defaultingType to PodTopologySpreadArgs * Don't depend on DNS in NetworkPolicy tests * kubelet: fix iptables setup under dual-stack * Improve logging of iptables canary test * Update addons volumesnapshots owners file * Clarify that we don't audit events due to performance impact * don't cache transports for incomparable configs * Update write-pki-data to give read permissions to KUBE_PKI_READERS_GROUP, for components running as non-root to be able to read the credentials. * Update to Calico v3.16.2 * Update Windows Pause version to 1.4.0 * Move cmd/controller-manager to k8s.io/controller-manager and cloud specific configs to k8s.io/cloud-provider. * API server: fix default_konnectivity_socket_path typo. * cleanup: fix golint errors in /pkg/kubelet/stats * cloud node controller: handle empty providerID from getProviderID * always collect containerd logs * Upgrade snapshot controller to 3.0.0 * log-dump.sh: Fix shellcheck issues * test-integration: Fix using deprecated default cluster IPs * Initialize k8s.io/kubernetes/staging/src/k8s.io/component-helpers * Update the example for kubectl port-forward * Upgraded aws-sdk-go to v1.35.5 to include more regions, i.e. Millan * kubelet: Set dual-stack hostNetwork pod IPs on dual-stack nodes * utilnode: fix incorrect documentation about node name vs hostname * kubelet: allow specifying dual-stack node IPs on bare metal * kubelet: Remove unnecessary sorting in NodeAddress tests * allocate service-account flowschema to global-default * Fix reporting network_programming_latency metrics in kube-proxy * Allow configuration of etcd healthcheck timeout * add ipv6 support to the image issue-74839 * set lastterminationstate for container status even when CRI fails to return termination (or any) data * Remove the dependency between create quota command and generators * make download-or-bust compatible with both sha512/sha1 * Fix documentation on EndpointSliceCache map * Adding marosset to test/e2e/windows/OWNERS approver * Add SELinux labels for kubelet on Fedora CoreOS * add CAP_NET_RAW capability to CRI stats summery test * e2e hostexec commands does not need sudo * Update after code review * Update cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Mask bearer token in logs when logLevel >= 9 * Update test/e2e/framework/network/utils.go add logging about min/max interval Co-authored-by: Antonio Ojea * scheduler framework: document how to make plugins configurable * Send node startup scripts to console and journal * Disable the Accelerator metrics by default * Adding Bazel dependencies * Adding failure scenario for long FQDN and setHostnameAsFQDN feature * add unit tests for network plugin manager metrics * clarify help for --api-version: note it's API group/version * include APIVersion in output of 'kubectl api-resources' * Move cloud related feature gates to controller-manager * Replace AreLabelsInWhiteList with isSubset * mark node-problem-detector as serial * Cleaned up and fixed: the potentially misleading comments around Event struct * Update DialFromNode to return values as is done w/ other tests. Update comments to clarify missing probability check function (since they need to be updated anyways b/c of the return value introduced) * Azure: fix node removal race condition on VMSS deletion * removed links to soon deprecated helm stable repo & added artifact hub link * get kibana up to speed with es * rev version of stateful set * v1.18 support changes * kubectl: Update triage/support label references to kind/support * Fix golint failures in pkg/registry/core/replicationcontroller * kubelet: do dual-stack iptables rules * use new fluentd image in daemonset * updated fluentd and all plugins * fix staticcheck for kubectl pkg files * Add gate to install CSI proxy * SetHostnameAsFQDN will be beta in v1.20, enable feature gate by default. * test: e2e: fix race in pods test * Fixes high CPU usage in kubectl drain * proxy: Add tests for kube-proxy config defaulting * test/e2e/framework/:use the term 'Control Plane' in comment * Do not update managedFields timestamp when they don't change * reconcile NLB attributes on service creation * fix detach azure disk issue when vm not exist * Mask Ceph RBD adminSecrets in logs when logLevel >= 4 * Update triage/support label references to kind/support * Update addon-manager makefile to use the new staging repo - for real * Remove unused FailfWithOffset() * Verify pod termination with E2E PreStop hook * Move predicates and priorities configuration creation to Policy mapping * Make the creation of namespace using POST and PATCH consistent * vsphere: improve logging message on node cache refresh event * Tag LabelSelector with +structType=atomic * Bump to latest kube-openapi and SMD to pick up structType=atomic support * just log essential pod info * Add error text to kube-system wait error * Change kubectl clusterinfo to non offensive words * e2e can't use both pod.Name and pod.GenerateName * Fix test "[sig-windows] DNS should support configurable pod DNS servers" * Fix lint errors in pkg/contoller/endpoint * Update Makefile to point to the new addon manager gcr repo * Fixed percentage behavior in instr * remove dns_common.go delete configmap stuff * kubelet: remove some redundant iptables option checking * Remove federation tests entirely because they break clusters and aren't relevant anymore * Don't add empty AZ labels to OpenStack volumes * resolve PR comment ( add nil check ) * fixes test/integration/ttlcontroller staticcheck * Add CSI proxy log to fluentd * Update Windows image patch version * Updated symbol 'framework.GetAllMasterAddresses' to not use word 'master' * Updated symbol 'framework.GetMasterHost' to not use word 'master' * fix: use ">" instead of ">=" in resource allocation * add configuration for controller migration. * Watch bookmarks may contain version of objects of other types * Support sharing one IP address for multiple services * Add unit tests for feature "Support sharing one IP address for multiple services" * Graduate SelectorIndex to GA * correct 'information' spelling errors * correct 'admission' spelling errors * add note for kubeadm cert renew * Fix UpdateSnapshot when Node is partially removed * Add LookForStringInPodExecToContainer that takes container name parameter, modify LookForStringInPodExec to call the new function. * Fix test name TestDump * kubeadm: deprecate self-hosting support * make update * fix integration tests * fix error message * fix goroutine that lives too long * wrap errors in selectorspread and podtoplogyspread plugin * add unit tests for getStorageAccounts in azure_storageaccount.go * Lint ttl_controller * Fix staticcheck failure for vendor/k8s.io/client-go/discovery/cached/memory * kubectl: deprecate --delete-local-data * wrap errors in service affinity plugin * [pkg/watch/json]: remove dead code * wrap errors in taint-toleration plugin * pause image: moves wincat binary location * Adds support for building Windows pause image * tests: Refactors agnhost image pod usage - network * tests: Refactor agnhost image pod usage - common (part 1) * gce: redirect handshake server requests to metadata-concealment too * Disable one subpath test for windows * Add csiproxy log * Collect debugs before framework.Failf * Enable per-zone logexporter pods creation * e2e/storage: disable caching when writing/reading to block PVCs * e2e: add option to create pods with different image in pod.Config * Clean up nits in delete cascade * wrap errors from DefaultPreemption, ImageLocality and NodeAffinity plugins * Fix LookForStringInPodExec(...) to take container name as argument, and refactor function usage Ref: PR 92127 review discussion https://github.com/kubernetes/kubernetes/pull/92127/files#r447853904 * switching to stable version * Fix kube-addon-manager overwriting resources with EnsureExists * apiserver self request metric * address instance_test nits * It's an 'Instance' of apiserver * upgrade test for BoundServiceAccountTokenVolume * kubeadm: make the CP join handling of kubeconfig similar to "init" * kubeadm: warn but do not error out on missing CA keys on CP join * using structured logging in scheduler framework runtime * agnhost image: use actual DNS domain instead of hardcoded cluster.local * add aojea to test reviewers * Use the exported struct member directly * fix: correct glbc ClusterRole * Updated vendor by `hack/update-vendor.sh` * Update bazel * Update dependencies * Remove kubeconform * Remove dependency on behaviors for conformance generation * Fix typo & documentation on kustomize.md * Remove unmaintained stackdriver logging e2e test * replace sha1 with sha512 * Use pager's context instead of TODO * kubelet: add unit tests for imagePullSecrets keyring * Keep the imagePullPolicy of kubectl alpha debug consistent with the default * Remove ext2 + ext3 tests * Add failure logic to tests that rely on side-effect-free dial functions. * Adding back in the breadth-first-polling logic. "Revert "Merge pull request #93837 from jayunit100/DialFromContainerB"" * Update the use message for kubectl debug * Graduate kubeadm alpha certs command * Fail test when Cinder volume deletion fails * Add extra log when Cinder volume deletion fails * Delete pre-provisioned Cinder volume by ID * deprecate scheduler metrics BindingLatency and SchedulingAlgorithmPreemptionEvaluationDuration * modify static check * Replace e2essh on e2e service tests * using kubectl apply to create metric adapter * Allow the lifecycle of kube-proxy to be managed independently of the startup scripts for GCE * Fix `kubectl describe ingress` format * check readyz before adding endpoint for kube-apiserver * Bump network proxy images to v0.0.12 * Bump konnectivity-client to v0.0.12 * tests: Refactors agnhost image pod usage in tests * Revert "Merge pull request #93837 from jayunit100/DialFromContainerB" * CHANGELOG: Update directory for v1.20.0-alpha.1 release * Move Kubelet Summary API to staging repo * removing deprecated scheduler metrics * refactor(kubeadm): make `alpha kubeconfig user` command accpet --config * wait until the iptables rules are programmed * Add test for listing Leases from all namespace * use GetInstanceProviderID to get instance provider ID * Remove mattjmcnaughton as a sig-node reviewer * Enhance the prompt information of verifyRunAsNonRoot, add pod, container information * Update nodelocaldns yaml to use 1.15.14 image * handle longer vendor paths without go files * Show error in status if preserve unknown fields is true for nonstructural schemas * `find . -type f \( -name "*.go" -or -name "*.md" \) -print0 | xargs -0 gsed -i 's/the the /the /g'` * endpoinslices must mirror services labels * kubectl: add a space between effect and operator when printing tolerations * Return the Kubernetes version which stopped serving deprecated APIs by default * log-dump.sh: Do not modify logexporter-daemonset.yaml in-place. * Take into account latency incurred in server filters * test images: uses nanoserver * Remove kubeadm audit package * Do not assume storageclass is still in-tree after csi migration * fix kube-proxy cleanup * scheduler_perf: use time.Ticker in throughput measurement * Remove testcluster check for csi proxy * Add cheftako to KCM owners. * Add an unit test for requests including value after token * Limit the max number of splitting * fix: detach azure disk broken on Azure Stack * [pkg/api/podsecuritypolicy]: fixup typo * Add a check for crio service before starting node e2e tests * apiextensions: prune array type without items in published OpenAPI * test: add unit-test for TranslateCSIPVToInTree. * apiserver: fix healthz vs. livez vs. readyz log output * test(kubelet): deflake TestRotateShutsDownConnections * kubeadm: update vendor to exclude kustomize import * kubeadm: remove the --experimental-kustomize feature * update-bazel * use more granular buckets for azure api calls * fix duplicate testcase names * Adds filtering of hosts to DialContexts. * update storageos vendor for FilteredDial change * kubeadm: remove the --kubelet-version flag for "upgrade node" * Adding cheftako to CCM owners. * scheduler_perf: refactor to allow arbitrary workloads * Tests for empty constraints array when DefaultPodTopologySpread is enabled * cluster/images/etcd: Build etcd:3.4.13-1 image * build: Update to debian-base:buster-v1.2.0 * build: Update to debian-iptables:buster-v1.3.0 * test(apply): deflake run_kubectl_apply_tests * fix azure file migration panic * Add support for s390x * test images: Fixes echoserver s390x image * Change code to use staging/k8s.io/mount-utils * enable gce InstancesV2 * implement gce InstancesV2 interface * Update csi proxy to v0.2.1 * cloud node controller: implement with workqueues and node lister * CHANGELOG: Update directory for v1.19.2 release * CHANGELOG: Update directory for v1.18.9 release * CHANGELOG: Update directory for v1.17.12 release * test/e2e: Busybox image is not being templatized * move dashpole to emeritus in kubelet * LockToDefault the ExternalPolicyForExternalIP feature gate * Fix resource location for ipv6 pods * Refactor kubectl without stdin test * e2e sctp support for ipv6 * Fix e2e autoscaling namespace error * reduce cloud api calls in cloud-node-controller by passing instanceMetadata to updateNodeAddress * Ensuring EndpointSlices are recreated after Service recreation * Increasing acceptable timeout for EndpointSlice garbage collection * Delete namespace parameter in create adapter * verify-generated-swagger-docs: remove unnecessary build * kubeadm: relax the validation of kubeconfig server URLs * Graduate WinOverlay to Beta * count of etcd object should be limited to the specified resource * Run gofmt * run hack/update-vendor.sh * Move podresources api to k8s.io/kubelet/pkg/apis * optimize the use of informer for scheduler * Revert "conntrack e2e test debug connections" * ingore apparmor on non Linux operating systems. * test: ensure WaitForCacheSync is called after starting sharedInformerFacotry * Move the RuntimeClass tests out of node-kubelet-orphans * Test watchcache being updated in multietcd setup * Enable progress notify events in watchcache * Allow tracking resource version for reflector store * Implement etcd3 progress-notify feature in etcd3 layer * Pipe newFunc to etcd3 storage layer * Update kubeconfig command-line help message for kube-proxy * Clean up remaining ns flag * Revert "Revert "Switch cos version to M85"" * ubernetes_lite.go: remove image argument from SpreadServiceOrFail * Don't attempt to detach an FC device if we don't know its name * follow up cleanup after SupportPodPidLimits GA * Mount kubelet and container runtime rootdir on LSSD * avoid potential secret leaking while reading .dockercfg * clean up podpreset deprecated client * generated * remove generated podpreset * remove pod presets * test/{images,utils/image}: Add justaugustus as reviewer * cluster/images: Add justaugustus as reviewer * hack: Add justaugustus as reviewer * .github: Add justaugustus as reviewer * kubeadm init phase upload-certs: add flag --kubeconfig * portforward: Fix UDP-only ports calculation * chore: add network rule support in Azure account creation * Fix misusage of RLock in timeCache lru.Cache.Get() * e2e test support microk8s * test(iptables): deflake TestRestoreAllWaitOldIptablesRestore * feat(iptables): be able to override iptables-1.4-compatible lock path * test flake: fix data race in csi_test.go * Move podPassesBasicChecks() to VolumeBinding plugin * Remove pvcLister from genericScheduler * add retry for creating metrics grabber to fix test flakes * Remove tests related to HTTPS support for ingress-gce * make kube::util::find-binary not dependent on bazel-out/ structure * output go_binary rule directly from go_binary_conditional_pure * hack/lib/util.sh: some bash cleanups * bazel: Replace --features with Starlark build settings flag * [go1.15] staging/publishing: Set default go version to go1.15.2 * [go1.15] build: Use go-runner:buster-v2.0.1 (built using go1.15.1) * [go1.15] Update to go1.15.2 * [go1.15] hack/tools: Update to k/repo-infra@v0.1.1 (supports go1.15.2) * [go1.15] build: Update to k/repo-infra@v0.1.1 (supports go1.15.2) * Graduate ServiceAccountIssuerDiscovery to beta * avoid logging token in RunDeleteTokens * gpu device plugin uses EnsureExists addon mode * Non-zero cfs quota period duration requires feature flag * Use namespace flag passed to RunKubectl* methods * Update etcd to dd1b699fc489 * Fix some shellcheck warnings/errors in cluster/gce/util.sh * kubeadm: remove stray "alpha phase" command * kubeadm: remove the "alpha kubelet config enable-dynamic" command * Fix index out of range panic for kubectl alpha debug * rename some files * Fix minor comment in a script * Wrap errors on VolumeBinding plugin * Wrap errors on DefaultBinder plugin * Wrap errors when running Bind plugins * Wrap errors when running PreBind plugins * Remove field disablePreemption from internal scheduler codebase * Run unit tests 2 instead of 3 times via bazel * Add the storageversion.Manager interface * pillar_dns_server remove change so as not to break tooling in the near term in the kubernetes/dns repo * Fix staging/src/k8s.io/apimachinery/pkg/labels golint findings * Use EphemeralContainers for storage validation * Hold error in framework's Status * Increase time it takes for second pod to startup for offline resizing * Read PV object from apiserver to prevent flake * Migrate scheduler, controller-manager and cloud-controller-manager to lease lock. * fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR * Update csi-proxy to use beta version * remove feature gate SupportIPVSProxyMode. * Revert "Switch cos version to M85" * bump the version of k8s.io/system-validators to 1.2 * kubeadm: Update versions for 1.20 * Handle nil elements when sorting, instead of panicking * kubeadm: print warnings on invalid cert period instead of erroring out * CHANGELOG: Update directory for v1.19.1 release * Prevent deletion of namespace again * Deprecate Dockershim * Tolerate NotFound errors when deleting snapshots * storage E2E: explicitly wait for PV deletion after ephemeral test * Add vCenter info metric * Avoid unnecessary calls if other error occurred * test(portforward): deflake TestGetListener * Add roundtrip tests for metrics repo * generated * Let kube-apiserver host the storage version API * fixup: add podLister as a member field of DefaultPreemption * Preemption plugin to fetch pod from informer cache * Switch cos version to M85 * generated * fix import paths * add internal.apiserver.k8s.io/v1alpha1 to known gvs * update doc.go and register.go * move apiserverinternal types to kube-apiserver * Initialize scheduler's podInformer in sharedInformerFactory * Sort list of formats for --logging-format description to make it deterministic * skip TestClientReceivedGOAWAY * Count storage requests as whole byte values in quota * Add Stephen Augustus as Reviewer for staging/publishing * e2e: fix deployment non-unique env vars to avoid SSA error * Remove pkg/api/endpoints * Stop container before remove for Docker * fix golint failures for staging/src/k8s.io/client-go/examples/workqueue * Revert "fix cluster/log-dump/log-dump.sh shellcheck failures" * deferredResponseWriter returns after calling the Close() method * test(tools::events): deflake TestEventSeriesf * Fix typo in comment of hack/verify-shellcheck.sh * Fix staticchecks ST1005,S1002,S1008,S1039 in pkg/kubelet * Remove unnecessary double-pointer * Add metrics for azure service operations (route and loadbalancer). * Add tests for daemonset view history * Add commend for printHistory function * test(watch-tool): deflake TestRetryWatcherToFinishWithUnreadEvents * dedup the printHistory logic in DaemonSetHistoryViewer,StatefulSetHistoryViewer * Describe sts on rollout history if the revision * kubectl: Use Fprintf * fix golint for pkg/volume/azure_dd * test(workqueue): deflake TestMetrics * build/lib/release: Explicitly use '--platform' in building server images * build/common.sh: Remove extraneous reference to debian-base image * test(kuberuntime): deflake TestRecordOperation * prefer NoError/Error over Nil/NotNil * Deflake serving options, avoid hard-coding ports * Deflake port forward tests to avoid hard-coded local ports * Deflake cpumanager checkpoint unit tests * Use unique socket name per cm test * fix(azure::cache): TimedCache.Getter should be called once on the same key * test(azure::cache): deflake TestCacheNoConcurrentGet * Run slow kubeadm upgrade tests in parallel * Ensure kubeadm tests have unique names * Avoid mutating global variables in kubeadm certs phases * test(iptables): deflake TestRestoreAllGrabOldLock * Skip TestGOAWAYConcurrency * test(apiserver): deflake TestClientReceivedGOAWAY * Deflake TestSetup * Deflake TestHTTPProbeProxy * kubelet: remove alpha warnings for CNI flags * Add more tests for LRU cache lookup * Move ResourceQuota admission to k8s.io/apiserver * do not mutate endpoints in the apiserver * remove DefaultIngressClass feature gate for 1.20 * Cleanup custom metrics conversion functions * feat(kubeadm): specify resource requests in etcd pod spec * Stop ignoring unit test flakes, require multiple successful passes * kubeadm: remove the CoreDNS check for supported image digests * Use ExpectNoError(err) * allow to map the same container port to different host ports * Updating winkernel kube-proxy OWNERS file * consistently use double quotes in proto files * Deflake TestServiceRegistryExternalTrafficHealthCheckNodePortUserAllocation * add more testcases for GOAWAY filter * prefer double quotes and consistent usage in .proto files. * Improve ability to debug Events e2e failure * Added support for register-with-taints setting #93608 * AWS NLB/ELB health check config based on service annotations * kubeadm: adjust the logic around etcd data directory creation * fix vendor/k8s.io/apimachinery/pkg/runtime/serializer/versioning staticcheck * test(csi): deflake TestAttacherWithCSIDriver * Remove HeadlessService label in endpoints controller before comparing * Remove default conversions * Update security contacts for sig-cli * Allow to disable logrotation of kubernetes and pod logs * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Enhancement on the testcase to cover more possibilities * fix kubeadm update coredns with skip pending pod * address review comments * Update kubectl to use new vendored github.com/fvbommel/sortorder dependency * Fix broken dependency vbom.ml/util * Add exp backoff for connection refused errors * proxy/userspace: clean up and consolidate testcase setup * proxy/userspace: use waitgroups instead of sketchy atomic ops in testcases * Start CSI proxy as service * remove --verbose_failures from .bazelrc * fix a few missed references * CHANGELOG: Update directory for v1.16.15 release * update scripts * fix doc file * rename * partial * move port definitions to a common location * remove iperf e2e test ip family tags * modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly * kubeadm: Fix `upgrade plan` for air-gapped setups * Avoid the API call to update pod if nothing is changed * moving files from k8s.io/util/mount into staging/src/k8s.io/mount-utils * fix: return error with fewer mount options on Windows * fix: smb remount issue * Remove driver letter assignment during volume format * Revert "Merge pull request #166 from jingxu97/May/drivename" * chore: add more logging for mklink on Windows * fix: remove unnecessary readlink check in IsLikelyNotMountPoint on Windows * Remove driver letter assignment during volume format * Switch to klog v2 * ignore golint for some stutter that we want to keep as-is * fix bad spelling * Revert xfs_repair fix * Fix windows MountSensitive error * Fix subPath mountpint check * Fix mount_windows build error * Introduce paramater for sensitive mount options. * FormatAndMount unit test only checks for MountErrorValue now and closed gaps for some error values * Add more detailed error output when disk formatting fails * Split MajorMinor into two fields * update after review * use xfs_repair to check and repair xfs filesystem * Return typed error when Mount Fails * Validate the existence of filesystem before attempting to mount it (linux) * feature: implement Output method for FakeCmd * Fix golint errors * Update doc.go to show k8s.io/utils * Extract pkg/util/mount and drop BUILD * bind metadata proxy to 0.0.0.0 * Add e2e multiple endpoint services test * spdy: add optional periodic Pings on the connection * fix vendor/k8s.io/apimachinery/pkg/conversion staticcheck * Handle eviction of pods in deleted namespace * drain: eviction creates in a deleting namespace will throw a forbidden error * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5 * Stop setting SelfLink in kube-apiserver. * Fix FakeClock::Reset to always succeed * add myself to sig-node-reviewers * kubeadm: make the scheduler and KCM connect to local endpoint * kubeadm: Ensure etcd manifests are regenerated upon upgrade * Add WatchListPageSize to cache.Config * Allow 404 error on lb deletion in azure * add lock for csi node update * fix typos in cmd/kubeadm * clean up testutil/metrics content * Update comments in pkg/scheduler/framework/v1alpha1/interface.go * Update `kubectl diff --server-side` test. * Skip TestLoopbackHostPortIPv6 run on non-IPv6 env * relax matcher for ResourceMetricsAPI test * fix staticcheck errors in resourcequota * update test to match validation filter of pods * Omit optional field when empty * Update CNI plugins to v0.8.7 * fix golint failures * Mark SCTPConnectivity tests as disruptive. * Add tests for SCTP network policies. * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null * Improve the prompt message when kubeadm init is successful * fixed golint error in pkg/apis/admissionregistration * Add 1.19.0 API testdata * Remove 1.17.0 API testdata * chore: 📦 update generated files * Update max data disk count with new instance types * Getting rid of the Salt DNS replacements, addded / back. * tests: Refactor agnhost image pod usage * Improve docs for client-go warning handlers * Override hostname with instance name * Fix testpattern check * chore(openapi-spec): 📦 regenerate * Moving e2e tests to e2e_node directory * Combine switch case into one case * Ran hack/update-bazel.sh but discarded changes to root build file * Move common portion of dynamic snapshot out of switch statement * Remove custom hash function, generate a random UUID for snapshot and snapcontent name instead * Stack snapshot tests into one to reuse snapshot resource and reduce time taken on prow. * Quick commit * Remove snapshot class from prepv test because it is not needed. * Combine two tests with overlap to reduce overall snapshot test suite time * Add pre provisioned snapshot tests * start kube-apiserver and webhook server only once to shorten the webhook audit test time * Minor cleanup in snapshot test suite. * Add a link to liggitt's deflake docs in Flake template (#94243) * Deprioritize extensions/v1beta1 in discovery * Update cri-tools to v1.19.0 * Update default etcd server to 3.4.13 * fix(azure): check error returned by scaleSet.getVMSS * fix cluster/log-dump/log-dump.sh shellcheck failures * Remove azure-load-balancer-disable-tcp-reset annotation * Remove duplicate nodeSelector * fix linter issues for pkg/kubelet/cri/remote and staging/src/k8s.io/cri-api/pkg/apis/testing * Fail early on stress test and improve logging * kubectl wait add ignore not found flag * Support kubectl delete foreground * remove deprecated kubelet endpoint /metrics/resource/v1alpha1 * Update options.go * Initialize candidate directly instead of iterating the array of candidates * Move brendandburns to to emeritus status. * fix vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured/unstructuredscheme staticcheck * only update Azure data disks when attach/detach * Enable IP Tags on Azure LoadBalancer public ips * Add PR #89069 Action Required * Update etcd makefile to build 3.4.13 image * Update etcd client to v3.4.13 * update drain message to include namespace for pod in kubectl get compatible format * CHANGELOG: Update directory for v1.19.0 release * Fix issue on skipTest in storage suits * Remove file_mode args for Windows test * Update Calico to v3.15.2 * Set snapshotType for tests with NTFS. * Update CHANGELOG-1.18.md * Add logging if container or pod fails to be killed * Adding label NodeAlphaFeature to include tests in Node Testgrid * Add impersonated user to system:authenticated group * Verify running mirror pod has running containers * Only process all nodes when incoming pod has no preferred affinity * test(endpointslice): deflake TestSyncEndpoints * Remove unnecessary conversion * Detect change of volume attachability in the middle of attaching * Promote PidLimits to GA * Ensure backoff step is set to 1 for Azure armclient * [pkg/registry/admissionregistration]: fixup wrong copy&paste godoc * Remove StartupProbe featuregate and related logic * Make ProjectedVolumeSource optional * Track pods with required anti-affinity * Updating kube-proxy to trim space from loadBalancerSourceRanges * let panics propagate up when processLoop panic * Allow to configure clustername in creation of kubeconfig using kubeadm command * Make similar buckets for api and etcd request duration histogram * .github: remove stackoverflow from support issue template * Refactored pkg/controllers/resourcequota * fix: use sensitiveOptions on Windows mount * Cleanup kubelet TODOs that are no longer pertinent. * kubelet, cgroupv2: do not create /sys/fs/cgroup/sys with cgroupfs * Update wait function w/ descriptions of global node states, TODO for kubelet API. * ARM client: survive empty response and error * delete tests which use container manager stub * tests: Use Windows absolute path on Windows pods * Only lock statuses map when status isn't successful * Do not allow manual changes to manageFields via subresources * Change nodeInfolist building logic in scheduler * do not create StatefulSet pods when PVC is being deleted * fix misleading comment in expand_volume.go * Simplify and de-lint GCE Windows kube-up docs. * Add context to x509 verify failures * Read ssh username from env variable * Fix the logging message * Use /usr/bin/env bash in Makefiles and scripts * Scheduler auth stop using legacy scheme * allow adding annotations to pod when using kubectl run and add tests * kubeadm: Separate argument key/value in log msg * update ResourceMetricsAPI node-e2e test * docs(api): 📝 Fix HPA docs with addition of "External" type * fix vendor/k8s.io/apimachinery/pkg/util/framer staticcheck * Removed broken link to Analytics * Make CSI mock driver log parse more flexible * Verify that an ingress with empty TLS is valid * Update client-go out of cluster example * Update yaml files to use seccomp GA syntax * go fmt fix * remove some notes about scheduler/algorithm * get: -o yaml, json set ServerPrint false * Add test for `pkg/kubelet/util/util_windows_test.go#GetAddressAndDialer` * back out conversion of DialFromNode->DialFromTestContainer * kubelet: assume that swap is disabled when /proc/swaps does not exist * e2e storage: skip multi-volume generic ephemeral volume test * Reduce test volume sizes * support ipv6 in e2e policy tests * modify the warning log format from %d to %v * Update snapshot controller to use k8s.gcr.io * Seperate registry and feature gates * names unnamed testcases, adds name to t.Errorf msg * Improve running time of TestSchedulerWithVolumeBinding * Add maxTries logging statement, otherwise the numbers are really hard to interpret * implement breadth first try * fix test/e2e_node staticcheck * Fix error messages * Fix Poll variable name * Fix waiting for PVCs to get Bound * Number of failed jobs should exceed the backoff limit and not big equal. Remove patch in e2e test of backoff limit due to usage of NumRequeues * fix vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured staticcheck * Fix some typo * golint * fix vendor/k8s.io/apimachinery/pkg/labels staticcheck * Enable completion for `kubectl config delete-context` * vsphere: remove inactive members from OWNERS * sig-network: remove inactive members from OWNERS_ALIASES * cluster/addons/dashboard: remove inactive members from OWNERS * apiserver: remove inactive members from OWNERS * Fast return when no any matched anti-affinity terms * Update seccomp e2e test for GA * Fix an error in NodeUnschedulable plugin comment * Format Codes * minor logic fix * e2e test intra-pod breadth first logging and summary * fix incorrect comment in runtime ObjectKind interface * Fix job's backoff limit for restart policy Never, rely on number of failures instead of number of NumRequeues * test(kubelet): add a regression test to verify kubelet would not panic * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes * refactor(*): update pvc quota name typo in comment * fix: azure disk resize error if source does not exist * chore: add diskclient.Update interface * chore: add diskclient.ListByResourceGroup interface * Remove false positive warning in kubeadm cmd * cloud provider: add zone/region to InstanceMetadata * Sort kubectl top output when --sort-by and --containers are used together * add testcases for kubelet getters * fix a typo in the comment * Use v1helper.GetPersistentVolumeClass for compatibility * Add tests for managed fields tracking. * leaderelection: Remove doubled space in "attempting to acquire leader lease" log * benchmark-dockerized.sh: set KUBE_ROOT * kubeadm: reset don't unmount /var/lib/kubelet if it is mounted * PodReasonUnschedulable is not a pod condition type * Fix kubelet log message when starting a container * kubectl describe pod: use ReportingController as an event source * Fix TestScorePlugin: numScore should be accessed with atomic.LoadInt32 * expose Run[Pre]ScorePlugins functions in PluginRunner interface * Cleanup wait forever loops in pv_controller_test.go * Strip unnecessary security contexts on Windows * Updating the Reviewers / Approvers for WinKernel Proxier * fix the remote endpoint cleanup logic * Add chendave to sig-scheduling REVIEWERS * Adjust default replica count to 2 replicas * Run make verify with python3 to fix publishing bot issue * Document blocking behaviour of RunOrDie and Run * removed k8s-master label * Add example of using resource builder to load a manifest file * tests: Fixes variable expansion false positive test * revert auto-completed package names * remove legacy leftovers of portmapping functionality that was moved to CNI * mark this test serial due to race conditions * Clean up daemonset test names * Remove phantoms from dump_requests output * deps: opencontainers/go-digest -> v1.0.0 * Update k8s.io/utils dependency and use ebtables from there * kubectl: Allow --patch-file to be passed to `kubectl patch` * reduce type conversion and correct variable name * Fix verbs reporting in kube-apiserver metrics * kubectl: improve the warning message when doing kubectl apply to the resource without expected annotation * Fix label reference in deployment checks * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB * Update readiness checks * Update ready condition * chore: upgrade Azure/go-autorest to v14.2.0 use autorest v0.11.1 * extend ShouldCallHook benchmark to verify performance imporvement * [kubectl] Fail when local source file doesn't exist * nodelocaldns.yaml: remove force_tcp option which used for external dns query * Create Deployment resource lifecycle test * apf integration test: ensure no rejection * skip mismatched webhookAccessor and object * return err directly when nodename is not consistent in cert * add bootstrap policy for monitoring roles * unit test * move to cadvisor.MachineInfo * Delete ILB FR in case of changes to port/proto. * fix windows container root validate * hack: ensure go version is not specified for master in publishing rules * publishing: remove go 1.13.9 for master branch for controller-manager * add test case for kubeadm memory check * add more testing cases * Shorten watch restart test, run in parallel * ipvs: log error if scheduler does not exist and fallback to rr * fix golint failures in pkg/kubeapiserver/options, fix some incorrect replace of receiver name * fix golint failures in pkg/kubeapiserver/options, rename receiver name of BuiltInAuthorizationOptions to o * fix golint failures in pkg/kubeapiserver/options, use API Server in commemts instead of APIServer * e2e node: fix kubelet service restart failure * Mention background deletion in kubectl delete cascade help * fix bazel build file * correct the sandboxId attribute in unit tests * address review comments * add sandbox deletor to delete sandboxes on pod delete event * Check for sandboxes before deleting the pod from apiserver * fix(kubectl): warn users that flags cannot be placed before plugin * Avoid using socket for hints * regen * update build * remove serializers from codec factory * update * clean up unused var containerCache * cleanup: print warning message after timeout * Revert "cleanup: decrease log level from warn to v3" * cleanup: decrease log level from warn to v3 * AWS: increase io1 volume IOPs limit * Add a preflight check that the control-plane node has at least 2GB RAM * Handle int -> float conversion in FromUnstructured * Fixed potential nil dereference in hostpath unit test * Fixed error string should not be capitalized * add GetAddressAndDialer unit test * [k8s.io/apiserver/pkg/server/filters]: fixup go vet warning * [kubelet/dockershim] : Use local copy for range iterator * fix(staticcheck): fix static error of package `/pkg/volume/gcepd` * Filters on kubemark nodegroups when selecting node template to enable hollow node clusters that contain real nodes. * Move MasterUpgrade() out from e2e framework * Use temporary directory when creating temporary file in tests * generated * add vendorless to client-gen * use canonical import path in client-gen so that package comments are * ipvs: ensure selected scheduler kernel modules are loaded * Fix NetworkPolicy describe for egress-all policies * Export WaitForCSIDriverRegistrationOnAllNodes to be used by external csi driver repos * [e2e/storage] fix range issue in getCSINodeLimits * kubelet: add operations count and error count metrics to network plugin manager * fix HandleCrash() order * fix golint failures in pkg/kubeapiserver/options * remove duplicate path import * AWS cloudprovider allow nlb-ip and external type lbs to be managed externally * Move WatchUntilWithoutRetry() from e2e framework * Add metav1.SetMetaDataLabel func * Remove resize map code * lock-free broadcaster, use chan to ensure thread safety * [test/kubelet]: Fix deadlock in watch manager test * kubectl: remove the dependency between autoscale command and generators * cluster/addons/metadata-proxy: cleanup inactive members from OWNERS * test/images/pets: remove OWNERS to cleanup inactive members * apimachinery: remove inactive members from OWNERS * [pkg/controller/certificates]: remove staled func comments * Remove DeprecatedMightBeMasterNode() * TestCreateInvokeAdmissionControl: remove unnecessary goroutine in sequential processing * Add unittest coverage for boottime_util_linux.go * dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default * Adds additional documentation for job status * Set the oom_score_adj of guaranteed pod to -997 * Resolves staticcheck failures for component-base/metrics * Change the node name from "machine" to "node" * Fix a typo in PreBindPlugin comment * Replaced repair with returning error, in delta_fifo.go * Fix description of conversion generator * Don't create a new sandbox for pod with RestartPolicyOnFailure if all containers succeeded * add defer * SIG node owner files clean up * Refactoring: Reduce unnecessary lines * Fix a typo in comment * code clean for podgc * fixed e2e vsphere statefulsets test * Repair instead of panic when data corruption detected in DeltaFIFO * conntrack e2e test debug connections * disable goffuzz in binaries * Add get-users and delete-user to kubectl config * fix typo in runtime/interfaces.go * Return nil as error when instance is not found so that node_controller could delete the node * Cherry pick the fix https://github.com/kubernetes/kubernetes/pull/70291 * Find what fails pull-kubernetes-e2e-gce-ubuntu-containerd * Review update * Sync with master * Remove previously added '' no longer needed * No quotes needed/wanted for CURL_RETRY_CONNREFUSED * Add fix for run-kube-controller-manager-as-non-root * Updates after review * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Mitigate newly added shellcheck issues * Updates after code review * Update after code review * Code review update * Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh * changes in imports was unintentional * fix S1000 simplify ch switch cases * fix S1000 simplify ch switch cases * fix S1008 simplify bool returns * fix S1002 omit comp to bool * Warn when creating roles with custom verbs kubectl * Fix static check failures for staging/src/k8s.io/apiserver/pkg/server/healthz/healthz_test.go * cleanup tempfiles in unit test * Enhance apiextensions-apiserver in standalone mode * fix CHANGELOG typo * Mirror pod without OwnerReference should not be created * Add unit test to kubectl/cmd/run * remove stale TODO after this PR: #92204 * add line break when describe hpa * basic regression test of runDockershim * fix func name NewCreateCreateDeploymentOptions * Fix error check logic * Fix broken format in CHANGELOG-1.18 * Remove contemplation of invariant violations from delta_fifo.go * fix expanding rbd volumes without ceph.conf * Adding tests for Kubelet pod update functions * Update Calico cpva to v0.8.3 * cleanup: remove useless methods * Modify the kubelet document * fix golint errors for pkg/kubelet/dockershim * cleanup: no need nil check before range * Add lease release tests in leader election * Generate complete leader election record to resolve leader election issues with LeaseLocks * fix: comments(only create parent dir) * make kubectl/kubeadm completion script support busybox * Add node-local-dns headless service * Made containerd-namespace flag can be used when kubelet config start cmd * fix comments * fix: ignore dir check in csi node stage/publish * Link to krew's new project site * Remove --include-uninitialized flag documentation * Use canonical URL for the krew project * return success if cordon node by replace * kubectl/drain add support for custom pod filters * do not wait for node ready when starting kube-proxy in 'nokubelet' mode * validate KubeletCgroups and KubeReservedCgroup- Initial Package/bin/sh/bin/sh/bin/sh/bin/shobs-arm-1 1684751537 1.20.131.20.13-lp155.2.171.20.13-lp155.2.17 kubernetes1.20manifestskubernetes1.20kubeletkubelet.servicekubelet.service.dkubelet.confrckubeletkubernetes1.20-kubelet-commonCHANGELOG-1.20.mdCONTRIBUTING.mdREADME.mdsysconfig.kubelet-kubernetes1.20kubernetes1.20-kubelet-commonLICENSEkubelet.1.gzkubeletvolume-plugin/etc//etc/kubernetes1.20//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.20-kubelet-common//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/kubernetes1.20-kubelet-common//usr/share/man/man1//var/lib//var/lib/kubelet/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.5/standard/63b22aa9612e7aee11c18418b94d0281-kubernetes1.20cpioxz5aarch64-suse-linuxdirectoryPOSIX shell script, ASCII text executableASCII textexported SGML document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R9Dޫ?ORutf-8571db7e66058e69d4b3ed86051cbec92bcc7d0f1d0d5ec171579696107f6c0b1?p7zXZ !t/] crt:bLL ؝.UNf $( Bw'IB2N R,_Mŝ8uFQ}NaޮJ\5d_ ,xʚ؀&q/ܪЖљ÷KM1(e`h[0o;U[ 2o7jlk,WO<YEC5eI^bX~:.9;"#⤴@Me u (722 峯IEY݂ۓgԢN+Bkɓ. B]ڃI]闱x7Y\x8죧c& ce9ۛ๹´brđwȘ{ⶖ±YbT} båJ58\t-")A+7A\Gq1u0d^L3Or#r5(E=4HFI'7C#a;/e׸)-:1is/ەUȯIRdjf%QӂԬ j >A=[@ܤƆKebgW8|95J-Kgd- <7+ y੭#[|8 OLQ>3N'A#漽%IߌP2v ]҇*/=/1@_XD& f>b ۖRWh r$c \[@\5 KJlJ9cH5 "}ۯ@8llSm}Jh|ۍY*Գ7EdLlba=Ѓ }x4^"Z&ey h[Z2z65p|Bl [ћf7⾅?/fد~p4 Iv=Rr"nhmK(#-.8kkamG υkts"[&y *:d3lж4xpjt&]FPAR¦ Y5 BrL{A:Qm1p;r=(^ҐH{MXn5C7d@<*ȴϻ?qo;+twOԱ`Ty6kN̻ Rd͈YI t<>_r<+SNjb%WT0 ߔ21UBb>6xkӺ1f+.=RNh-)pEV݂`xb >+F`4Os= #Vj?ӚЁ+4)4p e}D{..n8cɅ,Ÿ_ &e1O0"Py2Oa=wd/9WNiD .I#wr@>)4zORB6.fO+'lsA|4`v?nRlb\ ~[ٙ}&qX-1E;pY"Mj?o) Z5Zszc֋aN4yI8g8?]VwJAF6 LI?7TA"Ӧ8)le)„$"Y5QV 2<ɯ}q4 s5vd;m8'F|­y[{ Shy/4_e2}rD~.@$z=^ 3e04K YS <)* ^:O |;RS`rD%/5.A.2G{ *z'8cBAt<ߙ 'da s4IDrCa><EudVY< Lb+@]:l<SI3Ȏ pΔq=vWk":tFB3Ui>1)IUƓ\M:8Jh޷s ]P*9-"Onؒ >k@qU9]=\\ 3@7"eӈO~% rʈjsb!Efoj6xQ~vr- \Ha'޶)=nm3dJkf~~~(|cí:*JԵr/XDvdTawJwCGˆnH4n _3$y1 弾`Ytk:c$H;1ǁ%qYVT/*UlS͆-߻Ze 2˨=4-g. f9#HiցW{qiԅhOo3AYyt0)wI4!};b;GKNsN`^P1|R%4w{H*D8g0D c`;#%ɧq0~e-\G3d^i)a`N[>`Pe$kϾ1,&r8[=fΏC}!LoN(y3/7| {KsZkV4~Htwmd|D+Gj3W)0EPϦѺK:Jcqdtq|'(әfTG&^KJF{TL K8g#Ij1c5Of)9h'3xTᘊ!f1Zo]_w/so3g:*J&@_iO獇4`}2o۵F| _|xpAws9T$u*Y4=$]>|e'cCR ^)} 8\1egb0~f2NIdd`q3s@:xNjx6?܅|owx J5(O[9kӉ^<_)Ќà ocܬBK <$HC#ԧ>giC!k+x 3w8\#۽Q5,r.\2_Ս$G-a YAj?$Ns#V@%=:,[);R ٭U43 |soRO"4[jNA#>;NmTEv~+Wko?UL$D91=\cl66qڊdN]HS00'P-N+RG0mrJ-$ihvZmZCut">]p0m#B$hBJ_0e0"욵wXǐ֩qKPΈiuIGի,/uLw|H-fH@'o~)&XŬ<(0 3CwT.^ Hp% p b6eTF~fVncwf+Z;9y+oU a%6ef$3DTxPHQp2PkL0E_,vB[JXILϚ?RBLk`g ],Dr;<)<[ D AUypwAg%UKAԘi1},c D9 dߎwssK^LCXTLȿE+|ɸ*mGQ깏/y$Q5:jG-1Pdp1DNYyOSMZYuf%Jj*R ߱[!~C7]v6JN8yx蕨LAw赖OW'MpnGDhRoqt_r7y&qѵ"%ܽd/57| %Am/+7bTXMr(W,C]a)+jۏ{^B㶖tN!HrW lmߕ5ѭvh0eTv!]t"Rzf!X"ouk9OGnA 8rIsw^Xuc¸!gW1P8O7v |GȤ_^M,ΏG rkBz_Kp,q(-NkvLnM18[kF;S2Q t E ɲƱIooO@ߚÄR|~Clz]k :gd;eG: i^ 3Y^ .Bon.'C̍M`2j|=p||1caK% XU$u:+d]@V5K|l݊cX ,;Ea|N$&m%S2c R  >o'5p\Ė쭘hI z>,={N( ׈bTh&[:5ʖbgjlwRD;+UH'h-(stYF0<ݩ S%f~ς"xɩhz̖Cn.Mˡč& . V? c ZD]wXW 6+"O}t-B -}+chsy 4-):N FNvsycˢ}1ApbgwC)sPv gЕ9lr|>:u֕pC5ru(k-cXG=^6]{"ĠS *)6ipmb=UQڀhfSoXV6!ֹwYY2umהe$0[;/zfĚgSsd!ʭ[ce,ހa wZ*Y) ꄻn#5DYDI>peXEc .w]tEB#O VlY)/-,Mn77b&P$3np0yT9?U~R84t3=}Bwו ɱe}xJ, W}o„g`mס\SXv9:CQ^L\U@O=Z`_[[U[sHԉ@Ƴ ֗O e("i5Wyo>lMȯ|jR,}5M2?,UKCM _8OKeF?g/H^xI"\\mdJCb*Ι@PԭY4fZ̘GxN#YnBi'z ?1@ z3gf=}?G`BKǖc C1@ؚVjmmWrIrN˸i m,P}'T{Nʯ0*Se~zRD6\`Vfl*# q-DԈh >qr}\ :=*.Pl֓3d\# 'V>S2^Qs;E.%zOylO'P#,kef pSIU3׸tf /.э. =Ԍ>pN0R5P*PU#sRN,k$T(Y즟8I I  k>~s%0yr]-M}kx-Mz,Ya(aإ i0T!`+av׾Y3ҩpb y.&;!"1/^mpRl< ~Wt46$x嫙SA9t/X[K?P̓JҤq&j"(;GnVΗeIs*iDjM 6+XGwjf]ޅ=DkUaD?= 33^d~'Bk2%5}BƓJyK\,ڷ㸕zFSH i?w,]qwC.X*\uQLL:🕟~F<}At]!7X dhIO v/t;0.9Eueu@M^Z+_1!$a/XIJk4g i6-wj4HcVUavkv˷pyoQ*>j}1"XQYAh$#'ϴ{jxlVhb ^E3,e"O&;o촐5&;~d5Z-9>J| ZiS}l2p<(;ۇtjhmLUq%mRggLHym`6nLXԯ6L8=C-L/i+2JӕO5 /,16#)X[i$ЄւmW;\ǪSY v-&h4+UI,) Yݼ>FU%Wc k d&Y7Ɣ"`bY'[JV|;y a7h wDګ~bilH^.*SW,]XDvQ =~4kA㗏c,7A _J\q%U$\u~2kO+*X_lp&mbrJcj8]=^90<=م󀚠rm!)vjXn@X&JB)fIwq8&󿤄lFpr+̤ /]{$ؼXtD#G5ӳĪ4A9mIfFb) F픳$KH{|Gk$L&vb8 2E>=%V,mۥ>LI#'#쑷cFC]f9hUQl0oL4 CD)4gI"" _ipm EL}|V3圿%HIסYyJƌGS=IIzeU!۳vbW{8W!f#<{φI ҙO+Gd:Xu'C o#W\`By>xQ Y0ReeAKAfFȻXȣeʦ,GbsTq7R]H]v-K"#~[|'j!)yNۼ:bA 9"c̸m3&D,Ώ?ر/ ilh duVcc/dED3-#( e,ifv=q+F>/۽͡UHcYLLI]{>mN]h%犫\b[76wֲ$r9LJ6TW\- eACͫMX _IJལ<Bُ:=ί/'(1 `[TكJXҳaEvOE^$iw)8鯉>LT];AFfL|KhuߦQHi%&6rvhboQKmWwSeYIhO˵6Qq/ݔ))EtyOdӅlejSٰ}+<鬛snUT E/,'9+_:r;MtRwibmD~/t/ǖị [~-P%b:x>kݹwh֣'+vÔr3,XAdE?Aڅǭ+a]\ h>#蹦>=}/{}L*/๺;'UV_a`p[%o UʨH3ǹPR.&X69e@B&@M[Z~D^UAh-S~]%S'-0p1,2˝/]9`WTT[nC jٸ` wS W숑^U| wO.-t皹k}7j/~`o#Ȃћ n~*dv,/v'Wzt xr 4#&(Ԧ!zzXf9lykz _=m;IåQJJ S P8kV ww՘UZ,J30^q3W_u`NzoAK?lIVgsdzH{58)܆YLfCZƐpQ|ts-M\U).J2/D͖<lDį2veNsٝpҰ"P5P1zPO{_tdwAyQ+uS:TF2ZNM^+&6 /V:^ަrq*<*vTZr3z<0JaEG.U"6frɤH! S1V8\lB" 5)8U(NqEjWt8{HdSz(IoW)Y._s+DtgFzϕjg,V4O/i0ePcDC.֪pa|FUu͡YK%B/Tv M@o2G(]>J4J[ p!EցDӭrcv#_knB!P08vuL7iQ;8Ȉiǐ0ԃgbfYԁxy33nR*1;E?@38u 3jܓ+{/uTbvpTC)y9сmӢQ(ҤS>`‚%6~8NA{ žgQ'HGߝ8B qkص.aٞH*v )O@Ш V{=d:GkBFNL*1Ω|upL .{n4duhQK |ʸ:FB憞KY*!~ۦ} :IMtM0?rY WK0,r-zMYc9Nsނ2y9 h|uFl(ڒ"vJ\~K=PSxYuu nIVgA|Epaifi-|$H;n\P,g-!˻\zrIΧXԿuN} d"PKJ׷S׊"mRh6eh2qwm ޏh\ tԞ6 GysIpJ\@S6щ\պRwra qwsrǭzmr&t|7HI}Ppp `ak-#}&ܺ83|U@)s~|`:u w f8``/3G^V@al0_Rx0x)PHuQG=`w8&@ˑbU?vòhOQA7B>lu ,OV +;ɼ^9фr@cfˣH#Ǥxh\$[M52#jfFZVG\4Q<lwbB[sU+ F2F3XYH7iȽ$!9DՉ-^0ёt-9\27113 (쟎Cwd͊wM/[4B.`rW`=t'¶m#=[_G1R餶q.o.0b40$ŇPUgێ4?ܳW_I2ǁ8ˍKέ} ]܁3t[vS .%chAyo0 U-c9>g0?SS&CM^zqzޖ{$o;ԐO;!qghlZf,~,g*R[V+M䞤KV#R.DD6;NOtaSװZ[y@8V0B6YM w7,9*< W4¦Aoh# k~Jg h،Cvj@ASA%PY*IG< `whQ-LO+%\oνaXN<=41KՍ, ea1d2*FWh?dif;vZ^wvGs4{9 !,D*?`6IYn4JgEF}[C!6x/ @% `5M!g ^ۣb+,){/1>z[m- }|+t"ݒWၘXPzss@BU߄)0T8i{c.{hX ΉSQEl1·>waޱ89G]hu.*wcf<ᘉQg_.k$'n1WقFﻅM6"fX$6 Q VsFgq^=/CUOa 0Wf/I8˿N0|v^:]9^M}Ь2N`PI*(>v7%LAʄ@"t*~`:E[+V5x_cT^]ͱmٺ :|X+]^u?)۹5!0 ymȺ9k{~tS_J fgbK)X ~ým(6jӋPy u%6{X>B ةD B_ϐK:Yb"Io`e9s9{DWĀZVٛNtp̶Rxi^; I D>] ioפUv`]ZTc./h~WGH-I$JKIۜ,)} XT=$<)0,oQ8a:2s"k|]<"UL~n`DFi[X$ 8Tl@W^34 k(꡼?#^fod@2-_ hm 4х`];{iEI|Uޚ&Yz%TIv%Mum!A5-<)WUUbJK S"H (x[ۊ Ⲟx"a@HIDI>,H!Y-9pK4!^s|?jhB SG"ѕ9$Z#bLB$9!R}~1iMekp  yKZǏu0/ddRY M >hS!tyo(L`-,ȮH,*JZ *z,hYPUo",F%T!V}I~ƒekMB7@x 2Ҹy-sEmph3.:>p$n5u C=2\AԸ[Ϭܑ":YmZ⏔^ j^He*+Ib^o gabe~HV4bw_~ #?\:< 蕾 ;2'Y+c o&[Jh]}Q&>ÞWvҰD+.!̶/WyY ں0MȦo>.K@ZUe0|D,W(Z-tܖ60o$~fku4n(Glk5N}SʏvC<dQTnofܬRyN} (D)MjOh||y`QVDQi,1m.45,ӳ RW BʤDUi2:PHW+ 穆`q|7ԤUECǵiH%Kp3zx-2 28I_S!QĦ0s$ j4eѸa:TBUH)`:d.jVpar(bNsWq %s["y-$;,#a3ՆB|-ŵ &\h%+db`4rApyAzf5JqH?_ࡤla?cCS106+>R[l|jZJN|.11iM#X`^Յ8Fg 2/mln>= w=^y aK3xvF{Sg-YE- )eKmLM+2f|sR.d0YaC$'.wM=U0)ɼ,*|I$BU_'ȍ&By&լePz΍(`ΩTronBW%@AdWy'Piоf`RY{H=cphf R&KcGgή1y 䧆Q$MLӫ[Td9U2,qeR a LhWĻyK9r\ƗH 't6 Il 3]pkt$ge1H|;<3V|mbH!/I9w>AH{%Mw+QcϖP >E(p`i VLUkIܻғ@{ yl'D1CDW*#ыKQc9eZȖcn̽?ZRqL_Y|h!N{qӖ34Lv'l&ٶY%9?ݤítCn@a:\S!*!Qv DJN?'"3񢻏:9)! z/ϋlsN@9#*B>o^ =&W."4X,_n(q,*먷-cM4x-7;X{K¿GC)T+O HS6e6 'p=̥~GIMYx-XvUhLwZX&axjGŃKir1^ZBqNmPer1F_;ݭRBMWC4FDX~z 5@&|<nMVkZ<7^7dWj߇0G b>)J;-3^chMz%*n"A~+e ^Lxu 9gZz'EDki n\):#Ǧטkj\aڨoI%DIj!h 'E.3mfUQ 7 ;gzޕP+p wW*oVP pM GZ]U^ xQm"5O1̽ w⹟ [_"`(1m  'LVZ6W.w.g0Ր2%%Oi^[wJNˮVmПEH"hcE-lAC^Li-ߵjCV^VTG2Srb|}=`Ƙi~pgt"L$IH6텪/%$]܆:W2 @jS&#PʁG53[M:+(OȪ˘X-OTOPav&GE"C'7FLRdqpG,sZ)%kf/.U%T+KT+.٦+ڻZ_ޫ*$/C37tg38-/ӈpVH7G h 9wrj}+gY[^h 0OSh)/3Zֈjbڔ0@Qf!߰QoC# q6!&kQC O]\Sb('7>=Ogd8(fѧ~>Q&>͸L΅/q7ف UpR^v%=)l~iXE:;P7YMU LI<(^~Y$bv}%VR`\g"$v09H\C,~N$wĿ>滢0u/{Ss8òBT/gN?7\ c?t4J{{mAQ'y rS?^bgZ8a%] ju; s c {T?縄?z}> Gs6d7_mx YI5)T}(zU,-o\]]!0.! 8zRAAHx-oE lXץ}$Gtt=BH8.z ڳ8ϟ]^.ur TR93bYڤ_/Q(yG|Kөv w^^ #|.Jj[:x &YZlVTе,}Ylj>Gf}lC]E(,kYoutg@Ez eD&&W@۫t t]IU}_XDY Enc"xygs0Mֆ$5(ZBi_[V`4u/8&&~T$ְ=QDžKD8LK,17ψ6t5`3x80lj ӕNStXԕi)yjQpW0pdKdu6m]AiA*!exv2sgr"ȍp8a&B6a+ k\(WF 7Ww/UŬtaq<հ=% ;#M7QʙƠbpÑȋ)|pPaH6/6YW7+.N/0{pI%1bi.Y& J3MhI> eY&dҨST<. @SҦ:agq6xc6\X~bΘ@2THe^6}+˛=x$x?ḷ$} %=3(3o]ڵ.G ,v5nTE>SwݔRxD*-B0 T_#7Gume!@Xk7ESwM:A*4? aY<ꘒ3xȏ8"WP/P:xl;.(lؚ+3iB!/~sjB{?8e@`ityRLM 3Viyy&C 1MĞᐁEsdp_*$gYK[iA>L3f(ͭ,q@y4Ȑn Z-l\\<߭"`ʹ-+!N*YP')!aEMl5 CEɦ xscj3j/; qO0<$)=t&X`xS(}۟HmlFP: ʨ6snA<Req/a쀌Q`^BmCNl{TwJtf%$D3q5 ;@6Z0u!qQh+^Yۣ(\{?g>5".gMkF7AVowNZ#qt A*< ,X >welpEOuO7\AGV'eb|=<>ic7?*\;E,nG72JVs7u5m|Cr:X-"7CnnTI y{㤞x*WkO.VY/~7lKw־1|=_d\˗X uuYZ۪ܰBaQẎc& & ?K*!؅(@˷Z=m.l߯K$^d--͟[c~Y_˴9;JrU"?8mcۋcc: %>N=svp#P_Kw'0h jŋ|6rZ(oMk2\0#9fEk^ G+n@)Z݉Fy+AB,>8w:oC:/ " >ZEx&Z)oߋiSuzE6[9lrW?sEP9fL w`-/Bm&|֮{InβS5wIG>Te=XMPHbA>>2Y/=dh^CԑX-W(R 7;xh80OK'u> o-ޟ!7فA-gr[*!?d ǦKFl Dt¶_vzOp2ݘ،~!^h=ĢEYf}Q@ &~; "3oXGU_f53 ɴ[ dP<-WgU-;Vw8j0`?T,=vTsdzUu]vd,ltǟ]Mqy·--3c9 Kn'm=Tk~"Hq7VU71R40y՘C;۲z[Ϗ۫^J1Yo8p[Hk] =\xVg.g~-}wa22=v4X7 x=hҭhͲuf_mC'4 ֿt!!T՗c2 lkې#Dk]DߙSJMD΁-VT V'8óiy? ||BQ:bb6ޮ3V!9W3^” k{\tb;+=Yo=A‘ Ķ\9Y:fǘ6&5TXA !5%R@|&_Ar G ) @!/)zmנ7:X++D PU癫\ !6v][L@΃Uo$etu=>EW %yu+98bTj:m5R0n6*?v$8Urch-F6RSIX'wް6-YFC8>\,f1iVs[9 OTh!?BmMTpLnM YF5K/y m㰱95{Y@V->7CIjliR@*<8" ]^UZA[XoAqh0޾42GNo)b%Dp>/TU4{bzŹ\mjtvw2 yj9<@e.µr$P6JAYa9D O撰uak/\}5SV\oHz,sTv}y|띶{8y~vG0ߍ+f쬢X/KWm+O wܫ5t6;j8E\Y"20@xMQi|#ʪJGW&;9fk0Jh`WZ/zVP\Vl9FnvR|؎cRh(zHŘ.Sfƒ s:!eBߴ{K>HH7AQi@~[\J9kS[[fvqRGB740"iVs= {ʉ%~܈L4__kʥTdn=G^K_Ҫ8}}7N)UQ!yl۾ 3.ڄD3|J{}j!}5D+UԁވdF/zґNGDS2aπ>v ٓ!L,cnSeuJ0cT8D p.R"= 6H$5ʑ#be@@"KL#AC8yP:E(/-L·"~  Vd$ЃW2b;c|Xvb|•mo%eILUy\b辨ppCSyO}T1+Pr;R+ŝ )qEge+@O.xSrqş`1O=hl9:Օ4Q}Eϩ{g0M u+E.qt+&jfn'Is`W/dCܐP ڝv7OpyP\%}U6~f4%?;C_XjY< (ׯ|Sb ?EXDWͯ$l+5UH\dبtM<];k!J %B E~C h3_gr;^WO|>5{vPQ5s%(z2,m;M$<%}b,67WMg]Z/"(]]{x(KR!Unߝ嗅 WI8ݭ[HLj79P|@:Ď:8V*(]\.xWm9jYC/˿d:@fJPY5 8x:q}׳M9ay=NJ[*WuʸIV":#pۼ]<`@Lkt]ne-&[' qD63lO&3i!q0[N–e*?QdQ a@^lB?Ƞ\4&$Ըc߀&) `7H>cInQIJz֓ 9kbSV1wэ4FءIy=s5#e/Bf?1ZH0sMDx"KJnʱMpǨ%)vx+r6u v2Ui1E֦n~Ӛ~ԇnI,@QL_'R0+5cڃ8!@U0l)zM\'I^hMlw2ki 9kRM6$2n=`M+D>k@wj{2D-MN GpOɜH-iH̆{њTb1rc0e[j>i„f?_tm^#> ɝ)PڦPk[T!ru@syAO0Kf-<6u0T ߢ{J_ 4:r:)3y[)yNy9 hV>ͪCì3hJZDhqOF_;G`4pO`"V^p7?ei2hrky 5OM#3am1̣TG\΅=7 u!%(tf/E$A5T.ȅo  J5V# 4 { .P?#GͶe֔|):y=|DHw&%%>1QV2sÅu16#Zp{ "FKE6Pׂ#v/j{c|g²n,Bot^]Q+%a*ԁf7C^Wםğ$:KzSGRz҂zNC&$9|P3bfÂ>Źq@/u$͚Q_=z !m9ޔ weh|ORyc|b3koLqW!~z m¯buU sGPޚZP#PSW_s,0VߗJh@,h䴍m_i G'rS TСdL^ɻ!vY^BCy3=k>t lMN*mVJiB@PYXutTI^fm.`~1&M,  )&QCROnPy &zӅEABVթbD_ѵi-٬q">^2Hh5ux.U91[%M\N^L(ף=m)ktZR8HcxzIh[$ 2\%骁h¯?nH>yM2a#h]@ nX 1?ިWD-:DPpkby f&W&6dtpn& 2+li fN4cJUt nb,H-YHsևn  bdu3~$G;/>[(g0v8T\%R'1ӝ^քl"lkE "׻$5%:~ gk9`EݍM>%٬EĈY`XN-d:hQv:u#x :Gw-R$ -3I 8)~ߴzG_QǏ%˽ɁIIͰ/2$O+IGwjy{xcƭop6HA/7YM% B]=xv{~PW=椙!Q}[՜?pqԼM!SVsyW9b { v8XD2,cZrRb|{A\EݶIm{'zcO&`SsfopG (xk|1GZva-m5E0mvդm.Rͨ:uWvvvŧ5_3]-5FK6GȕM_ŀVW;H$e *_*3!jTJJɕi9'u>#{7K^ W7?[ yW=O_8)9~+ZNXTŀH};$Y->a`ᷗӴx|jK KiKRi|ʑ ?v(^w$Z=U"X;B)~XDOȿwU2$k9H%:PmOwF9 *9vOdgH[GmXL,֨hƢEAs_=iqk"Qk3ԺZndeλrB@hN}ֿV.lYhvѥ 9y_OPVE0%oGEߍ-@~1G0zn Ղ"3,Ͱ~"$2oɕ_z3*sn (y?u/3Mް@%3!{mUNͩ_M+³U߰r$ $gW]/'Or ~$^qw zd%37_KjVVu5ڣitL=w Ф'??'p6TeE28Z̫Sfbَ\y_'B}U,a5LjhmFu[XNB7"9B`q {޺0vSx|m/2_8 a4t Ԋg!݆\+Y#&ZWxmQ *{%XTGN5Bg y2\>af5Qq{F(%[JCt ESvsU>&Ggc+!凄:}4xe;B39F[Jle6Pr:koNó-^<~͛`VaDmAP 3|Y;@. $I+j$oM FN r`.L,}*.iQÁ3VT'ٔi c*~:pJY[? *APG?pH*=XkG&Ǧ7JvA^_Am&{>!B#G\U(5dfjj:T)S|&XPEQ<|2' ayks7*ggXBkY:UCl$%I,֬nBP(t8,}8h=dbd)DZ&h'Ғ h_e̩ 3"py ;Хs,Usiy8xPZM+3j+Fdkg*w:$WnϰgD]0%"'zj?i-@'jz:f-E\]^(z/1EZ ȽS՝C"䷫r ]rgC }.ɹS#`a s @. `(RQz5UˉfGA1Oa)xoi/仝܇aC @[ҹ3rҐ[׫5WU.:nsM JZ^MOx*0~6dmlA';6I0d&^_O'nZc~816+ǐ+u,W:sc@qW4V,?(r&EcO4~>̇afZnŨrY~rTqk==5#ua ?@>T>WK!v'0&kko<4hP O_dV*٣Hm-l*\?@g(o0=2ZLu uJߗZ ,8wQZ)ȧ8*N9TR8G3fGH^TjNtZau+ci/ǘR7[%9BU^ ɪ7Oq|!EIAd+E8[迸ز$˕i} Q} cOpKY]zktN&UFx^=.>::SK9ЈR֊)4LBVpDȔM6ZX92۫xBXI^j_"_Kgo-kDg4_tSWAeykrè)sOs9V@ e:+T !xȕ⛐(Z01jMaOO)ȯu^Jg^&]H\V3:ݾEB6ڜ湷 nBHKǔ'nɰtĚAܘr%`#|% oÒ1F*ήFf6Vs[H k\Wz\l,mԐf:_N'UqrU˥ ]w z !nKFNZǴ8eLTOAep׈%u@Vq8샟 3}N'-k;FGןpEj+edoQSe72-ɛh=ө~፤r3s)?Hs(EU-) 8OФ!G-C4p{ fc[d7umgc5G5[aDQpY__~:X^}%׀)^[jOA"|frlH4 L )N#Mȶs%ݝ5ѭhעloQ峻/9e$UO\ǽͣl@Hi">5=%KnیϢiSSs-hWE]TLCb[o^]6r2=3}&YWQx86>n8EU̥v4J!9qT1!cGF8)׈2\ǞN 0J} +̖ ^2Ca;Տ0hP xotyHsiYAJ*%4'-@}1\G[ gpp?>Xd<^\fӺY>]⽭6ÿTR~(g<[ٴĎv[-B3mg?~ {P:cg\N?蚤ېպEuO뗴\wEj=5|2sS!_8*wS)w(Θ 5%4 bs%j@3[Nht StnTL}<@ߊ!69Ni_);~p-x߀}Tjch2AUA@Ӛ i^'25Hcx˟B AeG#) -C/^V4 ϵVAAV\zUB0qӒ@VGnM_ae^y9ҳQ 3M/s֩y- WGQ=]E[O/쭊cIRȧ,1B?\p@ w@z_{"\WӺϤeI";͏[U?z#K$ɻ{D'h䢱éVta 9@ CSo()>x"9۲fE vXe;w:{J7DŽo Z]" d6;1J·^@}+5+ϩ')Ƅ#9Аhg(LgbpU{b0wzh+M쬐f ooKiLw)} z +. N3_~Z*AJ[jᨶʎEzq6(h-wab ZK(.F 0NvZh"-\ӷoP4[[5qR(!\!`zwC/oUC3{ }] D0iv%cG*lcJW&5f`Ƴw`3Z{sCOO*}VR/k/qp߬sS|1ñaD)Q'%5-d^xnJIh@ٚу_h"˾#$_W=y՛M*Ҫ@LP&0vOVjK@-ݡL+qG kϼ8(ҲA.IhtP4X'bX{ER 𪭏2oŶhѰ@v9&;W蝰}˝5_*[>D}hs%Avys# Yv, ==SJEp=tOMGK%![8V| mBmAv7R#)ZΗ*lz>7jvW=(^EQߘr 9nď;uӍC zb GaJ_Mkbp~(&ǒIcñ]3܅6r؋Cp95^J9G/=L<olID2<|xJR[ZE?2(a7yE)q:1d#K;M3?v= %F_{4EM:} aNR ;jR&6.;r]3JU5Ar"Rػr.3Vy[8ci$"jcO8Yvߜ5aYwG%k+sӆyF=[{ 3e$5)_> {+7f_HުۘBa]7͵e Ξ*+°5Gh5$bR;cK"I̐ 7[J'IWO}1<-T%!ˮ\;.@JK>DHRV=Ƀԇ >ӻJm*MA/ƣwF70B[aufMs_c5gU2೶7cV}IPBxj H|۟O:;:BE\{PM&fm)'7?mWO>sv\T ͟ 'r) &lnp=a΃^M5Pof0 f"^{rVx@B7]?T,Yq᣻׿[ws2>PhR sM[e,Y?E><0T@' 􇭘%,j3mX7h /{O;,F»Nf $`w?EIOů% sξT갦D| M%䐙=ۊf͒e077G}Cَ\\@X̤(ȧ!@;`RdE VF'> 6 gEX_~@ޤpY%`eH/W0a#Ha 4Ok8K8!x$Bi>wa6f:tTi߉_>g%p_ulG"v/JZ0e1NӴF R+&Oy |ϓuu^< Sރ@ьcc,Q.-ھ yhcw6]= +r5'e^\BXV^govt=8*ԂG~k\|X -60w {:p0}A߯b`! %q9H)pϷߚ 7k;r!ؔZr*˝pDjjXtI9<.7X9T{K85nXFfڭ˂9!|{bAHg=o:nawS\[a[Ht D-L)nӎ_h (+TE]{qzFV`nJ bio%;Dnay%6p*RYsJnw ?xo8 k$ݧIh S6 sł/?#R l\ :u-R;7g34fHh5@.Ŧu5QHU'2׺oP:"^ptnO|cQ7b-duI A @rHtG d;'ErҶOvߛhԡ=[q>wǙ!iU<(GO(a挆)(C%q?}+I\X0z穐VY%gcU5W y$4Erf6h6lAx-n0 vd;UF1pg3Phڕ г!|o n+FsM>B:#E{UA T_O n{/pۃЎ=O% M2s-hbϞHȞ(S k!yy鼳l2_ T 'JG$NE 77m{ 0%6jȍFs)-͛\՗<Ǧ͉vY`M:%Ay(& [ԜA g@] KMͬlL{[ɠAw{BywWcM]­\c]tzK]khM`Ji bJ÷hz͂X0V:4e$]r:iVy+9Y{xM_E WCHzQ'6171m4O-COf܀>dsoEV=Kؚ8P@W85mnmiȇO#%x𞥋O9"=z]! '3^i^-K%3o<^.d[`pw:|O9撰XzWHB:o&[P b @q"C 5+:-iq]hyǎNYn)ٵ 5!O5Ce~̪7zA ,RiNOK c+M.YN󞼭y#L -*~.ZKp̞2s4B{C1p|DȐ#SC2/0E_O`5?Ӭ!\4++SCKPL&:1}hH|Be4SuF9s'Z,?p"#ݕ/zLkD]8`܅φz;d6 Q;+5c\D(e1{>) /{ZNJDJU)T̎Y'H[tӔ3!TF] *0w2kX 1-4$#Q yf3^%io hċjNB2KA!ê ~iqmﺰ樶@ =^ A`}dcE|q lQ- |]JoCc=SARŨN,r"@5k!&[թ|F|LMZ$.Νz7ICI|L%\F >gW{ t4Atq曐fɇVn{nY44I DL催U wRX9!fdxy3Dمls,쐑[{7n?EGKF@0^3d&7%r_[',f/3)sZ}(W_ἐ:mYܓqWLIlA'靤7"4Kd2HO8p3*aNrZ;Z1%gr0s̖"7Vu-o>8?5;q^k<!ʣj݂ 6K:؇'ioR $EYe[-4-5:ܷYRLh1s5>!:eu֧RK,6ٻcۍF+Œ]4Pa#uGUvA^TzNo'~+>.ЃP>{J ݦ|ǘh h\ 5=nzdbr\!ݨ/rG cP{k;Ͽӿ6pYdbMB 945sD6QEQEKER{7qCB E}h|K*10:;ݛ^6&=qTō.u{Rv syB+ǡElD=mZj>ݒnkiйઑG/{b{u%EtnCqSc~GC_yǁZeerO!䬩!/,>k2!kɭZJ]W$ >uw5H"o!5,یjS^o]*eLjd(q=} YaL&^..Aej,ȡ-2s[͟E2շaXcÎ:. m5cm==/eBL%=ڕ+a{GzF~0ήn [b›tР_C)mI_H.yu쥞??8%B@lOc49gɕF{3P/䚧*0&Ѳ6o")nV,}`gUpBҚF/%k^; ES;`5 mìNc$LI12<У8j ڻXzQn{[׍Ɇ ClolpV]-I]*VbP+F6w'˕JSȆQ WBjyh7JuQIX.J1/Ă7!y('5蠤Wv*kMmU0O<`?Gk2dfTOL0(eFb.{i g"eKajz uLj`1zElP8eXY`lgv9pWwJ8`PiJU#,#9Hd\!5̾U]QCPV]2~?m7t 3%qf#B TO$yW\rhl&p ^:e~EqV|I_oI-#,Oai-ɛWa^]=S>s7hGA㯖ۅnmQGFR~3<3N6 WU2f&4$M1݀ HA`N MƇ7$:6~XiRiCl̪בTJ<-2+oIJMoa4cĹV`y7)džt9HkS%]Q9T B (FQV7z?Jxiq=p7=aΠ, ӲϤ纻a>1a06TSq<F46K"/u`$[?IЏ%fBivcرBБ>y0e7_%fҨ!G_sZQDD$/XFTnpdxDaHv w}qص=煓}AShR H P/ȫ1ޢX@4vQJ~D!@zht-M.g`YD$Ĕ4NvchZlWIإ{>z@ǿvf^@rK\W L3s6 yk(غ$I\Mƶa胊^! _3VEe|X[q`)x~롄 =1~`7t?Ř4g VA*bxZmdJ}3 ֖#Un 7w%cᖼ4:vDž ޹,GOw fćUgȗt"_?x׻cY5_*"A2G5124(i"aօy&.:e݅FiFT*-M;Z*V{+Bl 5qiR&_;'l*6[#8/ XaZ#AJ=JX9ïqTMj0yy0EhiB6rJ|NSh<('pl皏dZM"i&qhB)Cҗ"[-ecA+x\=G%$s^\q,QDJ3'Gzz N0a- Vc/ݝ'LK*Sѡc=+:fAtޮ=n#D< $C&rbc1-*G«(9Wz2 pn6~0[e0ț1nEqlx[M\5qa>啸ڋЛO8cA-{YE6kF cwIbA*NNmob : :* j߻=hg_9 6YOM;$~~Lǔ ۰' CgCF˘΢ %=oƌfSЊd#.^|z\C4@ h`hj_hxXT O#.}Cg~?B&#" K!#.A)POfr^=Ll0CJWsyC=OfG3A&Y.V֦) B#4Pc=Θ[ʻq{Cm*Ɯ$C:wΔ7 _mDY6Ui?b*oCP4ai:Q]62y$by\8ĹYloղܭ=›iRԻcL[]W!}i^AM騘y'*c#sJaCJ`RkϑOgRxn!t1N +_ּM/m]=32г 4%#8ȗj,2pݳ|Թ\=߀LZbxExgrCikZ5:e/Q#vDo|+]1Z߷80xRm=)>bR o2NfMšX#ZsT^ˎ}W\[Meb9!WAq.J؋ٖKw> zt4]*1d!3lkhaU4{wZ^&-\uPTہ%\C9 VjK~,x+WZIZ@W$b?`m>Wwȗqkii$:C_vg*HzVo|?\q; ԒAw}5&^T е8J|<2o*hk:(BNl7: ]a}\"Vu]3}ڙUcR+4pP %(X2*-sdszb=xO3@2ht[tn{VUi4|}a!C)~ęp?6oxMwnS746 Jy/Y|#/0XIyO1{f_j(%=d5@#F!P Zfnmu3^>%l(H[~ '\c hn76)§_lf؉Wdj%CFOm %b}`zѻ떦8s^2W?3$$iAObP7e3n3YR/:O ögR- 6\YɺWy6zʴ]a̓ݟ!ߣ 2uT >dA8*զP 1jY"mW?`z"t2]eD'V#.[svk>1s.zW$j\aK ?52#Mٸ[2 xӐ)/Faqb8P7"Km^NB.SOHMD֓y36( 7',p <@YQ34YE,AN嵰H|:.\M{(0<'"~]#>Um=K7X2-6LCj#s!vvLF<{ خY` %'?iW.~gc[wIcs._R(? 'εc?#+#p]VUF3aAb*~HzO]P\HMvkpK#!'`e)lv0Tm$bGF?:9ѨsrzX`#P_X7&)`j#x.>|sNƄg—̜NSSY<~z7?<Ћm]2:ߵ{ *f{|Joeل w\Mh]S4U'Zג6ٻDgAz^QχGwD38UgwM銖x~I8!hV/(VoanŸ_X۫l!gN˷3`KDO)q!4\!cH jiJe->evtTW`GML^GjPXGKD'bu63cJSۗ\UzL,V1)'>Ry+j,Xyu=pu(XG4_ G9Ŋ??5cD!m}m|N}C=>B.9{/qv$/\:-źeRlׂƪ=\s$ 3m*sȪ8;K";^U߯BO;jOPp(Fh!4yPۙPF*jUjKEo`.>c1bX&䒊JLvT H:d&]*RmeϽl,`! |$E ЩӬ2ڪ_u(8OfN_P\3lphv$AOhY!TV"?#Hz|`8E8կ@#[xBb\pqY*Ye44gA<ajV(Arv 4X&7]`yFpp)PQ(iL=M4d-EpB黢gHDC x eHM䝖 AѪcQ0ۛXw*.|=·.޶PX?{жXxW H G(n:hbΘ|B\2¡P8Q[o'A+DŽZ,`bWc OzJ_i") ~v1":1fpߙHK+4O1xRQe9r<,|v 2[EJ?>]m)M9^u4"KVҘ*F3:u)dX9,9+kn]G--a~flKqx4= i5ZG6k :,VhO8񂈊7dγ|,::#i [Ŝ>{ o6?} ?kKraT Ao@tNerF$WzL@(j$WtwPK#R8&EHL0~6+Y_'cJljqolh:ۨ(mo8j@nVR&GfN1͟UwA8'Rsw C@~U` cMM4[1c(Ral6Z[i.|PjCXE`²^rP"D))&h" &.qDݖB~!3@lltK9x?4h,&̩(<-3OJ/igUO,aKg|XLDE`;O(╒ Q;0,_ xc+tV! ;@]t @gnq^Ǻ[^R.;D̼ ZEOyU9c< "q+ypq&ԙY*',V0bc'B*ȶŊIZL  BfSVWRn(\mg=JH_sy ȣJdd ';;7Ǘ|{|܃Է{3g^7Qz)Xi|Rʟ*c90iMPn v 16Ȗv~.bNrarzJZ[xR^:zbҡ80 _}XV3f zzuubɕPΦw67ۘO愰ZX>%yaH6cgl\Hhi%fts`\E2Tժ-_F}񆅗~<; h(Rא2Q{?yU$ >HQs m\ gc J$YxjXTA]f &1xxL3.E*+Z2JjjQV>J7#{V1Y\3o-cLT&Ap1 bP0|Aݥ)?n"b[F{~%B`ԣ6~ b>oIQ VX]`bYwh| Mr'CxfwEjv95yXr +ddtf^q@fB!$;sѕېĊ !-2G\q-gt6bO=ZWA`/\='m;_b wikT]Þxpɜ0gtcb)2R*ڦܟEpV*.MK^2v*U@1GYP-Z#kWp1Xf~ߐotOXFRo~VMm:Ngy vD{q`3]n7I@0+!1MHTϳd 1Ci Xd${pАکhF!E[jX?{#Kv^k$BzF-) 1IBT*å95$Hn (Uގjj,a-X_UBmDVpZ rc%0uZ"i(8~*x s-˸.<68iRZG:! tZw~:_p;7bnpla32wsE1G]hvBrՁx{GVJ)gp'D{{մߩ]#E>?{$HJ^ XKfeaxU+lRM0G撱b`;#Y0 SƯǪM?.r~F7,Qe:oEϭ u$t dbn5]|ua1cC!N $xmoLmGej,pحsD#!y@>)Sy󽋺s{,-3,o K_YB)Vbےȿ_YT+ [lDWhx@Qxxj>S0Y]$2|5!>פTTso2愃+Ck1( _zB,Xסm֏`[)5֯N5ςu$Fh Hd$# #Wd]]P!*4^5~CaXk|#r?3: 2<ՕtxMД5EBj7H M6O+Dl%ц,l6-CSۍi`uWk%倘waJ2&͏:VRT-Sbīt%-Ca@ "}3!hHF:nSJT RA'%Қ]?c>XꖦME׸"Si\qjpC].1׸)SLTsVZ(>w MXqI=z?~ƿ:7KT'h)W}i[?m̒>Iz}+F' (YAJߊgss+J|Gx*C[p.3q7E]-X~vJ,?{[W!{ qUhe i;z}2oo,Lf R cuyh!6@E)#sNʪYέ lVi@zN!a!bC h@vYP tt];P }b{B RWEHeU[oTN'$y2ucdBB;wq3֩k'"p(xB \[$pd3$u= L?5Vtf!w֛3a@ ;_0 [1Wi.%~0 K>?ywQZ2V} +9 V %' ܦvWo>\-"0fϑAfXellW@ [OyQ{~Q`q_@;~쀢뀬S7dJ @y[\ yK!׋Qޱ ^r:-[ )TPk ?֐3NGN@nP+5^l*LJ~̕m ty]xЦcb3S/5pFfm[%,Fl4Mp 94ΨۻUu1<śG!zË_1G ]Q|q#c UP6qT;|J?\]:g NbaE'v -C @ӉPyp}5fؑWRKoP$c܅\'i,N }/;C@  bWVM?oz^ H{ZŨ ~j=is~^ȕ뢂@ָI9PK?FYn χ/O5 ޥJY>++QS<@@ykו- D2 LUTIzE_uAB06/Ч̬όq籹|oV2q=L-dWTwN-I$R`KlxrZit {"r/&E=6>(esw,;ܛnr5s4+z`!0剝95|?Lr*+7]0 Pvč$v/Kź$ DŽnݯ:K ԛIyaN(_4kہMﭚfX|n]̤>4}x\'۠ /2lɮMCe=GKG8 -TToDO uJ>Hj*ӡQoYY=ݬWF#uMLƌA޽#0C{X#=PSr,/I[1!`MGWЃd254 ޴^VqSZ2,Xe)穊2cR".lF>gVjl<J>@ >OD(gjG&PBQ!%'{z+[J,=O#l!ȂK9+xX| - Gf;ysĚ1JD\?GRm7Im\Ϛ*&_b ^6܋"So#hݳTu 6y\#,wb$4$[虁YK\"k%H*VNIڟ`漈"!u.?dR؞("A*mBg9A ; nȠ_ ;_'Gu.דUؕ"+O~JAO:Nԝaک6mmx7zKLm}(ѐ6]L@h4<<8EXT|90=(P1܏e(d=7ISjd8o[xs1}V0f%ZP_#6^ongBE?"boS} %ag{Y /YGȰ;/Mbg# Π2yW9N }>t8F~d_)|q% ;u]fҁ.P꫽m*%*T=@]yzEVd/*nvS_*Qy&3Px5B)Th9@WwcW/̊G7nxEbo9X{pv$M]},q&ߍyr;=*T xgCaWlُl2el0,Ρjՙ2[oX\;鷗B]~g &!Ґ A o #m7_1)+3!2x*I?Y瀃A bD^rj Jнu`V0CR&D8[Æ RM1A Kbf] UN>Ǐ]qEu۹cm|)ה).{_&]Q"D|)waq=dm C<\tb(Qw1^i'FlJ#L ^m1 Kt>x*]%ag9CK1,X!MtNin|O>)7!!JdEP3B˲^gz?BaFDjwX! syr{c(a=RP8|S{rNAW_5c-:_;C N/l~H`.JAftƽ1Je깍:!ٱ7B\*52qQ$\W9ʅQ!eD'2nrķVt8\< 6/8CHAcH,(SSGrkVمXɩQ@K0]^G݀sЛw9)HWCkkMVoC{os]yT^:BɗLqf"KF+'W6vxu#8Ϡ0S# D\ 3EhŐ~w5 vYêOܱq,r9#?waY YB9O<^ ʄ;zXOEYJ %&Emd5'_V-uiv am? iBfc7ٔmŶX #ͰB.=]biDEz?,,Ʒ;d4U|Y+@zRUf!D*B&&1=.و~Pvtm)fNjb:-hhv2?Pq>G9_PKP ((t#淍BcfnjKՙb=oMl0( 4o=3ÊY 9>-`w9$[Mߺ}X3iY8"*iV,p7pz\WUEL58>##oH)OY~ߖW:|k,UFL w(.WR1D<05 \NEn$߾ YE{ש[qLS%&,IHqF~s6f˸)HqT.˟P' MG' ܉LaQ<Ufx ,= čܙ=H/&;a!7u7f14vNnρfmpQĥi酰!Gى Q-Hɏ6)}.)ʖdPAg蓝s(iIpݰ+& BFsUm4<wW(n;Ҝw}̥ hϼ yATfk<mӁ+h(|PZ%hpod61G(W[zV77[ejl v ;MiQw6ށZTk/2th^^8.+Z`!E>Y>5UKkpժWk}Y+Tl+CI:'rw-W!(OMmp^5 UOP7+0_=j5ʏ|Eڈͮ`wJЃBQ\k^%ul ח{- f؜Ίp̑zK=[dQhg'GYoLg @E gEM_sB %-@~>ejJ.p9!bvkҠtvګѽD!j\<#Z?\ pNh\hs2;,  3*Yn󞶦r&a<DZ~ܚ*dclWtFQks[^JYɋY=*-_6?!emPupM^S'(ͻ&;9}@FƱ]>Lx3uAEkĖ; l=K=f4n1Xs2Їiؠ#yu~Pkl 1t TtQd񍞇C+4k.,xr9wb]H'j:ym+ϢgŒe({lχA2߼X!?tMjCֽ6R!Ga9,[u)tZeٚ_P Ԋ$߀F`% 1tٶ44W7&jП]|x/5pD0vvEzo f|52-Pu4SE㒫!ݻ|S<<XQ×vci˭SErx/ տB(@{'e 7>OR w8YEwt YAY[9uF\ZA%|X{Um!*cڙzJk"0iįDt*a׍hvJ첁˙1vlWټzQ,SDg0 'Dtb*+5#V:C3gQW;v O m 4BEO/ A$g$kM 3 0fmzp%1rS@t|KNDIO@rBp$3(k?oPos"0[NbQ@\>P,O?GFtt ;Q7Δ@Ht˥$\O[]ͩ4v@?Õ u'U[1'72e3`Twʌ jUCa6Q@/m=ό P!*Ս~V~=O|*s;XwvPtxbj\ӵ mT JO87}OvӒf kq;-'3sȫtCH']~pQ`ơo^$]7$<򻕌g2iѨ|:@YC̨6_cCѴuz5 FYV, 1RHu:ug\ۯ ЅYG;Z~Tޑ,`Mo%JhD* PW+ ߊpQZ pwh>Κ[$)sQ Flt,y9Zs;v$y*dwgY%mݭ+ r:^M 0_"tZyo" }rϜIS\DOZ! Uxe%jBhq7Ia(!=zl[>;v=}F }>T?Q4%U 3"o{yMk6MlG*JAE`;;nT=uKk 3!~q>C& u ̎"Y")"Y b` IocG2HV 2+_5a~-lrϷMbϻG3(t2<uDMY ġ&V6F9x^+߄?INC,_E4!yCFT'~_ ߝI/}BE%ͻE|U%dx#osKFh>ֻ陌Q hA1?[?G*J2B&Fo ̹`:FWt会88e*lF7)Ni #qN`/3FڊtG$~1L+[漇#뙬B+Tuԁ"mXM>U|cث"`|9Nm_CR(ԇ b}˪M4~iǮyX-m?O\pZݡ3Wfᰫ#ro`ʤ /I4=v,ыtgu"@ϔʛ*Y<}ί$ڮQS׎ EuSz;Mg7n i9[WǨq _2e% 9$Ci[uJc ihatO}P3Z֐kC5~) l[W=U]<TRstU̳Ćn7;׌h^c$x?L=w gw=Yp%]MZ(U;QCx[57<.tF7Fvʀwg}]&LKtfpQȦ"7b(h3C\m @׺|Nu Xgrgک{wc]$Fp9\Uȥd(Y: 5^bL}2Z.׭ݩ$Ig>7Xئ. d`sCFEk x>u䁛j1a|`L1Wkrg>m(4' _xa%- ;_=ƈ|h~<%hYۄċy29gbO' +c&$.߼ˑOiGdϮT˴ Hvu]Fuh>>U([/ѫkx҈ߏB$*w&_U.ts0Pͷ9;)s)Krx ?RqQQ; >q;JwE3 hhS8ҺEwuR&jEP뢃*M a)Ujk"\>ۮ=g}8S`}Atgs@(X@OpUҿj|jՊZkCi{4x"=c)V ްG3v BLpwI eƭ}$_&Y+uN i慶EΠSϸ.=/SʂB%^9܎OPj0]P]ㆥH5`YnޅP_K2ljm7ڇzQVfd^CBOd~!&/P1rKfٴ)d[66pe&vwc9~@Tƞ/{0-VLe7U@3*. r ovWGZ A~eǘ-.e 4KZ"7 .#>RXb 3G)'NBԫ/eb=b7xM=-bZ]iD8hfrkӰG/{WȺ ۯ55xo "%Ę>|YŃP-I[;\BA*qkȱi'G^3M&6 #jzsHٙq7ԁ75S+3}  9X]fqEu}K5f'-$0%tZ',w퐏9Ê"|Dz{|]VhBQx$S3[g99LoFZl825KM?R$wOh0q]snzI3xxKRzs,FS~zWmֲR* Qx-RcJf0{NMbymZDML8<_Nim&o, )17XV؏FR<!l/VM/i>La^<&aPZ un#:u%<$0<^Ε@LwYmt6!y-,frf94ihO,QngAԨLl,nnb_ΎSFtN5;#oGw?)!7J!VKhܑ# n[,J+~i¸<% 3<=NZ`}R߶`2G]u)w k`Rr%Ȕ&BdϦ3\UIXf 1,v,xQUMK Cm MmQuQQ^6˪#pk6w mZt6E6L74<^n^TkNsrXpک8[贵¤+ReE9z8oj4R_6U AWJUьNN _#'D.-`,6eϸ,8s"X@'r'Hpٍs"fi\?\\S.GG%l p|>~hŝM8ն&h .OdQ δ]OaȐ!qQ),CĤ1Wx6{kcː4:,ףHHAH _'}CզY88Ʈ"{~|]V`d>Sy},ؽ^ө#ᇕ]L@D7GZ~v?V3\7jzcpݻvw!h،fA ?3@OI<2sv[W3'@30ϲd}2iSzA~ő㗶d?UU(TζzS3G'|zϼ:\P0̦t*=;[DZ v8ٓ o<.K; ńMtk aUQ$a7duhq9{GfML9;7teZ,HpWz( pgvw5Hy1&[8jbP? c1ePce3{}p-sQ~= RНVu"0.u٭]$:J4^aFڑyQ=I<ܑcqܝ%(eMELvlȍ> 66l3V.1e@`]&8O*ʄ e=h|WunEMAҐo0, ~hks6Cwg ;_ܲMe8G6^Y`dA}V%sw:+?n R)Vɚr]UUDWlє(~,_?-~4ni-M]I \|Z!z.Bj@ BMOy2Yŵz%mkqSZ}`9B,>#2Əb)s:b' {Y䵿XO}.Szq=^82&? #Ju m2H>sbUBy{j0&+[zŹ)6 fI!&τS,S)4x!0xf0!z].ɔ]tAaخ-w ,κ 07;?9UKz)+$g;iAZitE>g exVi)ф_kZCczp{#Srkk!~_lWq6ZF)z+O[HY]PCʂ88Bd=.)o-DotII!mM$y8nNp8qsnޤ|R.x o< xʫ0)]SկƟ(@ /R5:m;0A&s (&RFx0N BFl> d7jadV&3k"\5)C"֟͠t8-Y"s a̜%VJ)~LfzPٝIW<&Y P R_F5Z\Z}1kx_2EV]I[2Xt%<,,$aMld[˘v[cde 9Z[*x薦e _N 9 FU֥`cK=RrXt`^asY2Sƣrw:/ZҠ:g-T8@=xGʥ9AciQX" Rp}-Z[d)g}4Aм#J O-B] g]hԑDtb5=9MiKؔa 5y'^a75;fljgt^O}bHJ61Zs!CC2r  {=tܵ Kr]݄4.ZہTjOH3uΡ Oy l 8ejgBdzyB.Xv̪aIIK"CGDӾ_;zR0cB5ػ}ZH>Q`=t뾃|{\1H4@:'z`d)=׭(yEA}ߜFȠ/bFV,H~ɂC 2#0߱+E xwl̼Z$a|: LMwnt>N52 N58dL8?nn*;mIQY ۪VVw'LȝF0f6d#o* ^²^/c7 ʻ"zV~۞drdx̢6m1-9kD=|䯹fJx#IjΪ-:1/q`k^uom1Wb-wrXRRϡPɌG!F0V,8z 蔶\^s1u=?܄-cC GC2J"DE,N:Z2YNPL_>Ȧt"IEfz(vݳ/tZ"dXv _4`Ym^{;^gaǐE 6<JMYŏ'ȥI*?hՏR9gQYVO7)ErιgdK_`P9$`O]WKZ8, ܾ1nkQ.j9F N?'L39ĺF_Q±鲹\`#XAAihjI9=/)4I/0E ҽw_QԚV74H@ЩkRD1C~Hmrе n}6W72D.Lm#p;'7[$*UEbCc8/ʠr AOIJyJp6X2Ǟ$ yC!K* D'HR _ ̮GY"XliT~-xj{ˉ@@#pAR?̯Z?ECЙ<̇L1ue QMj֓o3Y"-XSMwYv혳t`cEw|{1#-0! ϰK%q5RJM/'/ɕ~|j4'?CPKk?RP=֯׀-y1UFY?AB#3]]Wm~M1&??+B Mo"H#!k/~JFKh)s>QU^ɃQzƐ(M~-mߌz[Psha5y9242V/@)-1@d(;iR eVb6߁Oū2aݬAôК;-Z};Ni(Dk+[AheEw㰲P9o?*AjYf&"$&faĕ!бWX%q3J2wkv )u%z}!6rD)X;݅ar儆ؖu,2$!l!HǮl4(\`{c;@Z1ob;5q^CB^]1{X9^b =g hZxnPѹ~WY kT 4o/w,jEVu`E¿-Q%%Ғ띉pf义/YBy<ZI41,Ȯ={49(&ʉmjyDOnb؀ᵑds?=*e|6muO{ۻ/E#6h#y{NƮ؀WnrAJH070fW |G4[8|*|>'۲F%LK{u`Ȅ+Z} $Hd=I+E)-ݠ #ZW#ʟ4!!GOt>û q90Q\=4l=J\sM'%^;/F0YV=V> *fA}!}whҽpv&=wK.F/A¨aA>beuDpfM9Ѯ`]ϊMI\Vƿ!"\0i+ ]>r)=PMĖn$A<#pS3!DVꂌ 2r,no}3:ZPy7OteF~xfO#Gm6곊76.<JO@{a2rJ0o3/f6:Dx3]9pi' qG)/Q˲rW:`?H271^ł(2p~mt_i3D[ qʩQΨH ݓD.RSf$r":Q흭 J!L &v75+EWcVu_ To=Pmr h*͏b"!uWr)nUJS#[Z:EE 9s O͑Fuo x;X/8|$"k;8E`mmIoxI9 5ODh~zT'j[߂-& ,Et~Jʌbmt&?l7@'`>" D xu'2]=](JTŷڍfw ^/vS)y }"eIs4p:QA,#'ٻShiq={ bWc!ZQӈq0 rL11‘ORXȎKi"z7 tl }UANܫ@y6">|,:Lwwm!rE ZJ:W?yoV!47V5Kc1g{"T09;K坫/&zHi^25!C F"`_ǐh譻7QNwwN\9aٶ5ʕ6uW?w,꿴ѷUW$Zg|}eH+^U9Twy$؁e6q˗oRl Q8_zBXD|؂۫J:^HU/˰dӢڋjXzƒ`[z4|T墒t&hT?$兀 G*x>ݻԆ[jG˶YyƱol{kǗg2k52.q?#ʮ8cO[Ctߦk;S8ٯ{`(UD )cQQ=բ`SayھugR\((/ka-&D[޲ n1TT/`&:mFg{ly(ԁY1r C33F]z¨Un5bƗU% A\kT<ۇ [*Eϻ9|j6e׮$s?$K{2 #>` P/Gh$xxx FsAƓ" y?N,0a*߻$)DЬ5ks٩89f. y?xxkI7{;kY_1,\ׅG,C VXgAec2\ֱ*W_:C6I1wžt [u[Q-ID0 emfBOS {^ 3<J`X]9\/\} m`뽟7^3YD׵^P F/NAAdK?X)EuMFH-˔н19|,&ybǷ_i(:gyu n F'f_MDZ\ `'zZߊ(r:D7pW8}Wx^">f~ g'7sK8 xԖ + i)sL u|$j! [ӝK7] x@^>ӭ%/CK1hǬ9%b"W;b.O p_Kjk oJnjj$~<*_5DGiNS5}bbDg o3sP@w|RATvHYNLX;@⧄=RkĂ%ng(XQ6;G{?9_)<~7:@m~qOBh*2hV~1u פ˓8U"O Pt^w]kJ a6wʍS{W[(פGN 2L F ǩ#DK@s}ʻ Xj:>V~DiyOlʹupG _!b3X5&HwШ0NZ=D/$ۛ'*+r{|[<ѐACm9eĊm">hcоB]HH{Th/fGqDaY? <䋅͘99NڦSozX}3C/$bcĻ@Lü"4Fd.(>DfwjhRF/MFK",RCJxE has;%{n_4y`)wWլH?kyܼZ/,ƣgk|<30F^@3 #hH =Etahu6ct Zg7pОem'E_ J1,EtRw+YaSഴ@y.= I:RaHwt 6I8TÓbS,?pO(K5'cOfDc4!w :)C 3Mv zl(:fkXFaoX`\JDjF2GuQҭiYWk@Ui3^6vl@O,Jתxֆ_d#нL݄"ҫ:͘ de=5Cgߑ$g]~""}ƨ}aN_wnɜ՟_;'L )WӮ y%{v; Y=Y-7t(_-Fu =V(FWH<g /̶z 8qgn (iO7_A:lhXIyJN sо8f(׆ĦcpVwaz,W:ϵvoɂ2z3%$X!H G0*ҀEO?6=Vg5F͡&@(^wGFFO&58OL859/Q^0{Ģ6 p σ9:!_F#Y@yͺO[͟:$; rHP{Hg4kqF51 嵖#I=R@$ AIMoGb5NW 2|9_3'!W[1taoPwY>m\AG26p=/Lea9Q#yfc WR{v@q<9ofs%&sV @%8MNd0?xb֔eTJL(>KQOC}3p+X-Sp( tZSC߅ГDA\S @Rfe?TIB2fv UtgqG5te&*q}¶`+^er5-vo87'wPLj!G"oVE'a# J[  J5Mm_DKW$S* JlʏL<1_LС|3BL 'F.^c%]{;'eGo?.vD9WdXi)IWu'avsWr61T{_5&GVLk6.G@~ 2W';- 9$n; ^u pF6ŷ$JZB䮪0R&O|N3)cje*1neM=꟯ut`ey]h~ q0)mt R\uԕ.db}F=WJ-s-8/iW+wr2zOR/歯}F%¬+i8CR$`I^Ċ/d _j7#O{ndVO;!Ei TEvg2U^ %F,K_&DP#wuH066XPε+8wQ(bz(jC{!3bU4濱3[Z鱺yܫKR0OWq{8a#$H?\$NRC5lZxz8=a)!wuyUŎ(IT*6=Z{-|MCί(1lXFjvfRy:Cܟ`|\To|JwJ&6z{h{krޖˡsLc)+UR6AbKDo9AeLmte\{eBśR3tЭXݵ0@lcf(,b$uElJnO}$?BJKOmr]=& ~D(>~BgA+KІq<4C`cnlYE\,$`ՃQK?^bW$r/d(2Vul~ߜir~*3NCIhܖ|}GdƲe"rC&]8} cm\(R7)r[J Ӕ*dݻGH[֭a .e@Ћ&Σ:F;l}YwK<쎖FJB+aݵ]2zEqʟ[$(*CcRLNg\Dq4D PdMrxU 6CGi aߩG%@`6]Wl^j%\#Hj}hxHnW(= {jؤ&_}iPW+M鏹#sZ/ԏ=V3mC8{d)Q.3ECf'jQtiy˧DfN ?dg4j2! SjR3>:^i 3YvD/b+!'4ePs"Xi7Rg|,`UmnМ"鷱RXzi1hTCS{ɸ"-s]^<33֍0P+H #`Tߒ=#@0O ءGN?d=7066P`AeET^>"34ϑ.EOA?]oNP,sS֐\3u' ID %Pe'DO~o b-2_{"rZ_N.,1Β5bI Rd:. <Ϩ͞?Un Ͽw_^+Qܸ5>[igw$BB4}iihbrkMľRnqrF}y8E?h"nF - HNXvew0R/o(qPrћÐz(çE<z},rEu@v,j4@5c2&)eL? vq=՚?P;ǃ:Oop ~ 91+N;N*1YˢUq1 >UDk~(qYv7% ~~6ڭ5<)nM\Ʉ)+JsXACC:}\H 5{ J<Z%ea'2#T7 ajݠO4lZ2l.LL鎊h!C*>ac,?s9S:|׋.`6G5AZįTeudXM d`ϺwT>5;\} 3"*_vG, _283>n: ֔lO[=@~j0 N#3"z$bLv?v4gčJ^@NmtsD,FpY]vP=6,rNus}dτ'>!,~Jr'k𯿁 ظJQS FCc-g4J+t&qH2Rt5Ɏ}|1EJ7/VbtY^E @|ԫWycRJ{$L:(55]=]B~{?du%8e>mWk0RSEv ƿoOxzQ.k #Ъ G7#ZYwuTT唹/ 5pdLZ3V{#yf6/qg Hef{u`׉nMLǮS(=/it}*eOopO+4"'Uf}4O>~V̍E$z?T-!Gjr#|R C=ed)ƅV_.|kba݋vi5*=ƽ򾵗yRݺB1HzzsߩIQ .bQ4
  • {ǣB?J-9c>9.`r G!TV<#L2Lqxn_-Z6Qջ +Ppfk:&k{)wƇ_$.ztY %?tYׅ +K"1RȾ3ZTߪVMqDUxI40"1Pc<|W4u,CTfyH'KFbp {Hm\[b!9f^dM_ 8rOʽ4K|ĐA*3]F׶=$tIڃ]zzJVߝlX@M s5J{ӃE\ӔݑH@a9z ̗'㧣x?|4Lohx_v-2zө+RӲ%ELjOvjyvo]O߲s6+OYb#]}E C]+8W]r(H:0Jf~p{=>2߰]2!!$ BM!'\ꭄe s0&di)0,II~$]r5+(qF [5;bPi+b9PkVx)#ܻM'/7y1Ueu+W{{l o0VA]W-0%fԛ N+PxzNZ0fA8]"{-Zl'<74ۺM;LLz`q D:LCj2ېTbs&+$1avz+~XecX,%|sx ]#ۧS o'i0غ!acNÅ;\&J;5I @iWu; e.@[W÷fk2l /A ϰ'_!ʴ63۟qiӤ2=w tJ]حu:fRx;%g1> m"ݧasiYHjM'0j0+SIٷD 醒J &opLsHX8K+SfNc(vsR\$yٍ^Tv *g l%oV>YZ0;>;Հkq폚[ē[;1 Xr)Fr! ,RŷewCi<+=gq> oY`37m!_kA).U3p8,|BUgd-z*r<ܰLKZ6ں6K!Bu%qs_a] _܈O9ұ%:t&}PR 0\51t+kqw{FEv(PM'Я&!McoCW?v)[\ыM YeLQ@ GqB|s6(LZW.5$,XTb5Gh 4Q eJ2 !z_+%;i}@R,7xzp_4^jhӖQ-~>b쟜\=2f1( WܳV.8kEPPE]9τ^![i`?*d/a˯C|NaEie|m౯B&3$wSb lCk}dM+cKO.b=:(JRAv%QQQ+bQ7?" I^LG0j5 gI=a")U/1O`RH5ӈguR*7-uh\36o hC8v$REMpAZ"PYSFӥeie"Sԩ ZE0 |*өbq8IK2FS/I.l^h9#'iQD[ M}WR~ 7_ [