kubernetes1.20-kubelet-common-1.20.13-lp155.2.17 >  A dkE"5n) ^QئŞ?=A.pZyN~6OW Z+9k.Jr?F5e3AD$Yj8a(|lVx^NY.Kӝ9ٹaVB0Q{Ұe]W^Dm'.;2͞KjF"c@EHbڴ&ɕDzN zrv-WZST+Rjx\ -:NUPţ">T!igKv>Lݙ/¶%}Kqd8!TU6|"MU"|2idZF%N%C bd dD7?Ol3[p`ET\~>3#^q?]mqq*ʘ(VxZgȧ2 ȍ&1=)`~-6J%C7Td:LTSmQ`%۷ W2;d=}Ra)  =щ(RvNQqR+c6dz%eOEaTqS6;bb6m96354cc9bb10a2af18a57111329ae79562954b561a7e8a7008c71b8c331b810b0b4e7f0a0f002f549555162981e979569eb569bbdkE"5n) UW;$&՛%Fp'}dno[-Q}' 攆ec_a&~)1QBwX :Jd }Tv2U/0t$ҩ,VJ-N!+Ρ "rN.|#-y>kV0&t!LՇlwd-!em3(VRo)KC0&4[ 󰪞|zsKf!G:ڽ몤w%N޷jxN*Z.&&(a/Q@uQ )XLf?71O_ȯ#A'_Ne/U'b)J  T lq <:o+qšf"Ԥ:$[Ûe(*0)F 6G/ec 9dW[.{+b"Rg &/[!v!7,fO5vYpȥJ4~,+IV2@B_>pI,?d ( 3 M  28?`  0 T x   ,t(T (  (8$ 9X :e =>?&@.F6GHHIXY\(]p^bcdefluvLw(xpyzCkubernetes1.20-kubelet-common1.20.13lp155.2.17Kubernetes kubelet daemonManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubelet daemondkClamb13TopenSUSE Leap 15.5openSUSEApache-2.0https://bugs.opensuse.orgSystem/Managementhttps://kubernetes.io/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in kubelet.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=kubelet SUBPNAME=-kubernetes1.20 SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in kubelet.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/kubelet.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable kubelet.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop kubelet.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in kubelet.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart kubelet.service ) || : fi fi$Dfp :,^AAA큤A큤A큤A큤AAdkCdkCdkC_к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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.20-1.20.13-lp155.2.17.src.rpmkubernetes-kubelet-commonkubernetes1.20-kubelet-commonkubernetes1.20-kubelet-common(x86-64) @    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shcri-runtimekubernetes-kubelet1.20rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-kubelet-common4.14.3a@aC1a&0`t`@`x*`v@`u`@_T__м@_м@rbrown@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.comalexandre.vicenzi@suse.comrbrown@suse.comRichard Brown rbrown@suse.comdmueller@suse.comrbrown@suse.comRichard Brown rbrown@suse.comRichard Brown - Update to version 1.20.13: * defer close the rotated log open * Add tests for checking bind mounts * Check subpath file * Add check for subpaths * Manual cherry pick of kube-openapi changes for release-1.20 Bump kube-openapi against kube-openapi/release-1.20 branch * Update bazel * Fixed unit test SELinux support * Add shortcut for SELinux detection * Don't guess SELinux support on error * Use separate pathSpec for local and remote to properly handle cleaning paths * support more than 100 disk mounts on Windows * Support cgroupv2 in node problem detector test * Update debian, debian-iptables images to pick up CVEs fixes * Fixing how EndpointSlice Mirroring handles Service selector transitions * Fix race condition in logging when request times out * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.12 * Run storage hostpath e2e test client pod as privileged * Ignore VMs in vmss delete backend pools * fix: skip not found nodes when reconciling LB backend address pools * fix: consolidate logs for instance not found error * Revert 102925: Fix Node Resources plugins score when there are pods with no requests * e2e scheduling priorities: do not reference control loop variable * tests: Wait for the network connectivity first * 'New' Event namespace validate failed * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.11 * Refine locking in API Priority and Fairness config controller * kube-controller-manager: properly check generic ephemeral volume feature * Fix null JSON round tripping * Propagate conversion errors * integration test * fix 104329: check for headless before trying to release the ClusterIPs * Fix use variables in the loop in vsphere_util * Address review comments * Add docs about process of discovering disks from new nodes * Fix unknown dangling volumes * fix detach disk issue on deleting node * fix: ignore the case when comparing azure tags in service annotation * fix: ignore the case when updating tags * backported PR#97721 from v1.21 ("fix slice controller logging for services ipfamily") * remove listx from OWNERS, OWNERS_ALIASES * Add explicit capability for online volume expansion * Bump golang.org/x/text to v0.3.6- Update to version 1.20.11: * Fix a small regression in Service updates * Service: Fix semantics for Update wrt allocations * Fix buckets initialization * fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs * fix: skip case sensitivity when checking Azure NSG rules * Keep MakeMountArgSensitive and add a new signature that receives flags * Update the unit tests to handle mountFlags * Add missing interface method in mount_unsupported.go * Pass additional flags to subpath mount to avoid flakes in certain conditions * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.10 * Copy golang license to staging copies * delete stale UDP conntrack entries for loadbalancer IPs * job controller: don't mutate shared cache object * Set idle and readheader timeouts- Update to version 1.20.10: * Bump to golang 1.15.15 in build/** * Bump to golang 1.15.15 in cluster/** and staging/** * Bump to golang 1.15.15 in test/** * Avoid spurious calls to update/delete validation * Fix metrics reporting for the deprecated watch path * Update configure-helper.sh * Update configure-helper.sh * Update configure-helper.sh * Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools * feat: Provide IPv6 support for internal load balancer * Update to using apiserver-network-proxy v1.22 * Make CSR cleaner tolerate objects with invalid status.certificate * disable aufs module * update comments and owners file for pkg/util/removeall * kubelet: do not call RemoveAll on volumes directory for orphaned pods * APF e2e: wait for steady state before proceeding * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.9 * Updated to use konnectivity client v0.0.21, and implemented placeholder context * include google/go-cmp in client-go/dynamic/fake/BUILD * Simplify use of the fake dynamic client * fix: return empty VMAS name if using standalone VM * Fix race in attachdetach tests * Fix frameworkImpl.extenders being not set * Fix closing of decorated watcher channel on timeout * update bazel * (scheduler e2e) Create balanced pods in parallel- Update to version 1.20.9: * Bump to golang 1.15.14 in build/** * Bump to golang 1.15.14 in cluster/** and staging/** * Bump to golang 1.15.14 in test/** * Update debian-iptables image to buster-v1.6.5 * Update debian-base image to buster-v1.8.0 * Bump SMD to v4.1.2 to pick up #102749 fix * generate scheduler merge patches on the pod status instead of the full pod * p&f e2e test: log response header for better troubleshooting * Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default * Do not throw error when we can't get canonical path * Fix Node Resources plugins score when there are pods with no requests * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.8 * Remove error wrap from logs * staging/publishing: Set default go version to go1.15.13 * build: Update to k/repo-infra@v0.1.8 (supports go1.15.13) * Use go-runner:v2.3.1-go1.15.13-buster.0 image (built on go1.15.13) * Update to go1.15.13 * feat: remove ephemeral-storage etcd requirement * endpointslicemirroring controller mirror address status * sched: fix a bug that a preemptor pod exists as a phantom * Revert "Cleanup portforward streams after their usage" * Remove unnecessary snapshot ability check * serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match * Fix VolumeAttachment garbage collection for migrated PVs * Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error * Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin * Ignore transient errors when gather stats * Speed up PV provisioning for vsphere driver * fix error of setting negative value for containerLogMaxSize * Upgrade konnectivity-client for GRPC connection fixes * Update etcd image revision * Update debian-base to buster-v1.7.0 * Update debian-iptables to buster-v1.6.1 * Respect annotation size limit for SSA last-applied. * Remove unnecessary quotes from get-kube scripts * Fix expired unit test certs * fix: delete non existing disk issue * Azure: avoid setting cached Sku when updating VMSS and VMSS instances * Update cos-gpu-installer image * Ref counting is only applicable to Remote endpoints * Make watch order conformance test reliable * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.7 * fix removing pods from podTopologyHints mapping * fix: avoid nil-pointer panic when checking the frontend IP configuration * Use CSI driver to determine unique name for migrated in-tree plugins * Add jitter to lease controller * Avoid caching the VMSS instances whose network profile is nil * chunk target operatation for aws targetGroup * Fix watchForLockfileContention memory leak * Fix cleanupMountpoint issue for Windows * Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY- Update to version 1.20.7: * staging/publishing: Set default go version to go1.15.12 * build: Update to k/repo-infra@v0.1.7 (supports go1.15.12) * Use go-runner:v2.3.1-go1.15.12-buster.0 image (built on go1.15.12) * Update to go1.15.12 * fix: not tagging static public IP * Add test create service with ns * Set namespace when using kubectl create service * Automated cherry pick of #101377: Fix validation in kubectl create ingress (#101428) * Updating EndpointSlice controllers to avoid duplicate creations * Update pkg/volume/azure_file/azure_provision.go * Normalize share name to not include capital letters * Extend pod start timeout to 5min for storage subpath configmap test * fix: set "host is down" as corrupted mount * no watch endpointslice in userpace mode * Ensure service deleted when the Azure resource group has been deleted * Updating EndpointSlice validation to match Endpoints validation * Make parallel build memory threshold configurable * fix: azure file namespace issue in csi translation * pkg/kubelet: improve the node informer sync check * Additional CVE-2021-3121 fix * Fix startupProbe behaviour changed * Fix test * staging/publishing: Set default go version to go1.15.10 * build: Update to k/repo-infra@v0.1.6 (supports go1.15.11) * Use go-runner:v2.3.1-go1.15.11-buster.0 image (built on go1.15.11) * Update to go1.15.11 * add duration encoder to structured logger * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.6 * exec test should not run in Parallel as feature gate is not locked * hack/update-bazel.sh * respect ExecProbeTimeout * apf: exempt probes /healthz /livez /readyz * DelegatingAuthenticationOptions TokenReview request timeout * list pod list once to avoid timeout * Cleanup portforward streams after their usage * fix smb mount issue on Windows- Update to version 1.20.6: * azure: fix node public IP not able to fetch issues from IMDS * Fix test now that empty struct are tracked in mangaed fields * make generated_files * Update bazel and dependencies. * Update to use cliflag.NamedFlagSets * Address comments. * Update NodeIPAM wrapper * Delete build file based on latest changes. * Update extension mechanism and related sample. * Address review comments * Address review comments * Modify integration test to fill CCM test gap * Update test * Move initialize cloud provider with client builder reference inside controller start func * Separate example func and add README.md * Separate func * Add demonstration of wiring nodeIPAMController config object * Remove cloud provider name as input parameter. * Fix flag passing in CCM. * Use apply to create objects in TestApplyStatus * Stop skipping APIService in apply test * Stop clearing OpenAPIConfig for kube-aggregator * Declare TCP default for service port protocol * Add ability to skip OpenAPI handler installation * do not tag user created public IPs * apf: fix test flake * update gogo/protobuf to v1.3.2 * Fixed describe ingress causing SEGFAULT * Update sigs.k8s.io/structured-merge-diff to v4.0.3 * Stop probing a pod during graceful shutdown * apf: handle error from PollImmediateUntil * staging/publishing: Set default go version to go1.15.10 * webhook config manager: HasSynced returns true when the manager is synced with existing webhookconfig objects at startup * update metadata-concealment to 1.6 for removing legacy checking * slice mirroring controller mirror annotations * additional subnet configuration for AWS ELB * Revert "Automated cherry pick of #97417: fix azure file secret not found issue" * Use the correct volum handle format for GCE regional PD. * Increasing maximum number of ports allowed in EndpointSlice * Support > 5 ports in L4 ILB. * build: Update to k/repo-infra@v0.1.5 (supports go1.15.10) * Use go-runner:v2.3.1-go1.15.10-buster.0 image (built on go1.15.10) * Update to go1.15.10 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.5 * fix a bug where only service with less than 100 ports can have GCE load balancer * bazel * deepcopy statefulsets * full deepcopy on munged pod spec * remove pod toleration toleration seconds mutation * add markers for inspected validation mutation hits * move secret mutation from validation to prepareforupdate * remove unnecessary mutations in validation * tweak validation to avoid mutation * For LoadBalancer Service type don't create a HNS policy for empty or invalid external loadbalancer IP * Moving docker options to daemon.json * e2e fix: loosen configmap to 10 in resource quota * api-server add --lease-max-object-count * apiserver add metric etcd_lease_object_counts * apiserver add --lease-reuse-duration-seconds to config lease reuse duration * Bump Cluster Autoscaler to v1.20.0- Rebase opensuse-version-checks.patch- Update to version 1.20.5: * Updating EndpointSliceMirroring controller to wait for cache to be updated * Updating EndpointSlice controller to wait for cache to be updated * Add tests for populated volumes * Fix comment on getPodVolumeSubpathListFromDisk * Fix tests to test for new behavior * Add warnings after cleanup back * Automatically remove orphaned pod's dangling volumes * Count pod overhead as an entity's resource usage * Ensure only one LoadBalancer rule is created when HA mode is enabled * Fix issue in checking domain socket for plugin watcher * Use Lstat in plugin watcher to avoid Windows problem * Skip visiting empty secret and configmap names * Number of sockets is assumed to be same as NUMA nodes * disables APF if the aggregated apiserver cannot locate the core kube-apiserver * Fix repeatedly aquire the inhibit lock * Sync node status during kubelet node shutdown * remove executable permission bits * Upgrading vendored dependencies * Upgrading cAdvisor to 0.38.8 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.4 * build/OWNERS: Add Dan and Sascha as reviewers * OWNERS(CHANGELOG): Move reviewers/approvers to CHANGELOG/ dir * Bump konnectivity-client to v0.0.15 in release-1.20 * Storage e2e: Remove pd csi driver installation in GKE * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3 * kube-cross: update image to use v1.15.8-legacy-1 * [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8) * Use go-runner:buster-v2.3.1 image (built on go1.15.8) * staging/publishing: Set default go version to go1.15.8 * Update to go1.15.8 * Fix dbus shutdown events not continuing if they are not valid * Revert "make hostPort match test linuxonly" * Revert "conformance changes" * kube-proxy: clear conntrack entries after rules are in place * Use -LiteralPath instead of -Path * Escape the special character in vsphere windows path * Include unit test * Adjust defer to correctly call * do not remove volume dir when saveVolumeData fails * kubeadm: drop explicit constant override in version test * kubeadm: get k8s CI version markers from k8s infra bucket * dockershim hostport respect IPFamily * dockershim hostport manager use HostIP * Balance nodes in scheduling e2e * e2e: Pod should avoid nodes that have avoidPod annotation: clean remaining pods * Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate * fix kube-scheduler cannot send event because the Note field is too large * Fix nil pointer dereference in disruption controller * Update region_pd e2e test to support PV have GA topology * Recover CSI volumes from dangling attachments * IsVolumeAttachedToNode() renamed to GetAttachState(), and returns 3 states instead of combining "uncertain" and "detached" into "false" * Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states; fixes reconciler_test mock detach to account for multiple attaches on a node * Fix translation of Cinder storage classess to CSI * OWNERS(CHANGELOG): Add release-engineering-reviewers as reviewers * OWNERS(CHANGELOG): Add release-engineering-reviewers as approvers * Resolve IP addresses of host-only in filtered dialer * Deflake ingress updates * make podTopologyHints protected by lock * ignore cgroup driver check in windows node upgrade * OWNERS(sig-release): Add CHANGELOG aliases * OWNERS(build-image): Add Release Managers as reviewers * OWNERS(releng): Sync Release Managers * OWNERS(sig-release): Remove SIG Release approvers alias * aggregate errors when putting vmss * fix azure file migration issue * kubelet: Fix mirrorPodTerminationMap leak * kubelet: Delete static pods gracefully * kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images * kubelet logs print 'kubelet nodes sync' frequently * reduce buckets for etcd_request_duration_seconds * Merge pull request #96876 from howieyuen/no-execute-taint-missing * cleanup subnet in frontend ip configs * conformance changes * make hostPort match test linuxonly * Clean up namespaced children of missing virtual parents with incorrectly cluster-scoped nodes * Add unit test for child scope mismatch with missing parent * vendor: update cAdvisor to v0.38.7 * Use volumeHandle as PV name when translating EBS inline volume * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.2 * kubectl-convert import known versions * Revert "Merge pull request #92817 from kmala/kubelet" * WIP: node sync at least once * fixes nil panic for nil delegated auth options * Lower the frequency of volume plugin deprecation warning * handle webhook authenticator and authorizer error * fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable * Avoid checking the entire backend service URL for FR equality. * Use non privileged ports- Update to version 1.20.2: * move all variables in sampleAndWaterMarkHistograms::innerSet * use default unkown sock for kubeadm cmd if cri detect is not needed * cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip * Release reserved GCE IP address after ensure completes. * Ensure reproducible builds when build through docker * Fix cadvisor machine metrics * Create OWNERS for most of the API Priority and Fairness impl * fix the deadlock in priority and fairness config controller * Cherry pick 443 and 448 from cloud provider azure * Fix bug in CPUManager with race on map acccess * clean up executing request on panic * fix azure file secret not found issue * fix: azure file latency issue for metadata-heavy workload * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1 * Add more logging for Mount error- Update to version 1.20.1: * Revert "Use host IP instead of localhost for control plane component kubeconfig files." * etcd version for 1.19 is 3.4.13 for cve fixes * Flush FibreChannel devices before deleting * Fix FibreChannel volume plugin corrupting filesystem on detach * vendor: update cAdvisor to v0.38.6 * Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0 * Revert "iAdd host IP to etcd listen client URLs." * fix migration logic * Add AcceleratorStats to cri_stats_provider- Add obsoletes to -client-common to facilitate smooth upgrades from older versions- Rebase opensuse-version-checks.patch - Update to version 1.20.0: * APF e2e: disable drown-out tests temporarily * coredns dep.Severity is newdefault, not newDefault * addressing review comments and supports parallel run * Update ingress conformance test for finalizers * vendor: update cAdvisor to v0.38.5 * fix: change disk client API version for Azure Stack * service.spec.AllocateLoadBalancerNodePorts followup * [go1.15] Use go-runner:buster-v2.2.2 image (built on go1.15.5) * [go1.15] staging/publishing: Set default go version to go1.15.5 * [go1.15] Update to go1.15.5 * [go1.15] hack/tools: Update to k/repo-infra@v0.1.3 (supports go1.15.5) * [go1.15] build: Update to k/repo-infra@v0.1.3 (supports go1.15.5) * Restore beta os/arch labels on initial node registration * matches specific usernames instead of "*" * range_allocator: Test (lack of) double counting * cidrset: Add test for double counting * Fix double counting of IP addresses * ap&f e2e: eliminates client-side rate-limiting * fix bug: concurrent map writes error * Bump node-problem-detector to v0.8.5 * Revert "check volume directories instead of mounts for cleanupOrphanedPodDirs" * Revert "plumb context with request deadline" * Revert "use default value when the specified timeout is 0s" * Revert "add e2e tests for request timeout" * Deflake ThrottledLogger test * fix: resize Azure disk issue when it's in attached state * kube-aggregator: fix apiservice availability gauge * Fix TestStartingResourceVersion flakiness * make sure managedFields are written * generated * unit and integration tests * apiserver dedups owner references and adds warning * Add linuxonly on one multivolume test * gce: move iptables rule to mangle * APF e2e tests: add request drown-out fairness test * add e2e tests for request timeout * use default value when the specified timeout is 0s * CHANGELOG: Update error link in 1.20 * CHANGELOG: Update directory for v1.20.0-beta.2 release * APF e2e tests: rename request drown-out priority client names * Mark some storage tests as LinuxOnly * Add GC unit tests * Log cluster-scoped owners referencing namespaced owners, avoid retrying lookups forever * Queue non-matching children for deletion when a virtual node is marked as observed * Handle virtual delete events when children don't agree on owner coordinates * Make node removal conditional in processGraphChanges * Enqueue dependents for deletion when their ownerReference does not match observed parent coordinates * Short-circuit attemptToDelete loop for virtual nodes that are removed or observed * Replace virtual node with observed node if identity differs * Refactor identityFromEvent * Avoid marking virtual nodes as observed when they haven't been * Switch GC absentOwnerCache to full reference * Add GC integration race test * Plumb event recorder to garbage collector controller * e2e SCTP test not depend on kubenet * e2e/node: increase timeouts seconds to 5 for liveness probe restart test * correct e2e test predicates conflict hostport * Add a deprecation note to k/k/cluster/log-dump directory * Update topology tests for windows * kubelet: dockershim should return grpc status with DeadlineExceeded code * e2e dualstack test fixes * convert the runtimeclass API tests to conformance * APF e2e tests: use snake_case label * APF e2e tests: move common code into helper functions * Reduce volume name length for vsphere * CHANGELOG: add a hyperlink to issue 86282 * allow configuring ReadIdelTimeout and PingTimeout via env var * Add a unit test testing the HTTP/2 health check help the REST client detects broken TCP connections. * plumb context with request deadline * Fixes fake client test generation * Integrate defaults marker and remove ContainerPort defaulter * Remove StripDefaults from BuildSwagger * Add default for protocol and test that it works * Strip defaults in new places * Re-generate with defaults * Update kube-openapi * flowcontrol bootstrap: give catch-all PL more concurrency share * APF matching: fallback to catch-all if nothing matches * flowcontrol bootstrap: make exempt PL last * APF: graduate API and types to beta * Mixed protocol support for Services with type=LoadBalancer (#94028) * Fix test name in e2e resource metrics api test * Test CRUD operations on RuntimeClasses API * vendor: cadvisor v0.38.4 * Relax matching on pod_memory_working_set_bytes metrics * configure the ReadIdleTimeout and PingTimeout of the h2 transport * Match pod resource metrics to pod not container * add more e2e sctp tests * remove wrong test for SCTP connectivity * Update the route table tag in the route reconcile loop * Fixes sigfault in case of empty TopologyInfo * Update generated files * Add service.spec.AllocateLoadBalancerNodePorts * update golang.org/x/net and golang.org/x/sys * Update 1.18 changelog with changes from v1.18.11 * fixup! unblock resources that the storage version manager depends on * fixup! add storage version garbage collector * generated * GC integration test * unblock resources that the storage version manager depends on * make storage version manager wait for lease creation * add storage version garbage collector * Fix cacheWatcher leak when time jump to the future and jump back * Correct rebase issues * Implement shutdown manager in kubelet * Add systemd package to interface with dbus * Corrected CSIDriver validation rebase issues * Remove duplicate CSIDriver name validation * Adjust CSIDriver validation to check objectmeta * Enable logging and drop permissive targets for CSI mock driver * Update the mock driver to use 4.0.2 * Included e2e test for CSIDriver FSGroupPolicy * Move CSIVolumeFSGroupPolicy to beta * Relax validation for CSIVolumeFSGroupPolicy * Fixed quantization and made monotic time reversal not panic * Log defaulted kube-scheduler component config at startup * Updates related to PR feedback * core/v1: document that topologyKeys requires the ServiceTopology feature gate * Use K8s in the README * stop serving deleted APIs * Increase watch timeout when scaling Deployment Replicas * CHANGELOG: Update directory for v1.18.12 release * scheduler: Implement resource metrics at /metrics/resources * quantity: Allow quantity to be converted to float64 * plumb service account token down to csi driver * remove generator from service in kubectl * add myself to sig-network-api-reviewers * Add datapolicy tags to staging/src/k8s.io/client-go/ * cleanup: fix log capitalization in scheduler * Add --experimental-logging-sanitization flag to Kubelet * Run ./update-all.sh * Implement e2e tests for pod scope alignment * Add tests for getPodDeviceRequest() for devicemanager * Add tests for GetPodTopologyHints() for devicemanager * Update topology hints tests to use pod object for devicemanager * Add tests for GetPodTopologyHints() for cpumanager * Refactor topology hints tests for cpumanager * Move scope specific tests from topologymanager under particular scopes * Move common tests from topologymanager under scope * Update topologymanager tests after adding scopes * Implement devicemanager.GetPodLevelTopologyHints() function * Implement the cpumanager.GetPodTopologyHints() function * Update logging to use a format util * Implement topology manager scopes * Add GetPodTopologyHints() interface to Topology/CPU/Device Manager * Add flag value validation of TopologyManagerPolicy * Add flag value validation of TopologyManagerScope * Add kubelet configuration flag 'topology-manager-scope' * Support custom tags for cloud provider managed resources * use uncommon ports for e2e network test * fix pull image error from multiple ACRs using azure managed identity * add e2e test for dual-stack secondary service IPs * Verify iptable rules are applied for tcp, udp and icmp * Choosing the right source VIP for local endpoints * Configure StackdriverLogging Windows service to restart on failure. * Adding sample files to demonstrate how cloud provider leverage CCM. * Updating EndpointSlice strategy to cover alpha NodeName field * Support high availability ports * Allow debugging kubelet image pull times * Separate in-tree gcepd driver for windows * Cleaning up EndpointSlice update validation tests * Removing "IP" from supported EndpointSlice address types in kube-proxy * Updating ControlPlane to support NodeName field * Updating EndpointSlice controllers to support NodeName field * Adding EndpointSliceNodeName feature gate * Adding NodeName to EndpointSlice API, deprecation updates * update bazel * Promote Deployment lifecycle e2e test to Conformance * CHANGELOG: Update directory for v1.19.4 release * handle the case for slow cronjob lister, add unit tests * convert to stardard lister, use []*batchv1.Job instead of []batchv1.Job * actually retry if we failed to reconcile some objects * Update storage test suits for Windows * Promote Pod/PodStatus lifecycle e2e test to Conformance * Fix failures in TestBindPlugin and TestPreemptWithPermitPlugin * Set 0 sync period in scheduler integration test * CHANGELOG: Update directory for v1.17.14 release * GA of RuntimeClass feature gate and API * put a message, not a stack, in the log on a timeout * Update snapshot CRDs * Set priority of Event v1 higher than v1beta1 * Implement TopologyInfo and cpu_ids in podresources * Convert podDevices to struct * Generate podresources API for TopologyInfo and cpu_ids * Add TopologyInfo and cpu_ids into podresources * Change GetDevices interface * Revert "Merge pull request #92312 from Sh4d1/kep_1860" * fix all Sting method not check nil in "k8s.io/apimachinery" * fix the validation logic for Job/CronJob RestartPolicy field * fix note delete to update according to code * Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy * fix(test::npd): provide NPD with proper kubeconfig * Bump kas to v0.0.14 * Capture defaulted plugin configs from framework * move lease controller to k8s.io/component-helpers/apimachinery * Bug Fix for process_start_time_metric initialization * add V(4) log when apiserver lease was deleted before this controller reacts * generated * integration test * add apiserver lease garbage collector * update violation_exceptions.list and make generated * add cronjob_controllerv2.go * Add CRI v1 proto * dualstack: Use Agnhost in place of BusyBox * Downward API hugepages * added new runtimeclass test and changed Disruptive to Serial * kubeadm: mark the "master" label/taint as deprecated * dualstack: use correct IPFamily list for conntrack checks in e2e * move service controller config to k8s.io/cloud-provider/controllers/service/config * Use FilteredDialContext with quobyte API * Update quobyte client API to v0.1.8 * import restrictions: allow k8s.io/kubelet to import credentialprovider apis * hack/.golint: ignore golint for new kubelet and credentialprovider APIs package * pkg/credentialprovider: export URL parsing and matching helper functions * pkg/credentialprovider: add initial exec-based credential provider plugin * kubelet: add initial credentialprovider v1alpha1 APIs * feature gates: add KubeletCredentialProviders feature gate * kubelet: support alpha credential provider exec plugins * kubelet: update pkg/kubelet/apis/config/OWNERS to include api approvers and reviewers * kubelet: add CredentialProviderConfig API * Change at which level klog.Fatal is invoked * Forbid creating clusters with more than 100 nodes without vpc-native * Change the logic of pod volumes existence check during kubelet cleanupOrphanedPodDirs, cleanupOrphanedPodCgroups and PodResourcesAreReclaimed * remove label dependency on k8s api in Azure * Remove duplicate import * Add --experimental-logging-sanitization flag to control plane components * FsgroupChange policy test suite * Improve observability of node authorizer: * Adding some metrics to the graph * Adding log message when node authorizer has synced * Remove ready directory which created in empty volumeMounter setUp func * cloud-provider: update docs and guidance for InstanceV2 and Zones * fixing issue where SMB share paths cannot resolve with CRI-containerD on Windows * Ignore specific Pod update events in scheduler * Support customize load balancer health probe protocol * Move fsGroupChangePolicy feature to beta * Add WindowsContainerResources to UpdateContainerResourcesRequest * Change snapshot test to use v1 apis * Modify storage snapshottable and disruptive test for Windows * fix: change storage account client API version for Azure Stack * Fixed failure: ProvisioningFailed: Failed to provision volume with StorageClass "standard": invalid AccessModes [ReadWriteOnce ReadOnlyMany ReadWriteMany]: only AccessModes [ReadWriteOnce ReadOnlyMany] are supported * Set enable konnectivity service to true by default * fixup! apiserver correctly validates encoding/decodable versions * HTTP Prove: Removes Accept-Encoding header from http probe * Update snapshot CRDs to v1 * Enable ConfigurableFSGroupPolicy feature gate * Add dangling volume check for vsphere * update e2e kubectl test * prune type in preserve-unknown-fields objects * Add AddedAffinity to the NodeAffinityArgs * Remove --redirect-container-streaming functionality (#95935) * Fix go lint on folder apimachinery/pkg/runtime/serializer/protobuf * Graduating AppProtocol to GA * Fix command and arg in NPD e2e * Call MountDevice only once * Mark MountDevice as uncertain after failed resize * Restore staging path creation * Add unit test for staging path creation * kubelet: move pkg/kubelet/cri/.import-restrictions to pkg/kubelet/cri/streaming * kubelet: add feature gate check for exec probe timeouts * features: add ExecProbeTimeout feature gate * kubelet: allow dockershim exec timeouts to be longer than 10s * kubelet: add e2e test for exec readiness probe timeout * kubelet: stop skipping docker exec livenessprobe timeout test * kubelet: respect probe exec timeout from CRI by returning utilexec.CodeExitError * kubelet: respect dockershim exec timeout * Implement log sanitization * Update bazel * apiextensions: adapt error tests to fixed validation messages * apiextensions: switch validation to kube-openapi * bump(k8s.io/kube-openapi) * stops puting a stacktrace of aborted requests in the logs * require APIServerIdentity to be enabled to run StorageVersionAPI * apiserver correctly validates encoding/decodable versions * updater correctly updates storageversion status * return a Status formatted JSON response * generated * Add an integration test. * make some rbac and scheduling post start hooks tolerate the apiserver bootstrap delay caused by installing storage versions. * Add a generic filter that blocks certain write requests before StorageVersions are updated during apiserver bootstrap. * Collect storage versions as ResourceInfo when installing API endpoints. * Add a feature gate * add andyzhangx as reviewer * Add nodeSelector for konnectivity daemonSet * fix ingress comparaison * fix defaulting * add nil case in proxy * fix build * fix nit in validation * fix tests * Update generated * fix reviews * Update generated * fix review * fix typo * add owner for feature gate * fix rebase * fix review * Add tests * Add route type field to loadbalancer status ingress * Update docs and fix redundant logic of scheduler perf * remove kube-proxy/config/v1alpha1 from .golint_failures * Fix go lint on folder apimachinery/pkg/runtime/serializer/json * Change the features removal note * Promote TokenRequest e2e test to Conformance * cleanup dated wording "NominatedNodeName annotation" * fix formatting * generated * add kube-apiserver-lease-controller poststart hook * Add constant PodReadyTimeout to e2e test * Adjusted timings and management of pods in e2e test * Create Pod+PodStatus resource lifecycle test * Update UTs * Fixing expected pod subdomain to match framework.TestContext.ClusterDNSDomain * e2e: add APF flowcontrol request drown-out test * Less restrictions for AWS NLB health check config * scheduler: remove FrameworkFactory. * PV e2e: fix race in NFS recycling test * Add support to size memory backed volumes * update max azure data disk count map * kubeadm: fix the lint failure where return value is not checked * Generated changes * Move the remaining kubectl bits to k8s.io/kubectl * Introduce kubectl-convert plugin * Adding config extension to CCM. * remove annotation cache sync because of code removed * Increase the timeout to allow summary test pod to start * removes filter metrics test retries * Use topology labels instead of old beta names (#96033) * CRs: Default non-nullable nulls * Move kubectl get-context validate logic to Validate function * endpointslice API: rename 'accepting' condition to 'serving' condition * endpointslice controller: add test cases to TestSyncServiceFull for terminating endpoints * endpointslice controller: refactor TestSyncServiceFull to use test tables * endpointslice API strategy: drop disabled fields 'accepting' and 'terminating' * endpointslice controller: set new conditions 'accepting' and 'terminating' * feature gate: add gate EndpointSliceTerminatingCondition * endpointslice API: add accepting and terminating conditions * kubelet: Use CRI SecurityProfile for Seccomp * Switch GCP list calls to paginated calls. * dualstack: cleanup IsIPv4 duplicates in favor of utils * dualstack: incorporate IsIPv4 updates from utils repo * abort if namespace doesn't exist or terminating * proxy: validate each CIDR config seperately and check for errors * minor changes in adding tests for checking metrics labels * make flags of TokenRequest required * default `service-account-extend-token-expiration` to true * E2E stress test suite for VolumeSnapshots * Update Microsoft/go-winio to released version * APF metrics: set StabilityLevel to ALPHA * kubectl debug: allow set-image-only invocation * Introduce a simple datapolicy library * Remove the dependency between create priorityclass command and generators * Deflake existing configmap count * update features to indicate beta in comment * cleanup: use i18n.T on all command descriptions * Revert "add e2e test for Service ExternalIPs" * CHANGELOG:Fix kubelet flag enable-cadvisor-json-endpoints * client-go/rest: fix finalURLTemplate for url base == "/" * Correctly fix clearing conntrack entry on endpoint changes (nodeport) * Remove Const IPVSProxyMode * update changelog-1.20 * test images: Authenticate in order to push images * Support multiple standard load balancers in one cluster * Use user facing field names in validation message * report UnschedulableAndUnresolvable status instead of an error when PVCs can't find bound persistent volumes * separate RootCAConfigMap from BoundServiceAccountTokenVolume * Add mrunalp as node approver * test images: Removes -p yes flag from qemu-user-static script call * optimise defaultpreemption: enumerate fewer candidates * apiserver/filters test: fix data race and do not leak goroutines * APF: use snake_case in metric labels * Volume snapshot e2e test to validate VolumeSnapshotContent and PVC finalizer * minor changes to tests for checking metrics labels based on review comments * check if kubectl version required values are empty * Exclude KEP-1933 from verify-all.sh until after alpha status. * add GVK to fake dynamic client to match actual behavior * demonstrate existing generated client and fake client behavior is consistent * remove dead apiserver field * Adding an owner for addon/dns folder * fix: pass bearer token to curl using -H instead of --oauth2-bearer * Remove alpha from kubectl debug * do not allow inflight watermark histograms to fall too far behind * test images: set DOCKER_CLI_EXPERIMENTAL=enabled * Remove maximum volume limit comment which is easily outdated. * DelegatingAuthenticationOptions: allows for setting a timeout for the TokenReview client that is used by for the webhook authenticator * Update staging/src/k8s.io/kubectl/pkg/cmd/create/create_rolebinding_test.go * pause image: Disable DiagTrack service on Windows image * replace string casting with fmt.sprintf in test * Fix paging issues when Azure API returns empty values with non-empty nextLink * change plugin name in fsgroupapplymetrics of csi and flexvolume to distinguish different driver * test images: sets HOME=/root in cloudbuild.yaml * Update CHANGELOG link of older releases * Remove TaintBasedEvictions Feature Gate * Replace calls to cs.CoreV1().Nodes().Create() with createNode() * Add a function to ensure created nodes are present in scheduler cache * local-up-cluster.sh: Use config file instead of flags for kubelet * Add a verbosity option to exec * KEP-1933: add static analysis target to hack/ * kubectl debug: Allow mutating image names * Increasing withTimeout for ReplicationController Lifecycle test steps * Propose seccomp/apparmor protobuf type definitions for CRI graduation * Update Klog dependency * Remove service load balancer feature gate * resource-metrics: add pod metrics e2e test * reenable e2e_node services & debugging improvements * resource-metrics: add pod/sandbox metrics to endpoint * Removing Alpha annotation as the feature is graduating to Beta in v1.20 * Add runtime representation of []v1.PreferredSchedulingTerm * Move pkg/kubectl/cmd/auth under staging/src/k8s.io/kubectl/pkg/cmd/auth * use patch instead of replace to test the dry-run option * CHANGELOG: Update directory for v1.20.0-beta.1 release * fix CPU time of pod stats with cs.CPU.Time * Skip the sig-storage e2e test as early as possible * Remove useless variable and if * kubectl debug: add tests for Complete,Validate * Move Snapshot to GA * register controllermanager.config.k8s.io group. * fix(test::npd): fix node problem detector test * fix n to nodeInfo easy to understand * Update cobra dependency to v1.1.1 * Adjusted e2e test watch timeouts, logging and pod management * Update usage information for --http-override * Bump agnhost version * Add override option to netexec * Add a redirect handler to netexec * Add optional code to netexec echo endpoint * Honor disabled LocalStorageCapacityIsolation in scheduling * Build files * [kubelet] Allow priority to be set for kubelet process on Windows * add e2e test for Service ExternalIPs * e2e cases for apf * Move helpers from pkg/registry/rbac/reconciliation and pkg/registry/rbac/validation under k8s.io/component-helpers * Add runtime representation of v1.NodeSelector * Remove variadic argument from storage interface * Revert "Updated golang/x/net. Also updated golang.org/x/sys" * Add multi request test * Fix issue in missing metrics of terminated requests * Fix bug in JSON path parser where an error occurs when a range is empty * set webhook retry backoff parameters for kubelet * thorw error if webhook retry backoof is not specified * make backoff parameters configurable for webhook * fix vendor/k8s.io/apimachinery/pkg/api/meta staticcheck * Updated golang/x/net. Also updated golang.org/x/sys, as required by hack/lint-dependencies.sh. * Disable watchcache for events * local-up-cluster.sh: Remove ineffective parameters * Pass all packages to conversion-gen * refactor: migrate health checks of control-plane off insecure port in tests * Implementing ExternalTrafficPolicy: local in winkernel kube-proxy via DSR * add a jitter to bound token renewal * Add datapolicy tags to cmd/kubeadm directory * devicemanager: fix race in stub * Add datapolicy tags to pkg/volume/ * change bucket from 0.0s to 0.0001s * refector service some e2e cases to make it runing in multi providers * Added tests to check metrics labels * Move CCM to staging k8s.io/cloud-provider * mv TokenRequest and TokenRequestProjection to GA * Populate ClusterIPs on read * test: remove flacky ut * Add json-response flag to porter * local-up-cluster.sh: Pass CLUSTER_CIDR to kube-proxy * HTTP Probe: Add 'Accept' header by default * Add keep_time_key setting to fluentd configuration * Enable filter latency tracking for request filters * Measure how much time a request spends in server filter(s): * hack/local-up-cluster.sh: fix API_PORT * exec credential provider: exec -> client.authentication.k8s.io/exec * kubectl flush profiling when get a sigterm * Cleanup non-namespaced objects in e2e test during interrupts * remove dead negotiation methods * fake dynamic client: support *List kinds * Move informer_factory to staging * Remove behaviors * add tests that update services while gate is off * Add datapolicy tags to staging/src/k8s.io/kubectl * Add datapolicy tags to staging/src/k8s.io/legacy-cloud-providers * Mark SecondaryRangeName as deprecated. * Move MatchNodeSelectorTerms to k8s.io/component-helpers * exec credential provider: k8s.io/client-go/tools/auth/exec helper * exec credential provider: ProvideClusterInfo and kubeconfig shadow * Remove FieldMatchingFlags * Adjust conversion generator to new converter changes * Add datapolicy tags to pkg/scheduler/ * Add datapolicy tags to staging/src/k8s.io/kube-aggregator/ * Add datapolicy tags to test/e2e/framework * Add datapolicy tags to pkg/apis * kubeconfig: add explicit path, if specified to loading precedence * Introduce api-extensions category in k8s apiserver * refactor(apiserver): ignore the insecure flags * Allow for configuring etcd progress notify interval on GCE * Fix seccomp PSP docker/default annotation handling * fixes max-min fairness * local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager * fix kubectl debug link error * Added config parameter for CPU threads * Updating EndpointSliceMirroring e2e test to accept multiple slices * pin to latest k8s version * more versions * rev versions * use current method signatures * Update csi-proxy version * add audit-log-compress to apiserver * Update PriorityClass conformance test to cover DeleteCollection * SetCondtion updates generation * Update testing-manifests/storage-csi owners file * CHANGELOG: Update directory for v1.20.0-beta.0 release * Re-add the event recorder in the release test * Don't clear the cached resourcelock when errors occurs on updates * Add failing test showing release is not working properly * Wipe some fields on service "type" updates * Make some methods into non-methods * If image has stackdriver agent installed, use it. * remove the deprecated client that we stopped generating * generated * Update function setting master node size for GCE * dualstack endpoints integration tests * fix case when HC timeout is 0 * pv controller test: more test cases * pv controller test: use sub tests * pv controller test: enable klog output * cleanup: fix some error log capitalization * fix unbound variable on upgrade * add godoc for events to events.k8s.io * Event: Document TTL and best-effort-ness * Add the pod_resources_endpoint_requests_total metric * Update podresources api e2e_node tests * tombstone-ing IPFamily field(15) * fake dynamic client: document that List does not preserve TypeMeta in UnstructuredList * Change function signature for MatchNodeSelectorTerms * Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck. * Webhook: handle error when calling wait.ExponentialBackoff * Fix cacher test after bumping fakeBudget timeout to 2 seconds * Move pkg/apis/core/v1.IsScalarResourceName under pkg/scheduler/util * fixed addons fluentd-elasticsearch statefulset format error * PV controller: don't delete PVs when PVC is not known yet * follow up for #94109 * Enable Volume Expansion tests for Windows * scheduler: make Profile an interface. * Promote verify PriorityClass endpoints e2e test to Conformance * add e2e test for services with hostNetwork endpoints * e2e use functional options to configure NetworkingTest * fix e2e service test container listening port * dual stack services (#91824) * Kubelet now implements the V1 podresources API * Update generated files * Add podresources v1 API * Fix cacher test flakiness * Make versionconverter functions private * Reuse SSA type converter for resources in the same API Group * Change pvc describe test * add an APIServerIdentity feature gate * DelegatingAuthorizationOptions: exposes and sets a default timeout for SubjectAccessReview client * Fix the kube-proxy comment so that the document can be generated correctly * Fix a lot of typos in Azure codes * pause image: Stricter registry prefix regex * apiserver: use canonical egress selection names in EgressSelectorConfiguration API docs * apiserver: update TestReadEgressSelectorConfiguration to use 'controlplane' egress selector name * apiserver: add validation for EgressSelection names in EgressSelectorConfiguration API * apiserver: support egress selection name 'controlplane' and deprecate 'master' * Update test/e2e/storage owners file * Report a metric for time taken to perform recursive permission change * Log PodExec stdout + stderr * Add e2e test for the newPV Controller metric * removed whitspace * added xpack gem to enable ilm support in fluentd-es-image * Add yaml util to unmarshal numbers into int/float * Update the frontend IP config when the service's `pipName` annotation is changed * fix typo in e2e test * Add MrHohn as an owner of ip-masq-agent addon * Bump ip-masq-agent version to pick up CVE fixes * ipvs: check for existence of scheduler module and fail if not found * fix: do not hardcode nginx image URL in rc e2e test case * Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane. * Add configuration options to specify --detect-local-mode on kube-proxy. * Fix static checks for pkg/controller/podautoscaler * proxy: label kube_proxy test with more unique label * Optimize NormalizeScore for PodTopologySpread * Add 5k nodes benchmark for pod topology spreading * PV Controller: PV plugin and mode metrics * style: update comments in topology manager * Optimize string building for NamespacedName * Clean code: optimize some logs of mount * extend request interval to make session affinity cases stable * Add jingxu97 to volume/util owners * Delete framework/v1alpha1 folder and change remaining import paths * Fix a bug that Pods with topologySpreadConstraints get scheduled to nodes without required labels * Fix staticcheck failures on apiserver/plugin/pkg/{authenticator, authorizer} * Alter wording to describe pods using a pvc * Deflake PostFilter integration test * allow component-helpers to import util and klog * generated * generalize lease controller * move node lease controller to component-helpers * Add integration test for Default PodTopologySpread * bump qemu version * Rename flags * Replacing factory tests with scheduler.New and options * Add SETUP_KONNECTIVITY_SERVICE flag * Separate network proxy flag for apiserver egress and starting pods * kubeadm: validate node-cidr-mask are correct * kubeadm validate maximum service subnet size * write checkpoint only when allocated devices updated. * kubeadm: validate podSubnet against node-cidr-mask * Properly quote flags passed to Cluster Autoscaler * Update nodelocaldns yaml to use 1.15.16 image * remove unused const failedExpiration * If we set SelectPolicy MinPolicySelect on scaleUp behavior or scaleDown behavior,Horizontal Pod Autoscaler doesn`t automatically scale the number of pods correctly * format incorrectAddresses in klog * fix: add missing patch flag for kubeadm init phase control-plane * fix loop bug for verify attached volume * test: Add service cluster IP range unit test * prepare node performance tests to move to separate job * ipset: Address a TODO, add test for TestEntry() with IPv6 address * Fix labels for spreading benchmark * Added functionality and API for pod autoscaling based on container resources * Add more Pods and relax skew in E2E spread test * Adjust the acceptable value of UsageNanoCores * Return non-zero code on logexporter failures * Fix default values for logrotate in /var/log/ * Add integration test for kubectl debug * Fix golint failures in client-go/transport * Update the PIP when it is not in the Succeeded provisioning state during the LB update. * Support cross compilation only on amd64. * Always set relevant variables for cross compiling * Use host IP instead of localhost for control plane component kubeconfig files. This is a part of work to allow control plane components to be moved off hostNetwork. * Allow deletion of unhealthy pods if enough healthy * iAdd host IP to etcd listen client URLs. Allow kube-apiserver to use host IP to connect to etcd. Update etcd/migrate to allow additional client listening URLs. * Add error detail in log * CHANGELOG: Update directory for v1.20.0-alpha.3 release * fix the fake cloud provider * Warn that hyper-v featuregate will be deprecated in 1.20 and will be removed in 1.21 * Do not skip externalLB update if some nodes are not found. * Promote Replication Controller lifecycle e2e test to Conformance * Promote Replication Controller Lifecycle * Move client_builder to k8s.io/controller-manager * Graduate DefaultPodTopologySpread to beta * e2e: topomgr: fix ginkgo log * netpol: Add CRUD tests for NetworkPolicy API * test images: Adds Windows support (part 2) * refactor: migrate node e2e tests off insecure port * Generated bazel * Generated conversions * exec credential provider: wire in cluster info * Fix dependency linting * Kube-proxy: Perf-fix: Shrink INPUT chain * Fix flaky unit test Test_Run_Positive_VolumeMountControllerAttachEnabledRace data race * conntrack log delete operations * Bump github.com/Azure/go-autorest/autorest/adal to 0.9.5 * kube-proxy: log stale services operations * staging/publishing: cleanup import restrictions for csi-translation-lib * tests: Refactor agnhost image pod usage - common (part 2) * test, e2e: Remove duplication when using PodClient.CreateSync * fix test flakes * kubectl: allow users to use args with KUBECTL_EXTERNAL_DIFF * e2e don't use hardcoded name for containers name * avoid apiserver/cloud-provider/controller-manager deps from k8s.io/csi-translation-lib * Add client listening URLs flag to etcd migrate. * test: Fix using deprecated default cluster IPs * Disable test for large clusters * The function shouldRecordEvent will panic when the value of input object is nil * Fix catch all regex and missing DryRun Options * fix unbound variable issue in verify.sh * support multiple bind records (fie nodelocaldns test regression), by first replacing PILLAR_ and then replacing other vars. * Add back openapi gen for generic types and clean up doc.go * fix a nil pointer ref in slice allocation * warn user about resource being deleted * Use gsutil to download kube binaries and release * staging/publishing: remove release-1.16 rules * test images: Switches to buildx * Add new way to generate leader election lock * fix staticcheck vendor/k8s.io/metrics/pkg/client/custom_metrics/multi_client.go:49:4: ineffective break statement. Did you mean to break out of the outer loop? (SA4011) vendor/k8s.io/metrics/pkg/client/custom_metrics/versioned_client.go:38:2: var codecs is unused (U1000) * kube-proxy ensure KUBE-MARK-DROP exist but not modify their rules * Remove redundant variable * Switch events conformance metadata from v1.19 to v1.20 * Fix windows node startup failures. * CHANGELOG: Update directory for v1.18.10 release * CHANGELOG: Update directory for v1.17.13 release * kubelet container status calculation doesn't handle suddenly missing data properly * enable benchmark by matching test config * remove debug print from create quota * Move SCTP to GA * remove secondary client retries in e2e tests * Add support for create ingress in kubectl * Fix metrics reporting in kube-apiserver * Fix --dry-run invocation in kubectl e2e * fix: smb valid path error * Fix staticchecks in vendor/k8s.io/client-go * Replace non-ascii string under test/ * add methods to deallocate and starts vms in a scale set * Removing flaky tag from test * Use fluentbit as logging agent. Replace stackdriver * e2e: node: topomgr: avoid plugin leak on test fail * add a local tlsTransportCache to available_controller * Move dirExists() to kubelet_test * Map SelectorSpreadPriority to PodTopologySpread plugin * CHANGELOG: Update directory for v1.19.3 release * Fix fcpath * Ignore deleted pods. * Make copied `localtime` file write-able * Reorder default Filter plugins to have UnschedulableAndUnresolvable first * Add unit tests for dockershim/exec.go * test: Fix deprecated --dry-run parameter * Enable XFS tests for recent GKE COS versions * CHANGELOG: Update directory for v1.20.0-alpha.2 release * PriorityClass lifecycle tests * Fix log dumping for GKE * Add `create ingress` command to `cmd/kubectl` * Support the node label `node.kubernetes.io/exclude-from-external-load-balancers` * Remove dependency between create rolebinding * kube-eviction: Fix SI of process quantity * add systemd mount options interface to support the no-systemd mount * Move scheduler interface to pkg/scheduler/framework * Fix vsphere disk detach failing * - fix golint errors by adding defition comments - remove /pkg/apiserverinternal from .golint_failures * [auth]Check verbs for nonresourceurls and resources * add a OWNERS file under storageversion * generated * add the storageversion.Manager interface * kubeadm: add some output to the generate-csr command * Fix the busybox image tag in kubemark hollow nodes * fix azure disk attach failure for disk size bigger than 4TB * Add PULL_REQUEST_TEMPLATE.md and state the repo does not accept any direct changes * Run hack/update-vendor.sh * Add rule for component-helpers into staging/publishing/rules.yaml * Removing GetPodPriority from pkg/api and importing PodPriority from k8s.io/component-helpers * Duplicate a single helper from pkg/apis * simpler addition of nodeport basic validation * Replace Branch Manager/Patch Release Team with Release Manager * OWNERS_ALIASES: Add xmudrii to release-engineering-reviewers * make new command functions to keep private when they are not required to be public * wrap errors from NodeLabel, NodePorts, NodePreferAvoidPods and NodeResourcesBalancedAllocation plugins * fix azure disk data loss issue on Windows * fix upgrade test * Add defaultingType to PodTopologySpreadArgs * Don't depend on DNS in NetworkPolicy tests * kubelet: fix iptables setup under dual-stack * Improve logging of iptables canary test * Update addons volumesnapshots owners file * Clarify that we don't audit events due to performance impact * don't cache transports for incomparable configs * Update write-pki-data to give read permissions to KUBE_PKI_READERS_GROUP, for components running as non-root to be able to read the credentials. * Update to Calico v3.16.2 * Update Windows Pause version to 1.4.0 * Move cmd/controller-manager to k8s.io/controller-manager and cloud specific configs to k8s.io/cloud-provider. * API server: fix default_konnectivity_socket_path typo. * cleanup: fix golint errors in /pkg/kubelet/stats * cloud node controller: handle empty providerID from getProviderID * always collect containerd logs * Upgrade snapshot controller to 3.0.0 * log-dump.sh: Fix shellcheck issues * test-integration: Fix using deprecated default cluster IPs * Initialize k8s.io/kubernetes/staging/src/k8s.io/component-helpers * Update the example for kubectl port-forward * Upgraded aws-sdk-go to v1.35.5 to include more regions, i.e. Millan * kubelet: Set dual-stack hostNetwork pod IPs on dual-stack nodes * utilnode: fix incorrect documentation about node name vs hostname * kubelet: allow specifying dual-stack node IPs on bare metal * kubelet: Remove unnecessary sorting in NodeAddress tests * allocate service-account flowschema to global-default * Fix reporting network_programming_latency metrics in kube-proxy * Allow configuration of etcd healthcheck timeout * add ipv6 support to the image issue-74839 * set lastterminationstate for container status even when CRI fails to return termination (or any) data * Remove the dependency between create quota command and generators * make download-or-bust compatible with both sha512/sha1 * Fix documentation on EndpointSliceCache map * Adding marosset to test/e2e/windows/OWNERS approver * Add SELinux labels for kubelet on Fedora CoreOS * add CAP_NET_RAW capability to CRI stats summery test * e2e hostexec commands does not need sudo * Update after code review * Update cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Mask bearer token in logs when logLevel >= 9 * Update test/e2e/framework/network/utils.go add logging about min/max interval Co-authored-by: Antonio Ojea * scheduler framework: document how to make plugins configurable * Send node startup scripts to console and journal * Disable the Accelerator metrics by default * Adding Bazel dependencies * Adding failure scenario for long FQDN and setHostnameAsFQDN feature * add unit tests for network plugin manager metrics * clarify help for --api-version: note it's API group/version * include APIVersion in output of 'kubectl api-resources' * Move cloud related feature gates to controller-manager * Replace AreLabelsInWhiteList with isSubset * mark node-problem-detector as serial * Cleaned up and fixed: the potentially misleading comments around Event struct * Update DialFromNode to return values as is done w/ other tests. Update comments to clarify missing probability check function (since they need to be updated anyways b/c of the return value introduced) * Azure: fix node removal race condition on VMSS deletion * removed links to soon deprecated helm stable repo & added artifact hub link * get kibana up to speed with es * rev version of stateful set * v1.18 support changes * kubectl: Update triage/support label references to kind/support * Fix golint failures in pkg/registry/core/replicationcontroller * kubelet: do dual-stack iptables rules * use new fluentd image in daemonset * updated fluentd and all plugins * fix staticcheck for kubectl pkg files * Add gate to install CSI proxy * SetHostnameAsFQDN will be beta in v1.20, enable feature gate by default. * test: e2e: fix race in pods test * Fixes high CPU usage in kubectl drain * proxy: Add tests for kube-proxy config defaulting * test/e2e/framework/:use the term 'Control Plane' in comment * Do not update managedFields timestamp when they don't change * reconcile NLB attributes on service creation * fix detach azure disk issue when vm not exist * Mask Ceph RBD adminSecrets in logs when logLevel >= 4 * Update triage/support label references to kind/support * Update addon-manager makefile to use the new staging repo - for real * Remove unused FailfWithOffset() * Verify pod termination with E2E PreStop hook * Move predicates and priorities configuration creation to Policy mapping * Make the creation of namespace using POST and PATCH consistent * vsphere: improve logging message on node cache refresh event * Tag LabelSelector with +structType=atomic * Bump to latest kube-openapi and SMD to pick up structType=atomic support * just log essential pod info * Add error text to kube-system wait error * Change kubectl clusterinfo to non offensive words * e2e can't use both pod.Name and pod.GenerateName * Fix test "[sig-windows] DNS should support configurable pod DNS servers" * Fix lint errors in pkg/contoller/endpoint * Update Makefile to point to the new addon manager gcr repo * Fixed percentage behavior in instr * remove dns_common.go delete configmap stuff * kubelet: remove some redundant iptables option checking * Remove federation tests entirely because they break clusters and aren't relevant anymore * Don't add empty AZ labels to OpenStack volumes * resolve PR comment ( add nil check ) * fixes test/integration/ttlcontroller staticcheck * Add CSI proxy log to fluentd * Update Windows image patch version * Updated symbol 'framework.GetAllMasterAddresses' to not use word 'master' * Updated symbol 'framework.GetMasterHost' to not use word 'master' * fix: use ">" instead of ">=" in resource allocation * add configuration for controller migration. * Watch bookmarks may contain version of objects of other types * Support sharing one IP address for multiple services * Add unit tests for feature "Support sharing one IP address for multiple services" * Graduate SelectorIndex to GA * correct 'information' spelling errors * correct 'admission' spelling errors * add note for kubeadm cert renew * Fix UpdateSnapshot when Node is partially removed * Add LookForStringInPodExecToContainer that takes container name parameter, modify LookForStringInPodExec to call the new function. * Fix test name TestDump * kubeadm: deprecate self-hosting support * make update * fix integration tests * fix error message * fix goroutine that lives too long * wrap errors in selectorspread and podtoplogyspread plugin * add unit tests for getStorageAccounts in azure_storageaccount.go * Lint ttl_controller * Fix staticcheck failure for vendor/k8s.io/client-go/discovery/cached/memory * kubectl: deprecate --delete-local-data * wrap errors in service affinity plugin * [pkg/watch/json]: remove dead code * wrap errors in taint-toleration plugin * pause image: moves wincat binary location * Adds support for building Windows pause image * tests: Refactors agnhost image pod usage - network * tests: Refactor agnhost image pod usage - common (part 1) * gce: redirect handshake server requests to metadata-concealment too * Disable one subpath test for windows * Add csiproxy log * Collect debugs before framework.Failf * Enable per-zone logexporter pods creation * e2e/storage: disable caching when writing/reading to block PVCs * e2e: add option to create pods with different image in pod.Config * Clean up nits in delete cascade * wrap errors from DefaultPreemption, ImageLocality and NodeAffinity plugins * Fix LookForStringInPodExec(...) to take container name as argument, and refactor function usage Ref: PR 92127 review discussion https://github.com/kubernetes/kubernetes/pull/92127/files#r447853904 * switching to stable version * Fix kube-addon-manager overwriting resources with EnsureExists * apiserver self request metric * address instance_test nits * It's an 'Instance' of apiserver * upgrade test for BoundServiceAccountTokenVolume * kubeadm: make the CP join handling of kubeconfig similar to "init" * kubeadm: warn but do not error out on missing CA keys on CP join * using structured logging in scheduler framework runtime * agnhost image: use actual DNS domain instead of hardcoded cluster.local * add aojea to test reviewers * Use the exported struct member directly * fix: correct glbc ClusterRole * Updated vendor by `hack/update-vendor.sh` * Update bazel * Update dependencies * Remove kubeconform * Remove dependency on behaviors for conformance generation * Fix typo & documentation on kustomize.md * Remove unmaintained stackdriver logging e2e test * replace sha1 with sha512 * Use pager's context instead of TODO * kubelet: add unit tests for imagePullSecrets keyring * Keep the imagePullPolicy of kubectl alpha debug consistent with the default * Remove ext2 + ext3 tests * Add failure logic to tests that rely on side-effect-free dial functions. * Adding back in the breadth-first-polling logic. "Revert "Merge pull request #93837 from jayunit100/DialFromContainerB"" * Update the use message for kubectl debug * Graduate kubeadm alpha certs command * Fail test when Cinder volume deletion fails * Add extra log when Cinder volume deletion fails * Delete pre-provisioned Cinder volume by ID * deprecate scheduler metrics BindingLatency and SchedulingAlgorithmPreemptionEvaluationDuration * modify static check * Replace e2essh on e2e service tests * using kubectl apply to create metric adapter * Allow the lifecycle of kube-proxy to be managed independently of the startup scripts for GCE * Fix `kubectl describe ingress` format * check readyz before adding endpoint for kube-apiserver * Bump network proxy images to v0.0.12 * Bump konnectivity-client to v0.0.12 * tests: Refactors agnhost image pod usage in tests * Revert "Merge pull request #93837 from jayunit100/DialFromContainerB" * CHANGELOG: Update directory for v1.20.0-alpha.1 release * Move Kubelet Summary API to staging repo * removing deprecated scheduler metrics * refactor(kubeadm): make `alpha kubeconfig user` command accpet --config * wait until the iptables rules are programmed * Add test for listing Leases from all namespace * use GetInstanceProviderID to get instance provider ID * Remove mattjmcnaughton as a sig-node reviewer * Enhance the prompt information of verifyRunAsNonRoot, add pod, container information * Update nodelocaldns yaml to use 1.15.14 image * handle longer vendor paths without go files * Show error in status if preserve unknown fields is true for nonstructural schemas * `find . -type f \( -name "*.go" -or -name "*.md" \) -print0 | xargs -0 gsed -i 's/the the /the /g'` * endpoinslices must mirror services labels * kubectl: add a space between effect and operator when printing tolerations * Return the Kubernetes version which stopped serving deprecated APIs by default * log-dump.sh: Do not modify logexporter-daemonset.yaml in-place. * Take into account latency incurred in server filters * test images: uses nanoserver * Remove kubeadm audit package * Do not assume storageclass is still in-tree after csi migration * fix kube-proxy cleanup * scheduler_perf: use time.Ticker in throughput measurement * Remove testcluster check for csi proxy * Add cheftako to KCM owners. * Add an unit test for requests including value after token * Limit the max number of splitting * fix: detach azure disk broken on Azure Stack * [pkg/api/podsecuritypolicy]: fixup typo * Add a check for crio service before starting node e2e tests * apiextensions: prune array type without items in published OpenAPI * test: add unit-test for TranslateCSIPVToInTree. * apiserver: fix healthz vs. livez vs. readyz log output * test(kubelet): deflake TestRotateShutsDownConnections * kubeadm: update vendor to exclude kustomize import * kubeadm: remove the --experimental-kustomize feature * update-bazel * use more granular buckets for azure api calls * fix duplicate testcase names * Adds filtering of hosts to DialContexts. * update storageos vendor for FilteredDial change * kubeadm: remove the --kubelet-version flag for "upgrade node" * Adding cheftako to CCM owners. * scheduler_perf: refactor to allow arbitrary workloads * Tests for empty constraints array when DefaultPodTopologySpread is enabled * cluster/images/etcd: Build etcd:3.4.13-1 image * build: Update to debian-base:buster-v1.2.0 * build: Update to debian-iptables:buster-v1.3.0 * test(apply): deflake run_kubectl_apply_tests * fix azure file migration panic * Add support for s390x * test images: Fixes echoserver s390x image * Change code to use staging/k8s.io/mount-utils * enable gce InstancesV2 * implement gce InstancesV2 interface * Update csi proxy to v0.2.1 * cloud node controller: implement with workqueues and node lister * CHANGELOG: Update directory for v1.19.2 release * CHANGELOG: Update directory for v1.18.9 release * CHANGELOG: Update directory for v1.17.12 release * test/e2e: Busybox image is not being templatized * move dashpole to emeritus in kubelet * LockToDefault the ExternalPolicyForExternalIP feature gate * Fix resource location for ipv6 pods * Refactor kubectl without stdin test * e2e sctp support for ipv6 * Fix e2e autoscaling namespace error * reduce cloud api calls in cloud-node-controller by passing instanceMetadata to updateNodeAddress * Ensuring EndpointSlices are recreated after Service recreation * Increasing acceptable timeout for EndpointSlice garbage collection * Delete namespace parameter in create adapter * verify-generated-swagger-docs: remove unnecessary build * kubeadm: relax the validation of kubeconfig server URLs * Graduate WinOverlay to Beta * count of etcd object should be limited to the specified resource * Run gofmt * run hack/update-vendor.sh * Move podresources api to k8s.io/kubelet/pkg/apis * optimize the use of informer for scheduler * Revert "conntrack e2e test debug connections" * ingore apparmor on non Linux operating systems. * test: ensure WaitForCacheSync is called after starting sharedInformerFacotry * Move the RuntimeClass tests out of node-kubelet-orphans * Test watchcache being updated in multietcd setup * Enable progress notify events in watchcache * Allow tracking resource version for reflector store * Implement etcd3 progress-notify feature in etcd3 layer * Pipe newFunc to etcd3 storage layer * Update kubeconfig command-line help message for kube-proxy * Clean up remaining ns flag * Revert "Revert "Switch cos version to M85"" * ubernetes_lite.go: remove image argument from SpreadServiceOrFail * Don't attempt to detach an FC device if we don't know its name * follow up cleanup after SupportPodPidLimits GA * Mount kubelet and container runtime rootdir on LSSD * avoid potential secret leaking while reading .dockercfg * clean up podpreset deprecated client * generated * remove generated podpreset * remove pod presets * test/{images,utils/image}: Add justaugustus as reviewer * cluster/images: Add justaugustus as reviewer * hack: Add justaugustus as reviewer * .github: Add justaugustus as reviewer * kubeadm init phase upload-certs: add flag --kubeconfig * portforward: Fix UDP-only ports calculation * chore: add network rule support in Azure account creation * Fix misusage of RLock in timeCache lru.Cache.Get() * e2e test support microk8s * test(iptables): deflake TestRestoreAllWaitOldIptablesRestore * feat(iptables): be able to override iptables-1.4-compatible lock path * test flake: fix data race in csi_test.go * Move podPassesBasicChecks() to VolumeBinding plugin * Remove pvcLister from genericScheduler * add retry for creating metrics grabber to fix test flakes * Remove tests related to HTTPS support for ingress-gce * make kube::util::find-binary not dependent on bazel-out/ structure * output go_binary rule directly from go_binary_conditional_pure * hack/lib/util.sh: some bash cleanups * bazel: Replace --features with Starlark build settings flag * [go1.15] staging/publishing: Set default go version to go1.15.2 * [go1.15] build: Use go-runner:buster-v2.0.1 (built using go1.15.1) * [go1.15] Update to go1.15.2 * [go1.15] hack/tools: Update to k/repo-infra@v0.1.1 (supports go1.15.2) * [go1.15] build: Update to k/repo-infra@v0.1.1 (supports go1.15.2) * Graduate ServiceAccountIssuerDiscovery to beta * avoid logging token in RunDeleteTokens * gpu device plugin uses EnsureExists addon mode * Non-zero cfs quota period duration requires feature flag * Use namespace flag passed to RunKubectl* methods * Update etcd to dd1b699fc489 * Fix some shellcheck warnings/errors in cluster/gce/util.sh * kubeadm: remove stray "alpha phase" command * kubeadm: remove the "alpha kubelet config enable-dynamic" command * Fix index out of range panic for kubectl alpha debug * rename some files * Fix minor comment in a script * Wrap errors on VolumeBinding plugin * Wrap errors on DefaultBinder plugin * Wrap errors when running Bind plugins * Wrap errors when running PreBind plugins * Remove field disablePreemption from internal scheduler codebase * Run unit tests 2 instead of 3 times via bazel * Add the storageversion.Manager interface * pillar_dns_server remove change so as not to break tooling in the near term in the kubernetes/dns repo * Fix staging/src/k8s.io/apimachinery/pkg/labels golint findings * Use EphemeralContainers for storage validation * Hold error in framework's Status * Increase time it takes for second pod to startup for offline resizing * Read PV object from apiserver to prevent flake * Migrate scheduler, controller-manager and cloud-controller-manager to lease lock. * fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR * Update csi-proxy to use beta version * remove feature gate SupportIPVSProxyMode. * Revert "Switch cos version to M85" * bump the version of k8s.io/system-validators to 1.2 * kubeadm: Update versions for 1.20 * Handle nil elements when sorting, instead of panicking * kubeadm: print warnings on invalid cert period instead of erroring out * CHANGELOG: Update directory for v1.19.1 release * Prevent deletion of namespace again * Deprecate Dockershim * Tolerate NotFound errors when deleting snapshots * storage E2E: explicitly wait for PV deletion after ephemeral test * Add vCenter info metric * Avoid unnecessary calls if other error occurred * test(portforward): deflake TestGetListener * Add roundtrip tests for metrics repo * generated * Let kube-apiserver host the storage version API * fixup: add podLister as a member field of DefaultPreemption * Preemption plugin to fetch pod from informer cache * Switch cos version to M85 * generated * fix import paths * add internal.apiserver.k8s.io/v1alpha1 to known gvs * update doc.go and register.go * move apiserverinternal types to kube-apiserver * Initialize scheduler's podInformer in sharedInformerFactory * Sort list of formats for --logging-format description to make it deterministic * skip TestClientReceivedGOAWAY * Count storage requests as whole byte values in quota * Add Stephen Augustus as Reviewer for staging/publishing * e2e: fix deployment non-unique env vars to avoid SSA error * Remove pkg/api/endpoints * Stop container before remove for Docker * fix golint failures for staging/src/k8s.io/client-go/examples/workqueue * Revert "fix cluster/log-dump/log-dump.sh shellcheck failures" * deferredResponseWriter returns after calling the Close() method * test(tools::events): deflake TestEventSeriesf * Fix typo in comment of hack/verify-shellcheck.sh * Fix staticchecks ST1005,S1002,S1008,S1039 in pkg/kubelet * Remove unnecessary double-pointer * Add metrics for azure service operations (route and loadbalancer). * Add tests for daemonset view history * Add commend for printHistory function * test(watch-tool): deflake TestRetryWatcherToFinishWithUnreadEvents * dedup the printHistory logic in DaemonSetHistoryViewer,StatefulSetHistoryViewer * Describe sts on rollout history if the revision * kubectl: Use Fprintf * fix golint for pkg/volume/azure_dd * test(workqueue): deflake TestMetrics * build/lib/release: Explicitly use '--platform' in building server images * build/common.sh: Remove extraneous reference to debian-base image * test(kuberuntime): deflake TestRecordOperation * prefer NoError/Error over Nil/NotNil * Deflake serving options, avoid hard-coding ports * Deflake port forward tests to avoid hard-coded local ports * Deflake cpumanager checkpoint unit tests * Use unique socket name per cm test * fix(azure::cache): TimedCache.Getter should be called once on the same key * test(azure::cache): deflake TestCacheNoConcurrentGet * Run slow kubeadm upgrade tests in parallel * Ensure kubeadm tests have unique names * Avoid mutating global variables in kubeadm certs phases * test(iptables): deflake TestRestoreAllGrabOldLock * Skip TestGOAWAYConcurrency * test(apiserver): deflake TestClientReceivedGOAWAY * Deflake TestSetup * Deflake TestHTTPProbeProxy * kubelet: remove alpha warnings for CNI flags * Add more tests for LRU cache lookup * Move ResourceQuota admission to k8s.io/apiserver * do not mutate endpoints in the apiserver * remove DefaultIngressClass feature gate for 1.20 * Cleanup custom metrics conversion functions * feat(kubeadm): specify resource requests in etcd pod spec * Stop ignoring unit test flakes, require multiple successful passes * kubeadm: remove the CoreDNS check for supported image digests * Use ExpectNoError(err) * allow to map the same container port to different host ports * Updating winkernel kube-proxy OWNERS file * consistently use double quotes in proto files * Deflake TestServiceRegistryExternalTrafficHealthCheckNodePortUserAllocation * add more testcases for GOAWAY filter * prefer double quotes and consistent usage in .proto files. * Improve ability to debug Events e2e failure * Added support for register-with-taints setting #93608 * AWS NLB/ELB health check config based on service annotations * kubeadm: adjust the logic around etcd data directory creation * fix vendor/k8s.io/apimachinery/pkg/runtime/serializer/versioning staticcheck * test(csi): deflake TestAttacherWithCSIDriver * Remove HeadlessService label in endpoints controller before comparing * Remove default conversions * Update security contacts for sig-cli * Allow to disable logrotation of kubernetes and pod logs * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Fix some shellcheck warnings/errors in cluster/gce/util.sh * Enhancement on the testcase to cover more possibilities * fix kubeadm update coredns with skip pending pod * address review comments * Update kubectl to use new vendored github.com/fvbommel/sortorder dependency * Fix broken dependency vbom.ml/util * Add exp backoff for connection refused errors * proxy/userspace: clean up and consolidate testcase setup * proxy/userspace: use waitgroups instead of sketchy atomic ops in testcases * Start CSI proxy as service * remove --verbose_failures from .bazelrc * fix a few missed references * CHANGELOG: Update directory for v1.16.15 release * update scripts * fix doc file * rename * partial * move port definitions to a common location * remove iperf e2e test ip family tags * modify DNS-1123 error messages to indicate that RFC 1123 is not followed exactly * kubeadm: Fix `upgrade plan` for air-gapped setups * Avoid the API call to update pod if nothing is changed * moving files from k8s.io/util/mount into staging/src/k8s.io/mount-utils * fix: return error with fewer mount options on Windows * fix: smb remount issue * Remove driver letter assignment during volume format * Revert "Merge pull request #166 from jingxu97/May/drivename" * chore: add more logging for mklink on Windows * fix: remove unnecessary readlink check in IsLikelyNotMountPoint on Windows * Remove driver letter assignment during volume format * Switch to klog v2 * ignore golint for some stutter that we want to keep as-is * fix bad spelling * Revert xfs_repair fix * Fix windows MountSensitive error * Fix subPath mountpint check * Fix mount_windows build error * Introduce paramater for sensitive mount options. * FormatAndMount unit test only checks for MountErrorValue now and closed gaps for some error values * Add more detailed error output when disk formatting fails * Split MajorMinor into two fields * update after review * use xfs_repair to check and repair xfs filesystem * Return typed error when Mount Fails * Validate the existence of filesystem before attempting to mount it (linux) * feature: implement Output method for FakeCmd * Fix golint errors * Update doc.go to show k8s.io/utils * Extract pkg/util/mount and drop BUILD * bind metadata proxy to 0.0.0.0 * Add e2e multiple endpoint services test * spdy: add optional periodic Pings on the connection * fix vendor/k8s.io/apimachinery/pkg/conversion staticcheck * Handle eviction of pods in deleted namespace * drain: eviction creates in a deleting namespace will throw a forbidden error * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5 * Stop setting SelfLink in kube-apiserver. * Fix FakeClock::Reset to always succeed * add myself to sig-node-reviewers * kubeadm: make the scheduler and KCM connect to local endpoint * kubeadm: Ensure etcd manifests are regenerated upon upgrade * Add WatchListPageSize to cache.Config * Allow 404 error on lb deletion in azure * add lock for csi node update * fix typos in cmd/kubeadm * clean up testutil/metrics content * Update comments in pkg/scheduler/framework/v1alpha1/interface.go * Update `kubectl diff --server-side` test. * Skip TestLoopbackHostPortIPv6 run on non-IPv6 env * relax matcher for ResourceMetricsAPI test * fix staticcheck errors in resourcequota * update test to match validation filter of pods * Omit optional field when empty * Update CNI plugins to v0.8.7 * fix golint failures * Mark SCTPConnectivity tests as disruptive. * Add tests for SCTP network policies. * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null * Improve the prompt message when kubeadm init is successful * fixed golint error in pkg/apis/admissionregistration * Add 1.19.0 API testdata * Remove 1.17.0 API testdata * chore: 📦 update generated files * Update max data disk count with new instance types * Getting rid of the Salt DNS replacements, addded / back. * tests: Refactor agnhost image pod usage * Improve docs for client-go warning handlers * Override hostname with instance name * Fix testpattern check * chore(openapi-spec): 📦 regenerate * Moving e2e tests to e2e_node directory * Combine switch case into one case * Ran hack/update-bazel.sh but discarded changes to root build file * Move common portion of dynamic snapshot out of switch statement * Remove custom hash function, generate a random UUID for snapshot and snapcontent name instead * Stack snapshot tests into one to reuse snapshot resource and reduce time taken on prow. * Quick commit * Remove snapshot class from prepv test because it is not needed. * Combine two tests with overlap to reduce overall snapshot test suite time * Add pre provisioned snapshot tests * start kube-apiserver and webhook server only once to shorten the webhook audit test time * Minor cleanup in snapshot test suite. * Add a link to liggitt's deflake docs in Flake template (#94243) * Deprioritize extensions/v1beta1 in discovery * Update cri-tools to v1.19.0 * Update default etcd server to 3.4.13 * fix(azure): check error returned by scaleSet.getVMSS * fix cluster/log-dump/log-dump.sh shellcheck failures * Remove azure-load-balancer-disable-tcp-reset annotation * Remove duplicate nodeSelector * fix linter issues for pkg/kubelet/cri/remote and staging/src/k8s.io/cri-api/pkg/apis/testing * Fail early on stress test and improve logging * kubectl wait add ignore not found flag * Support kubectl delete foreground * remove deprecated kubelet endpoint /metrics/resource/v1alpha1 * Update options.go * Initialize candidate directly instead of iterating the array of candidates * Move brendandburns to to emeritus status. * fix vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured/unstructuredscheme staticcheck * only update Azure data disks when attach/detach * Enable IP Tags on Azure LoadBalancer public ips * Add PR #89069 Action Required * Update etcd makefile to build 3.4.13 image * Update etcd client to v3.4.13 * update drain message to include namespace for pod in kubectl get compatible format * CHANGELOG: Update directory for v1.19.0 release * Fix issue on skipTest in storage suits * Remove file_mode args for Windows test * Update Calico to v3.15.2 * Set snapshotType for tests with NTFS. * Update CHANGELOG-1.18.md * Add logging if container or pod fails to be killed * Adding label NodeAlphaFeature to include tests in Node Testgrid * Add impersonated user to system:authenticated group * Verify running mirror pod has running containers * Only process all nodes when incoming pod has no preferred affinity * test(endpointslice): deflake TestSyncEndpoints * Remove unnecessary conversion * Detect change of volume attachability in the middle of attaching * Promote PidLimits to GA * Ensure backoff step is set to 1 for Azure armclient * [pkg/registry/admissionregistration]: fixup wrong copy&paste godoc * Remove StartupProbe featuregate and related logic * Make ProjectedVolumeSource optional * Track pods with required anti-affinity * Updating kube-proxy to trim space from loadBalancerSourceRanges * let panics propagate up when processLoop panic * Allow to configure clustername in creation of kubeconfig using kubeadm command * Make similar buckets for api and etcd request duration histogram * .github: remove stackoverflow from support issue template * Refactored pkg/controllers/resourcequota * fix: use sensitiveOptions on Windows mount * Cleanup kubelet TODOs that are no longer pertinent. * kubelet, cgroupv2: do not create /sys/fs/cgroup/sys with cgroupfs * Update wait function w/ descriptions of global node states, TODO for kubelet API. * ARM client: survive empty response and error * delete tests which use container manager stub * tests: Use Windows absolute path on Windows pods * Only lock statuses map when status isn't successful * Do not allow manual changes to manageFields via subresources * Change nodeInfolist building logic in scheduler * do not create StatefulSet pods when PVC is being deleted * fix misleading comment in expand_volume.go * Simplify and de-lint GCE Windows kube-up docs. * Add context to x509 verify failures * Read ssh username from env variable * Fix the logging message * Use /usr/bin/env bash in Makefiles and scripts * Scheduler auth stop using legacy scheme * allow adding annotations to pod when using kubectl run and add tests * kubeadm: Separate argument key/value in log msg * update ResourceMetricsAPI node-e2e test * docs(api): 📝 Fix HPA docs with addition of "External" type * fix vendor/k8s.io/apimachinery/pkg/util/framer staticcheck * Removed broken link to Analytics * Make CSI mock driver log parse more flexible * Verify that an ingress with empty TLS is valid * Update client-go out of cluster example * Update yaml files to use seccomp GA syntax * go fmt fix * remove some notes about scheduler/algorithm * get: -o yaml, json set ServerPrint false * Add test for `pkg/kubelet/util/util_windows_test.go#GetAddressAndDialer` * back out conversion of DialFromNode->DialFromTestContainer * kubelet: assume that swap is disabled when /proc/swaps does not exist * e2e storage: skip multi-volume generic ephemeral volume test * Reduce test volume sizes * support ipv6 in e2e policy tests * modify the warning log format from %d to %v * Update snapshot controller to use k8s.gcr.io * Seperate registry and feature gates * names unnamed testcases, adds name to t.Errorf msg * Improve running time of TestSchedulerWithVolumeBinding * Add maxTries logging statement, otherwise the numbers are really hard to interpret * implement breadth first try * fix test/e2e_node staticcheck * Fix error messages * Fix Poll variable name * Fix waiting for PVCs to get Bound * Number of failed jobs should exceed the backoff limit and not big equal. Remove patch in e2e test of backoff limit due to usage of NumRequeues * fix vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured staticcheck * Fix some typo * golint * fix vendor/k8s.io/apimachinery/pkg/labels staticcheck * Enable completion for `kubectl config delete-context` * vsphere: remove inactive members from OWNERS * sig-network: remove inactive members from OWNERS_ALIASES * cluster/addons/dashboard: remove inactive members from OWNERS * apiserver: remove inactive members from OWNERS * Fast return when no any matched anti-affinity terms * Update seccomp e2e test for GA * Fix an error in NodeUnschedulable plugin comment * Format Codes * minor logic fix * e2e test intra-pod breadth first logging and summary * fix incorrect comment in runtime ObjectKind interface * Fix job's backoff limit for restart policy Never, rely on number of failures instead of number of NumRequeues * test(kubelet): add a regression test to verify kubelet would not panic * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes * refactor(*): update pvc quota name typo in comment * fix: azure disk resize error if source does not exist * chore: add diskclient.Update interface * chore: add diskclient.ListByResourceGroup interface * Remove false positive warning in kubeadm cmd * cloud provider: add zone/region to InstanceMetadata * Sort kubectl top output when --sort-by and --containers are used together * add testcases for kubelet getters * fix a typo in the comment * Use v1helper.GetPersistentVolumeClass for compatibility * Add tests for managed fields tracking. * leaderelection: Remove doubled space in "attempting to acquire leader lease" log * benchmark-dockerized.sh: set KUBE_ROOT * kubeadm: reset don't unmount /var/lib/kubelet if it is mounted * PodReasonUnschedulable is not a pod condition type * Fix kubelet log message when starting a container * kubectl describe pod: use ReportingController as an event source * Fix TestScorePlugin: numScore should be accessed with atomic.LoadInt32 * expose Run[Pre]ScorePlugins functions in PluginRunner interface * Cleanup wait forever loops in pv_controller_test.go * Strip unnecessary security contexts on Windows * Updating the Reviewers / Approvers for WinKernel Proxier * fix the remote endpoint cleanup logic * Add chendave to sig-scheduling REVIEWERS * Adjust default replica count to 2 replicas * Run make verify with python3 to fix publishing bot issue * Document blocking behaviour of RunOrDie and Run * removed k8s-master label * Add example of using resource builder to load a manifest file * tests: Fixes variable expansion false positive test * revert auto-completed package names * remove legacy leftovers of portmapping functionality that was moved to CNI * mark this test serial due to race conditions * Clean up daemonset test names * Remove phantoms from dump_requests output * deps: opencontainers/go-digest -> v1.0.0 * Update k8s.io/utils dependency and use ebtables from there * kubectl: Allow --patch-file to be passed to `kubectl patch` * reduce type conversion and correct variable name * Fix verbs reporting in kube-apiserver metrics * kubectl: improve the warning message when doing kubectl apply to the resource without expected annotation * Fix label reference in deployment checks * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB * Update readiness checks * Update ready condition * chore: upgrade Azure/go-autorest to v14.2.0 use autorest v0.11.1 * extend ShouldCallHook benchmark to verify performance imporvement * [kubectl] Fail when local source file doesn't exist * nodelocaldns.yaml: remove force_tcp option which used for external dns query * Create Deployment resource lifecycle test * apf integration test: ensure no rejection * skip mismatched webhookAccessor and object * return err directly when nodename is not consistent in cert * add bootstrap policy for monitoring roles * unit test * move to cadvisor.MachineInfo * Delete ILB FR in case of changes to port/proto. * fix windows container root validate * hack: ensure go version is not specified for master in publishing rules * publishing: remove go 1.13.9 for master branch for controller-manager * add test case for kubeadm memory check * add more testing cases * Shorten watch restart test, run in parallel * ipvs: log error if scheduler does not exist and fallback to rr * fix golint failures in pkg/kubeapiserver/options, fix some incorrect replace of receiver name * fix golint failures in pkg/kubeapiserver/options, rename receiver name of BuiltInAuthorizationOptions to o * fix golint failures in pkg/kubeapiserver/options, use API Server in commemts instead of APIServer * e2e node: fix kubelet service restart failure * Mention background deletion in kubectl delete cascade help * fix bazel build file * correct the sandboxId attribute in unit tests * address review comments * add sandbox deletor to delete sandboxes on pod delete event * Check for sandboxes before deleting the pod from apiserver * fix(kubectl): warn users that flags cannot be placed before plugin * Avoid using socket for hints * regen * update build * remove serializers from codec factory * update * clean up unused var containerCache * cleanup: print warning message after timeout * Revert "cleanup: decrease log level from warn to v3" * cleanup: decrease log level from warn to v3 * AWS: increase io1 volume IOPs limit * Add a preflight check that the control-plane node has at least 2GB RAM * Handle int -> float conversion in FromUnstructured * Fixed potential nil dereference in hostpath unit test * Fixed error string should not be capitalized * add GetAddressAndDialer unit test * [k8s.io/apiserver/pkg/server/filters]: fixup go vet warning * [kubelet/dockershim] : Use local copy for range iterator * fix(staticcheck): fix static error of package `/pkg/volume/gcepd` * Filters on kubemark nodegroups when selecting node template to enable hollow node clusters that contain real nodes. * Move MasterUpgrade() out from e2e framework * Use temporary directory when creating temporary file in tests * generated * add vendorless to client-gen * use canonical import path in client-gen so that package comments are * ipvs: ensure selected scheduler kernel modules are loaded * Fix NetworkPolicy describe for egress-all policies * Export WaitForCSIDriverRegistrationOnAllNodes to be used by external csi driver repos * [e2e/storage] fix range issue in getCSINodeLimits * kubelet: add operations count and error count metrics to network plugin manager * fix HandleCrash() order * fix golint failures in pkg/kubeapiserver/options * remove duplicate path import * AWS cloudprovider allow nlb-ip and external type lbs to be managed externally * Move WatchUntilWithoutRetry() from e2e framework * Add metav1.SetMetaDataLabel func * Remove resize map code * lock-free broadcaster, use chan to ensure thread safety * [test/kubelet]: Fix deadlock in watch manager test * kubectl: remove the dependency between autoscale command and generators * cluster/addons/metadata-proxy: cleanup inactive members from OWNERS * test/images/pets: remove OWNERS to cleanup inactive members * apimachinery: remove inactive members from OWNERS * [pkg/controller/certificates]: remove staled func comments * Remove DeprecatedMightBeMasterNode() * TestCreateInvokeAdmissionControl: remove unnecessary goroutine in sequential processing * Add unittest coverage for boottime_util_linux.go * dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default * Adds additional documentation for job status * Set the oom_score_adj of guaranteed pod to -997 * Resolves staticcheck failures for component-base/metrics * Change the node name from "machine" to "node" * Fix a typo in PreBindPlugin comment * Replaced repair with returning error, in delta_fifo.go * Fix description of conversion generator * Don't create a new sandbox for pod with RestartPolicyOnFailure if all containers succeeded * add defer * SIG node owner files clean up * Refactoring: Reduce unnecessary lines * Fix a typo in comment * code clean for podgc * fixed e2e vsphere statefulsets test * Repair instead of panic when data corruption detected in DeltaFIFO * conntrack e2e test debug connections * disable goffuzz in binaries * Add get-users and delete-user to kubectl config * fix typo in runtime/interfaces.go * Return nil as error when instance is not found so that node_controller could delete the node * Cherry pick the fix https://github.com/kubernetes/kubernetes/pull/70291 * Find what fails pull-kubernetes-e2e-gce-ubuntu-containerd * Review update * Sync with master * Remove previously added '' no longer needed * No quotes needed/wanted for CURL_RETRY_CONNREFUSED * Add fix for run-kube-controller-manager-as-non-root * Updates after review * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Update cluster/gce/gci/configure-helper.sh * Mitigate newly added shellcheck issues * Updates after code review * Update after code review * Code review update * Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh * changes in imports was unintentional * fix S1000 simplify ch switch cases * fix S1000 simplify ch switch cases * fix S1008 simplify bool returns * fix S1002 omit comp to bool * Warn when creating roles with custom verbs kubectl * Fix static check failures for staging/src/k8s.io/apiserver/pkg/server/healthz/healthz_test.go * cleanup tempfiles in unit test * Enhance apiextensions-apiserver in standalone mode * fix CHANGELOG typo * Mirror pod without OwnerReference should not be created * Add unit test to kubectl/cmd/run * remove stale TODO after this PR: #92204 * add line break when describe hpa * basic regression test of runDockershim * fix func name NewCreateCreateDeploymentOptions * Fix error check logic * Fix broken format in CHANGELOG-1.18 * Remove contemplation of invariant violations from delta_fifo.go * fix expanding rbd volumes without ceph.conf * Adding tests for Kubelet pod update functions * Update Calico cpva to v0.8.3 * cleanup: remove useless methods * Modify the kubelet document * fix golint errors for pkg/kubelet/dockershim * cleanup: no need nil check before range * Add lease release tests in leader election * Generate complete leader election record to resolve leader election issues with LeaseLocks * fix: comments(only create parent dir) * make kubectl/kubeadm completion script support busybox * Add node-local-dns headless service * Made containerd-namespace flag can be used when kubelet config start cmd * fix comments * fix: ignore dir check in csi node stage/publish * Link to krew's new project site * Remove --include-uninitialized flag documentation * Use canonical URL for the krew project * return success if cordon node by replace * kubectl/drain add support for custom pod filters * do not wait for node ready when starting kube-proxy in 'nokubelet' mode * validate KubeletCgroups and KubeReservedCgroup- Initial Package/bin/sh/bin/sh/bin/sh/bin/shlamb13 1684751315 1.20.131.20.13-lp155.2.171.20.13-lp155.2.17 kubernetes1.20manifestskubernetes1.20kubeletkubelet.servicekubelet.service.dkubelet.confrckubeletkubernetes1.20-kubelet-commonCHANGELOG-1.20.mdCONTRIBUTING.mdREADME.mdsysconfig.kubelet-kubernetes1.20kubernetes1.20-kubelet-commonLICENSEkubelet.1.gzkubeletvolume-plugin/etc//etc/kubernetes1.20//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.20-kubelet-common//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/kubernetes1.20-kubelet-common//usr/share/man/man1//var/lib//var/lib/kubelet/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.5/standard/63b22aa9612e7aee11c18418b94d0281-kubernetes1.20cpioxz5x86_64-suse-linuxdirectoryPOSIX shell script, ASCII text executableASCII textexported SGML document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R Dh(J ;` utf-85d1c6dbca1b5887e684915563ffedb8fbf7523b142acd3c5502d7a1ac7e99d69?p7zXZ !t/ȣ] crt:bLL ؝-{/ߎ.K 5*1ߡL%&XW XKJU\fIӕx٬ %˙fxr!dK 4>o7USX$4F^9pb]\ ,Ȭ(:Onm]|/sR7)^=>iFA9GM.6> ^ [tmyF&| r`eMh^X}ab|R=[8 >5s8~zQok@+d1C$W!LџkĞa1ׇjS'u>GhW-v=a,DxGK9+ ͸ZN8-Q!'ţ bR~Ld'[<_ sKvy3̓-ܿ 2M-b%5N}:[nYWtkY7\òhV8do9Z=7F0󴈁fM=#-G7? x|xIb>]p\%50n[JCLMq0 iƚB%캟wF?OP tj4Lz$r ?`]s%ONo|O̦L $wN g\}UMv|m]!݆~/J贚dо2#u9zG4QW&mSvܛqh稗*?D<ɀSrGLzh.f%='Ph% g{"^a)0?_yt R7Qn?e>L IЍHwW f>g8oe4S*CSGP#w: (bhM<"$bhAeB˰ !,$㞢 b%!~ͳ~P_c!"{3ґ`%t[A1O2A0g"_‘-)P vO'6ܣbrI=$daY$>lzy3C=+8ӄjǐCVۄթ(#Yf5wMWy͈K4$Q,Qu1◭0&VSE!ߵЈ`w#<`leZRSs>,?$Ez\2- 6ڙ.U4dzW 1jSxh|%EEusnRQ(9lUL KCzRX GOETBӵ!]oj 3qiIkB"U,%%wUS 5%ucu:9˴Ylhs-"}rʦ<ȍPG?@īn9Ohr$oӓHuXJVԊM?rg&%J?цuEwD%=.% ΅UPʋN@QP4KŲ^Y9-1NXfՇNSaBJn$P܊M5ȄⷘQ'I) Tejsl7sUgBe+|ly `$|`GSm4]ݱ&EH ̫M^wvXxP( KtT(*9@!x-KMKhixΏ _IDSp>̩ 4܄OxzCP9bQDլYTBvx dY@0M2!=<.7m)K![`0V\$Ʌ}3= @zi۞hJ ^a7<H¾IZ) oYᲬ9wL8ߙ(Ն/~^ osn%PR\ 솵|F2^M g2ù 1~'1e[? FNyx+?!xۀ`~eU 1MV9PGy-~glf~vW" Bʬ`" A:?Յ$I}HfhW|a^7mjV) ()fTxvn[)x^-N^ĵ^|gaV0}ƋД_%ɳ+nob(7!:ҷkR#P+Gݞx+&YP41*<ͫNa(4SzBjl&frKf:yIWwnv$Y)Ϩ %t*nT2'tP !\N%eKoӤczH8t {Z84S);N&AJrp+%ro = 7JV.|Z<{ jׇm-aEAP_9*F⃬)͍!ޣ] 4CºcFȂ] d)K tk]*欅;^nN Q2~z.\ut9Zqq"cxSW7G&:9|0?"`%Y>$i^(&"Ph0_g}Z;fw1`-yb\}_vƓ|@@fSD,O gBq>ډGп?T(祸P1z}X|Tp4Bl=M7{p.p,*94\B>_wH[~_V1Q:יj'"Mּ;m{Q$~{{(uݍ)=lBU <|V 7,V@4勡E!WťԢy../2KRݡ !~K#Lu~ܙ߲Onm<> 73z#+;.Kc)$Ud- .7wKO/y 1X@9`8e\3Z#̬¹éۓ =[t^,?f~Z1x]q Aj+3&ІHٲTcOy]aS ܛJfl~/Չ@gQS8uǁ!' \(C,`N@莎_ؤ'(m Glæ/Aq z OFxQ!U.`Vc}C^:+[qm bt!4fXBI|$;<OO^~]fEkq@iGeTރKK٦]36PN=! [B;mhάµɬ8ҔK_*0  !.`SsDo q LkuQX;ctJnvSL:bei  lxcO `|nze x'3IħE˹mXZ(\kwJDLrp )JC|6LO&u8kW;I!EjdP|jچ`ݛЇua~̡"2,L-G2~_ΒX^)MsXb<&`Ǖ2(#SF f\̄h\w߳O]w(<(Jy#JGnK3[-^S$Z]:8ݻX+F3#@s=ny7uo;]2銿saw{]`bOFR{yvfk"& ~ag,}A(;C㛏zr vb)i?"W((ݛ( p1 > 'gO7=6]r)Ŝ7U8 酾<6>O\_[rd AS)ۯ%~J+̨ r@n,Rj;Fظ7L11l|=tQu #Up^2rM~f`P.U/ݭSC,a|\OߋqxFrԟXx8svV0kƥ޸RYA}V{JA8Zi2x' mZTx5*ȃ%yvp'R1)h4*+&٧p< תXtE4%f<7#Rˠ$ 6\n'p*ėxt1rL2AA/ 1:?=P@ơt9r[-Os7. shv!b?Abh&*.'jѲ_i=$)#"Ê۞]: o~2X,q#)\TdoYLt ܕ:ՠŞr3> z|T1EPAewdO43ݾRIiiOdhiq͠/iin0Ə' Uidw.DS#Q2|҆%>ϽHi >%86\yFmn WFA/tv&C2vH1mB(":}q†WBY~?v9Hq<8& hm J\Y:\h,w4eMFzTP>b,:IhU;,$N  zP^^;s'F[)lbXʻ=5iZz~J\=܃5HfSvY }\ oZ( ͢%,S<ժJ4l(:ŸHW{Rs)jXRE23%%Df-V. d%"?Lh䎎#F v pu1[R`9sP*]|UH5j.)tʻAYtܿbw` JG\m|J&ˢb͆MǴn8=@eg@ÇsC%.W5 ~N}ZvJqpݯmF (_^>ȗB'jb[쌮sqeI*gg(4[)cnWvvkre.mik|+"Oۓ|h$eÐXȢuC=;/*GfL2S+Pɠ|T`èbAO %U`rӐ1L2tk.4D.K6k΢E*2٭ Q{eVԷYtFea F3T[q Ne%|ⶵ6[ɆmG$mp9 L"߯s[OL׏ɦ`Z`Jw_YgGDzcv qaf_HnC18uWegO /JKKNiޢlKN ">iZJT/)\cC30/mK;#ua۠U2U#πa MbRO[7Z}jqjcxs$[Ux7'sȂр@y؜[H*w-N6k&4];vZ\ ɠ1TY Hkp5m{as-ruV@9+?=ݩ.kP2x";eRr:|2lq'u69Ȳ =☌ʃ{,Jphsj|f0ۊ< X6r|U(S zW}3 69tyڶQ \cywɘXBqz=tS%RZn{{G=`F[Ugh"i%R;J[ M͑|Kr$)|॥D $!`ar_4p+RIC| a[qf RK$ld5<]MQf݃NS("t1k+4Mr)rop@C Xutƌ#xp۪*8_P5O!ɭE#fg'pE*DGXwE(>=Nm|<K7D)Ь$˃pϦ#gZ7uV%/詥$yNrkv5,F!&>e|#Jh ,lo!RP֞S}x£8u|[ٺNQUSǷz} :Z ɁP>'g5SC %xv(c!J)Bt&o=:B3E 5 0= 2WOC D$7 9vlۣVd79fU&]c)vuv@$9wRy<"$D{"7.}':vSEr(ܴV@1J~Gwӫ^8]U]^7O[v}04ˮsYt4$a-8B$`tg 9ZR{bzP6EΪnFs îIj6h+Jo8 [vP!jFMG؄)ctRIߌV\o0kEH85$M  1Cٲ9b!Wu v`/aW nӇ\u 4c?%jxoAu&S & iUw{oca . t}4.&:\}cm{ی8k]Ї$gR(5ÖȞARz'@QKL9R?˗ XO k؁Qq6 6]jz#ŝ)3H<$!TKxe-4n*JESsT'OoӡijΎ6?`Hv sP\p=B-?aI#TJC/.0Z.2)::/ ͬ$EP $r[Xu~U#\Up[ b |]1aw axn:'Xd[;hX,֞q}Znv=in.1]zɟfgn8|;W\ +UnϕU[ ~iSvHA\I6-ΎM^P6yꃲYK1ż9!ig2"H6܇' C2(gji  ,"C/@$ 0:?hd([sc#'sR#D?f*4 z@]-FAyݍl'3*nTWS{KpD΁|?cKLfֺwe E:-T<FM̊t8|pY&qMMB<N CE >,E%w2q4#a|7(pf%3]HgvPMicTo5:*> +~LٝX虃xmڇw l؈e`:zų%ΓSN싂$&&mQ[*Q޿v^,(I2F~ 4zlӹ\!rs tag6I:8F]ܜPm1X셹Fksc m,<] h30tպI"oFә NǑ *m_J@5сt<ְvb1iE®]Dlѽyf1M"u8y1N0^ppΡ2;][ŌxZbHΧ[h6bveKPCvֺ_^?DQj`f#nP|#V9WUC~\9}uo8z|[ \MNfEaȨM m6b5W!q9mk_< 7\H$싌 V!zA9MmiY녽VeXbX Df^Œ__QG"m $GM9 Ă6diCj;D%a'Fh&SOD#Z*,aFϚ*ъ12EQU*CןIJ/9 "@!-:8!'wKBՌF/ 7u[67#} Υ]'?v<9in٪"y>-$n\|7jleq]F֠vhǛ99R?j *ӲU;ТC-NJG-28\6!o.GUv$KWw6Ycv_r[{k~siTJd6㇮U7lun,veM'לeAJ&H/%8Gdz|x諿Q%GȕRiCp+:>Li4oL:%vOРp-2 >(eO-1Eibd":B(tt(2f/a%:= >HW'Y zysW3_y AzOFT{b:#鹨|[p{X uw1v0 q-E3Pn] Qî2ŵf5ig rX@y*_Ks lH2s ݩs3TJ8\HGչ9Ê|^!Ԋc O{k}bND\ ]`gwEM:" ǺȤh05؀Nءt|j"`4c%2+g5'$g|R3x4T4F̣w[XP: w d'kR9!s~piR-ee`aR%+k"ckjREca ;ћ8)?ԘKoLYs@:*6[& [6)Ʀ>vxv/A-޴o[bQTA}W]i)PJb(iSK74d*նkm1QE>;ڂbBkM轗CcʊբP l߳\/Ctdx}Vɔ3 _%/BKnuo*( *hd' ]ZpiPU4|sSF$`~Ut) jKd?}m{O Y .1z+J1wo=\•H&eU;'p bc~۲[Ѳ@|V ZI)"![=H扒6W⺨oO/tB7|JҐY9mpmzgg8|hOCP<v;Y,ACTvX_a 7+QaTx*&/*Gd`bAs{+ c{P|5d;)O(|ux}e[YqƵ1O1׶NsG 6Ƿv4{_-~O!{Ȑ9pL鱱d/1Y=ɕSTlHSWDj0M~Q&D#S공lфƯvM3V(0 㪫m<:OzI"uj.5Nm"H;\MNDz_ PS~6L9B(a ;7iUÑ`rZ ҫnԂfŷK7o&?V| (SeN@yι̂aOX|zGxRqvydiX?-s/<9K]:@ѻF۪Zϳ4.YU D4/7׫i>Jˋ.0~Yw%!7_PćRb,tg$ba€䛈mJO}&fp_rBo6Fij:B54@Z?@~v GS/- R]Aw!eHUlJZHdyDÌw*!) [&ϺetBeP}'r篊uT pA( ꈰa5Uxk_x@20ykӀ(@0/I[j#nF.LS dHCФE9H vvuA %JuS PP@&Pz# <˦LA+p-rp[*Pݺ%4i‹v a{킢DL!/[c>尷QcG; 2; {а$?A~|@zr_D+)]V34w'2yC7EQ߄pSyOnA,tTxV {rAE+f.Kl-5x5װuj)5'd_]Ya.ջA 4qB{k(zvp3uqR(0$.l҅_9!^֗/P/nBbDw'rC0bا3qx{&5RсMfv?8a>(rg!2/7 _V0Mᮌ=Z0&:8nAk^#}$U/| =lnhݟJv呀h G,0 in"Fv~ wx% ^qmt0~lC6HЮmGkMƹQEE,KUM]9À;#$%l!KK%H^ar>Miv=LЃ<#Q6`e+B KQ`/ƋFD4'VSwjGwhaS_}:7cts$C~6Eq8sTP#MծŬ7Hʞט#9H#+6j̽}x(Femo^݅lŸҮ ád2w\* MpFm}72""[[mjuENe"8n ,Oۡ2[վ Za4|2pXd/˂F[T -nyi^Ym?qΠ)~b}W &ղsM"wW$w֥LJue3~Ip𾻼DӱVɣ8a21Lj5;@'mgNi-cO\ 9xײɼ Av^hS≯$`wP !6! mVxǾpDO3$TDZ:\CujyS #~ǗZp9jC&_YƌeŽg9Ҏ;{4BiU9`}ІOmtƆ:,,`G}KÜ'aW4To>!o KJX2*SA}P$oBRw(d Vz 2ޒf~6&IpTrD-V=;ExZ%#Coi On6XVfDvsef>:}=CLwf#=Bh )p2Gln&^R7,5񳙄vKyo㜞2-01Tі#TVi2z0iGK\!\m׃Ҝ pwDʖZ][ W N3lby|x4ZR`[o@ooQ+u>"s u_HQXB:wppD1JT$>6zibb`K, 7:ˏ^^秩]bX69 :22?P4l吅mިh"duSYטޑW\PQcM7 md\́d-8x4sm9]V֋mU[(,i:q'8F%~+&Ϭ욨񣗿G< nߤ> pIg8b%R͡O'7iUU.p+WB}:YzsI3͸eCCHoLJG2{>Gτftrp߼e#!@,t_! ~ a*P<zیqZg*Bh5%̴k` Ьhjq 6gsjD>>x1<Fc(xѦ~˹5냇?4/˃Ōɺ iQ4`R@94g..27FEk`KsXH_ hC E7l8}jSW: S?I7sDGJf%x\D*-$4bqVC:_,R V8N3jll++% SV>b*Bߍ^v_>5EQL(εfYi߀#pEP4X[<9R8.9p*-\X\G4ŁjUOttgڛWS2؞W?F_܀Bt`^򃐺}:ڥ?Æ ))&ۇ09V,5L)썏v61Yбj ]޾ 5~ˇ %& 3`L2?HwaK$nN 4̵NuF rۊ*Q!}VytFGB=# `afE=0NHxKƧ!3R~P]DCObVCIyՅך.ߌ(>#ҵQ.#̔`)/ۃw\iIu,IX~ J.rv u :3i1cOL3tTH,of)Xו˿k=p̛JN9ܣ PNI@Fm!\Z/Y(l}VpK"o\щ:.ZWi<~=:+ӯ##!DGfhzDV6h  >*XWJOACv+RZvWn7'Xu2?L2UR 47tՎkʙ_.Ԭ\ig !'` Wwl]R8՚r=D|*J_ܟ`J͹ зRec[u@v::—D֬n D) k ۑP{[\ >vrTGwҕ9{x~<'l 'is68PWysFR6PTpOěrD?Fʹom1(y[P0ۨ$;d9P Z3({JJp ƚ}T6a,xt ˪h >v]D,SJ6}oA@I?c}0 oRHަ\'O`Q|Z{ T aj+K+u@:|9_yO$JDyΆdWe,t,`PA" ]A `&#<,?·bO %ǘr܏GC ㊄ )go ީtyvp,MqqR{A].Gr}wI&@)k¬)R*¬+0'uldcT;bGx+=[F<$~I}{lapFOm٬$jS'jn.FM%o[8eB)M㑛ε:8RIv"gW8V?$U]([yH;1$[*!WLs/rSvߘ9cXZ) Ob@;ɸIh͔ˬ?`Q~ G>QSƜʨ 5!L|EjUTi4:{0 2!%V szKN@IiO3o)5sJB+H>랰vCkCW `xz".kP,P1TDAZi= %v GfBthąʏY/ķ֡xAlX/xU;C<ùKpYCUaC`QbfY E(;7fW8Ity]W%I͗{k*fzC6(@"l|FjVR5Ag3LPpǾhSGux#ߧѭKo?罹[Şr> nk?#ubďѥIz1棍"oXxqHr\y[CvB?j_nYD"/;Zt1HrRh9fnh^"To)Kx5j>{w5{(9G}P8J>b{c\`"AFƆ?qal3VsTdxIN2o^ݻiQȐUYLyβ9tXgb\s Isb,@J+||qj琮v9iQZ$=N-J'wR'ɍmdR$YZg;{REnAKF ]^"MO?^^mVHˤ^]3\z{}/lS3̹uLBة@5ʭ,iIBq\ǔ[Q$)pi%B?V֩}hr|F%S(']efW4Ɋ5Hpx7ȾE͐js/VH3QKNÆL8H{?w*Yh5l`F+HW4G03~K+h vES*|P#$gu\B@0 H+!6DpC< "$VToo[eE9b(籵 *(UcŔ&uR./5#`&Df6)V)_(2J. hyF;0-j=ZG qWPݖ Y3if25:u}..JH~()#]ͭ=x[g^1\IT3Q?.м;G/wFg2?!VB&ZPWe󛵛޲LK*S/i^ݡKj\"@G%>G 1mFsSu"`L<=)7L$_ѥ`1pgcS~&m#nBq=0rVa@]4 ʶ4aB-\XeF(dxLtG@a"A?)_ < XNVNұ|5pl7D.Z L2 C|8W+1D jA G#bX'P#B !@hԅc渓ʷEQ]CUM*H1H`*Qyq:*,'n[zߙCqo)0K7::5xL>b55i>2.7#c@aeZ_\D˫O]&xʂ/be u_sX};Վ{t!9NDp}Xp(J-TLͦ#ļ#lhc^ NڪUVXh.HRq%jGOCRqw]pB=P6wrt1 zX(P@yr_Pn3{\ 277ߩr/} 3*`vja5fF=0FՑפl+1lNG'Xǥ 6}qJ-eubB+Վw8#cX1A)İ0wfNH4$X-^Ibkưczi!rUu fll&4:BwCfjњHg>UKd締sǟDxGi[t/ϰ`{,e2s綪=p.Qk4~=Fc 1PSlƸ`QϠ kNތAXXWzvk׻- ns8XKu8ᆸBG! 2o&0K B1A:׾ORHq5AMff>m.F ?|>Y3n`i`Obv[XxooNoܻmf2˚$I*ň-+#HxjNyF D_~;W&Y) nAr} "෴?Ǜ.)} :)=[؃Y&@(cWT\ -֬P UavxhU*2E}3ʧoYƐB\9=@_<]]Nm1]§ɬSqF9P9:6ar8e>6OxoTΝe lбFSg{Vp9 )IjFִZh O:kcdns~, w1L%i> ^4 0]jQ@%6G2L]~Si\^bO؊#[Vge5 ɻkmBav9@z1~;YzbƆ:~/&)m4Aws U!lFHs yMh #z&.G;p ~ѲrbKhQ7k,d: ][E c! V|jb=FAvsUn页/"4ay= `vqehmC{m-6]GzũZgQ?]65cr1c2KK6BJHo3R@_k MYvtC@t h%a “[Y~A6/vEN0PsəoLu1)'Lp}BrqdSB HeS#.Mua*qAm^:i-5 r^ضx6oԃ&!)@}m{Ʉ2ꈩ)ײA2jUr!jIw8-ĬWP+5+İ>5YNe\+ %)\c^K#1ǭ閾8\} ";9l 3M(` bwD8^ÞzH^A.׎qGXx"*f@.xFA6;P^K72n 4&TӍC/"_p)ddy0ČK':zҊ]4Fg {o6kTER<7Oץ)`j9<=$,9EG:d=(Fři~GoCl4K&"ee571S] |'(䷺00Ubx=Dzz%siQjEHl}uwUy]lZٗK6O!g;7퉓rr+3žRHxdp˩eV=7Zny$i_uUp p"{6XuAX/Et4Zf7CeGU Nk^`̡3Y0Iq1e~''H&c'Jx,lh&,8%͟;);۔(rӿ]v\:<^Hm4 C:][ rddR`Nv cg9n8W'&&_DqLE `%x̱fu@cLT4d&# 4Ņ hI:IG>92'ܔ‰xP; Dfo3C)z?OaD9M'n*xV!<1WIݮc=gk ;O8S#U2Tv(>6|1H43a3p "D& 0y}),֣1-R3FKyȵVr'.5+o5Xn6jRe^i-P >W(}#vQ >1~7M$~" t #Jb(>7!Ȇ7 w1>vqBߧ @KMTX3QfiN7tVލ)wTf1jelk6b˕M֚Ŏ6,w&JDU/z3m~ST\ӦKl]) 'ԴH{ӧ^5h!;EANGkԂ@-2Imc0|&CnNqfTL i (#<JX\ o䁐nH]A^j&] Jĵ#{0λ4Zbdr\tFz)pIƂʠv{j@ten5v dvN4M=naZY{uۃ!d*u73) [;yL^^Bbj7-c9df=skO= 5:3Y}A՝%hm hX UQ8.ޑaڤ(NԺAt,K݄KOZ'Tz`i=;-F2)J.s ?moI+ߒͿE-^HE109K͚O΄f֕k Ɏ"]Y&Y++OO!|b@Ÿ(UfsQ pt$C/ϋ--4[P/ӽ5,vOt Xs)ywcT8 PϾNgovC"tzmf-+, n] nm &V!.CUl~^'Y˘:T 8I_E/G;Qlbn;(DN"%Ri O5W`G4'~D*}Jo/A|,4_ERG6C”;Xy0d|[jW~QIE~!f>m5 GG DgOqQ@ tANs}`VQD&lHȮW'͔|gyyd]1@7B=# zT[)4Utvc)a|M?9 +-S^t(Cumןnyfݤ ׏6awN}6j;l3ꥑ9 Zmw߅bt v9q^WRz6 J -zz10JsyLf(O"sQ+ޕi+H]nE4ȓ!7D 3df]<$nQ2Y+cCdL\OmtYC`$ a9T-򍙠+eǕƸ+pVĖ{;qg %W#wVdˈȚQre6mcpF:e4)"ȘM5(L:v޵7@x2=yDLnBKBxUɬoi@YScpƏ ٔϷ7 sHB4Dz+l}rNId$'=͂0VPNA$ L_sq (e F4MqTC$:[_Lk㍯ܱnfkxt4= E Dvpi ɏ=TOHm@g/jŪ!zʣggQjr{r#dYpg6o+|nEѥ_T[Ǝ&Q(tEJٗouQ<#jhCa^[H9}=Kc~<c$ ΀T%OEVdUiҾ5A:>O.2±S_ Xtۤ;^jMIGy~~`OROLh2[9>G JӌKieay{8d"ed=p FV}H~1I+6F=+'M6DIpdR*G>O "%ZI Fg]}#jx \*ȵ]KyGvlg7T%z%D0bb ɬ"CBL1`C[˝(y a X)Z Fe(Lל9^Tûə K_ߴA#]>in6 z!FdX!/\mUtWoxvy.-VKQ|B+d-44::_⾂j]$ qYId^]Ae  5Q} ePHB{֏F7oлKU}hefP!Vj61gIPJ>W';QM&󪭑:Yzg;|(u$*w\^䂢=8ڪլEIIV6o3 U5q`u6'T Qm]9:|*IhoS\s3,o/Q8&0hDg2F^67oU=5.sPQ)ix A4\zYu DɶإI ̀G3GP9`?8AÒyw6v`JRl-u3ȫGMRiқMzya䇈Mh=&0 XbMM 'vB_M箁21VV~~}z(qMD^.. U9gHj]4G X88 JOZәR.BML}Qk91n^wܘZݵGQ랳us{!|EBmB| 0V6 )ʈ'jC; MY˒ +$\祧 3XPPxw.-'nPօ0w!T➩5h#v?pzAIri&;sZdA[N򲕂#V*Zq^cRqXP9]8-_:jΥ JC)+&0HcL0䌇j\-EsAl0 PERޚO-cZix8?乙-7wאl( JSi5m)` ( .6Bl:NlNW:CRr[*kohp1Q҄e+x]f&eTgvq_0eΟ ~Fɋ%>[}$m8::$7&(= ۩ BqK`H<5qmV9Y1t\oi+U0V:cXėa7pWkqЁw.Q#[6fTW'[Ɍ]IUO-=[rƁ/(8RG`pn[@'5@InSܛϷ?k]i4j ܉-5Ho-Q0v]!M8Ikޒ $t*+Wa977cEYzryUnՑyXYQS78[J.$~,)A8vAqI"+ڪs3+ 鯺5H'R[˹ k֭Lgyg7ady"(QhUg _ L] (b= ,y"+t֘f dU2|wyS5·?N_nM-#ٽgaAV(;f&K%^OdXJT_zL \ w4eXƸwt5gaF?p.ʑ2֥(rsc}wpU3" 9K)jd0~& ΈV2"mjpOy0YSbU[#?(vz]t#Qyż5HK8P1ڪ)[@ԙn$Ҳg91k#EIOE)T{"ǩոi'(, 9bw-Ond.^ Yiɂ [G*PAe#)ձG{gy /YnqƊRA"w*ΥĴ32ZP%0[Pa|ʙn>|%QP[{_?A}QXb=,vb<;&mD8\+0]?D Qo2n{mN.SȽ{UմR#2JEVJ.qra^@$ʳ}S)B} 1_VF"D ‰r&/kq%P$f:+ q%9큧`VV=j+CI)w 5<|O@ Myӹ9^ #|/CӘ3"RwzX&,gs˭H2|guwjsNo[o>yM>%5Jx:%a[mJ47m %ZgX B¶>ZNEhQ*@"^؝G߂R4-4r·-Sp5kZ :'vUrY]=tG}BK&iYnЁ$g1_R6?)J ;Ҝ{RAE3!vvn Y% y5a,m;Oly|5Քy-U;ľꕎ-ךx2@bޢ8\';Ƽ̰뿜+0" ObpZ6GXfӘ]e!ldRՐ2xKQW:sENxnKroۜ pXR?cbp2Nn!]rd&J`p$y.'穲 &s!tpfa]_5 @R?r a;Bed5̿=pJF&buFzO)>-K#V,IݙHa=Th'qtF4%1QJgdU"F+B J}c[͓X+Z1 %n|n%SY'M S@Iʐ7 OH&g*l(ʧcf .\;6C"|3|%¥ Z3.=Nx{¬z8W+Q2qi';~_ vC973 θ?YY^LҲC[]:?Hޔ깊 4k!p-Dg^9y>XTu4olO)ɝ90#[4`N;8 ϶];3ξK122Yۧ(Iʺ+t܃ oиi7_GZ Qg|}'%mx)U I̦Pr =>$r3 ïz$Q|Rp=Cz*hbkf&D/h|6 gz;!:~[n(RxEߏM[)NyR^GjDC_>}Ӫ@ b)g_缈y;R\ܪY#!u x*)#Դ7~GY5g r} gK3:> 異A@q+)ayNQQVՌ?kY€j߷ &أKk `*N^(cQתWx4I3ecl#!]OLJR9MR:0!ʎbLAz هp)j^Umva2#]07SwFTmH`S=ϪEx1P_JcFuU6`+ <Wc$ ;E;$tf;_뢶J6Fv-Yx ҈ߘneSnMB~ja;8i ?K͛m ǖXdijQl4n~or YԢ?Bx45gNl{S,AE;T:zMb-:sp"$eBuDz̢nbX>mAρ&|x*9Ê QBqYVL UiHx%F&E5~[Y -oSρ~9~ GwEaJTR@L;RGCGtӶ7"R?pV qJ4V넒Uj~x:oq6u/PhcuK9gh;7gGZ|rHoU ^-.u3A "X"iAnL$۫9Cҩ`%$4i[в(6858]TM#ܝr{(@Vm"S+JTuHs+B#-Axk ]l6\z0S/8k* p Q.Z{j❇}𻪄-1 nrHApSFqۋ-29o +K۩tVA43ByQx(Z D^ # d*Xi7;ҎCVC&GxKrVo uyư̥`ظ,.7}Zkn!N@ܬӎ2$yN;%n~~*'J4*(Wک.VsJtYdf}Q-Gr&KwAYQfm2Qׁ>|2e*_6 (h(c]|6<a ]wOg@jJ{4GO(\;&:yN=OCk?_tGŭ{{YJn EWæ?;HOSӶ ƌ4s&˓%[oW鱺ixj\ ":mM؇>\Sa.o&ʚ9'PYAx&v1Z$|/wN9KB*k4=-Et5LJw7s Nq"p, I3-$BPS?@uv\Ūm~YS|͉] QVÄp]6H1CyG\?+,3l%Å1H ld~Vs2P-ju`? P{ %\G3V˹ʎ& hh 3# 7(^tIBqho|W58r9°!Bļ&!IRSg @\wXF=}ueC3abaa4䊵 J7@C /"k$ʜrZG3KunVYR p_d=ۛG eF-bzZ[t[Tc!lOc=:/% azK<ؔ{TE7l޺Zou`wr]Ģ! FN@9ۨ23&4! 550`ɾLlEMUޅMPO#8KMV$L} H9|uHH:i:<,z[' ^k@8wgpEnWu̪_zםшd}EFZI ]V5?*Y@zRX1?Q1ۄHEyfM%mSxS)U!&.57zUEdNh0+ۉVMJ)Bbؕi?!ɥiփ0Ջb l>|lVBYN2:Z8)Pߔ(qȒZ9Ű9+\i$r|FlLlJ QÄV:*hଡ଼Йzlyg<0uukyD9 $\׀EE1x{؆滣([܈۳N36㱘7K.5zW!/ y̯;Ȋ?rd_$<~B}]@tĀ wu|:bV@xAhP\{G!M46PDs4qB& c؂)ZR],̝1ڮyi=݄)/ *#Q&sVd#ۗ"*{6^C8(CoGcуCa.)RO_c}1aqeVO,[p {:ӻl\9uCم;ZT&\I'sP0DM)j4,$DB;R(8oDxz^-dsqx1C% *}C"1h%l`8P7RݡVɉr[OF2mEaT뜁w[)u5UFCpLd@(KVyfBJΝ<9!x5LК=.mm^ UOnA#>[~"֯rN\RT7aִTvBm ө@FxΖ4\8%fo-!?| |>lV:f3ݞ_|սg _.u9w:Avg̱;P<+  Kqi $E<`;4V΂uʸ9Sټ:q2:դ>ZkJK";[nW Qv zm'fOX~=?#ulAY$\ # 豧H@=&WC|'nz@(dR; @pcQStVbT&{qH<޲NvSf-N EE![x́+}'6P'ɿKΐ2 h-]5@̦<ҮJ3:C)t ~kM@{|\9є6 *[ѤK<%'N' X;eֈOֶhe[VBQ j>8ߐoqUңn6gdL 4-*JyBs.|j[y=DdXNn÷U!iD9ԐVRpGّ0}[鲧l@P!o\%[R[|dw'6Fѡ,$*8hsW^o@DlM4q}8hc\趆S~smǓ$vx،HYMP&Blٯhg0R(;e-(!U=ڑ$^%8j[.; 21ClLnVIˤ.qi)#0Ld5ʀ0y?!?}64{`∞B^ޟ>]̂ Ga0}wQP8&]M^kDZx‘R^UFߑFɳQF etSsn:cUkKIƈK6Q \ęъH܍ _磄=힜ۭon1ڸOk/[`!5]%^`4Яfw]iFzfkUZ72T-!MHO-5V6=m 9& ڟqKY.as l96깳~+Xϙ=P4lM(-JN H}ŸC?pNH;8g2O3o3_VT{u [\dG˱V'/s6,l|C!7ܜe2:Ϲ+~G/M5? 421'ڭ2`_h $[eŸgy36 TJ6cYo-F|h[ .g(A]zygSu]ְp |mTل]1C!p3?3m  6?0J[͹su q2-0Xω&!UXh؟Cx Ge@_L6;=k2b_-Wmm DMT9ml푢&JͿJ˜LF/> v |BPXK8-+ ĪR 8jZ1OQPp|δ6kb 5dCc:8AC|^WF?z `l걪s.*GBMZpB D٘H4!|(S2NR\SpqYT|YGܾ H|k4"T,x VP!cu]9T*7-܅n=qpߓ5#ɼ,]= !!>Xr+HTe1tu-%ńѬQíWG{$YHTzIGc D)k}(--BeŗrY:/^S~aB wAT8hY#ֆ0 O!sYwP8wg[E.Ă ѽShu&(_]DSE9vy1(Z1o(b?2"2r,Eqflz&18Ϧl)VAi cِę֍( G|X32 eoݛ6 Kri 9OY?]cmW-;H3wAӈKYud8֔R~4$fFͫ>@yG)0n>GlqxD4)?P!h,qe q>l3Qyk1_ %1l|iykj0/ jD?C5 媑+,=$7G7K\quWsm#fۋU-fgk%\0Y"K$@\P{-/Z1\;%eBRS-6HINF<~6IkYx?чanuH#׆y/lDY#~)|0R KDzDɫʓ/N`qtZS\!)_"$i9{"?5fIfNUXin5CZO<^lܒYiQTyW` 6f|?3CdzG ȊdYMܷi?v٘AM:hhWs BԍC ]'*>}ζEm@~l$;ђ7)? 47ږ?^^Iko>@z+QPFs-ܐ膋,=$xQ%?1A;bɷ>1V0OQiYN0sh.#|Jo})T,J2Lf^ch&?牄nQfWUa-.j=dHN>QBab۲Y?MafV>9yu=>-N e<[MHDՆlP {U6/[4b+G0K("P_'6޳}Vxc&*9#7kr'j: ~p#DomւPWui2H58'}eՋZr~Z!bUDXZAWFR/2|%c'ZҰUL fxG&ZQ͑ȉ-J0oWԔb-"(sܾAtum#߱yR-7gK{e,-rTmz]ktz6xXP4%{M @6nEL00'wŭ?9tcnGD{>/ۏSr(_/EǸ4$Ese^>vU_ 2-]M{7[(?߇Ъȿ9J$p,/t DoJ@"%@}g\TW5J0;^ff qmo{deq gྴ @26B}MtC+jBĘT1D%jH~FCm ǸI7DLrjyD D}HW ղG$HO=qyȗ8om}4"&ub:yP`<=[Z-ҹ򟁆.b5qapYtb6{ܵ)qeEjl/S۹%5e.F>o4cU#^NC A`D+ on-*JG FmY/,v"7-,<:Yr[ECkcO3ۆd>^rxH >Rn~um-}­1+EcYݤeuBPnUcmQ1};I/]8 =2ߐG Pi:.?Q/Y!fPphQ<"{&>U$灲XXܚ9"#q X<=\ a8BN숀/ΥO[{%XP·Fa0OA{ H*<?u_@g8ƒo;qT-!E+iK=Y^A\.}/M)LЁ >?˖o NtW'PE;Cg5y6谷Nf䘷 D7ڇT#¿ AUnY?3%"?홅;(_=1n@"93ᑂZ}`rM@U9& ;}<Մw\B=,nS Τ, .ƻ2NΉ}->[Po'72bu[൮Zh.fkv *~.?N!<g7.X^|kb/f(~uQE%܃$d4t'^:UYw;G /"h$ݛv[%'{?-m_J%eXt ,VlN0ѷ2mׯ6O$sb&k~Mb$~$7eA{o>BFgMy`Q^Tێ"~Cq ƞ@BQ l%;3:Sϯe|6Hw4-T'Es'UN `­Pm'Ϸh1w:EB~}<@eQG`Yq7(kN,%YIM/3r8߯l;",l󟵏z.% 50z ,*HR@밈IǏ z$rW~8oӊ78-c!ھ^t?&an[Fݢ0j᚝-Ojp"M?, No˩ͥwXg" /) V7mcFegFh0$+p4O)W~ (?P\KֿhVZfbl4&j-*h6VNFqa/3Md@wP1Y2ZkC^90*ҋr˘K#yĞx_4c uH )nf/%WKC vbWM[ s>V# Ap؝YBGAB5x^ڎ+C4:x+(\H5;+ńnN,;CgC)004/+cV=r؁FVcb6Xƅ+(sP'LaJVx<8,e#jkѭ鿰ո{s]Hxϭu ЙT̆ikf*eȩw;v.m4.-gDy;T,f0/E$Wys'Vh" 'x,Eu:Vv'*XvÏy2=ؾuv8pKk54䷋ӏђ݌9D>tO~N~I kE 76h.xO7!;LlA5+KT6syw X.zVEvI{,P1S[Jo`=*ڋpC2ZT1%/F-4`#]~ C/-\Dc3Dd#B~\d fB۷߄˽9s4!Oa9_ "=xy|􄷣(ā&͆`:\ \T<(E<7((.&y7cZ͝Tz2&5l!$﹑)*&# Y;dޫ 2쭍TU"/y?ъ4E5٬qZ!izQ7<[KEKøY*|FY+^{``WX9iBD#db!⤂#L%* FQݕW !z%5wL5s -ڄ\d9ԃq+ygפZb.9rxը}%U,xhlW@oβy[_^4ZyTЩ`r9:{J )Zv:sn|&B ȫ#8q\YGg'do}k1bh BLŴ^P']Tx}rGT-ƘblQF))# n}IoX'j֖@wgG8+WЭCpj5"qm XHmFzܜ|VpOGT Q e e >tzgx;Fm=L遭0$ĖjkwPx#}gjD&܅~T7z]RmB/V*n]|T9ؒ ,C;N:@T8 IJuD#f2,͸4 GkFM>t~JF4Lxz  I708}IP$C)Sب[Z,G o\_J$ZA &%#+NW s]r(% kcA8՞S[~_nD]^ EZ(\ 1tU/C?%u)EՃ$-9FvSd8W$MjkQzivPY*<6J=o命̹eAK͋žY mT5p.5DQ.Aq E|rZdPs+o D5GS:H^}K"|KFF`ukuɘss*JxМO6 8ɻfd|J@[a||5&_vA[fpAµbNH{Zf@Q͖!B\.F?ٌߵmvyvb1n ֖@c%_`=?qi2z,{ھ] />Q lUٷ"/m-u+AOnu4 c☐cP{;gAqA_|F*FTfM嚊dvAEL3_UW8 h3'>{&c c`^ 3lҞ?W͵;5a-JB(]l/r`DUTp|h_3>ZdQNg9WVr9rKqjo_i}{ʬQq ?cY`J_~"kreۼ [@>MO8Nmfgr$Qqޚ&8JA\|"m|%YTa[Z/N#L,|շ G5{=Rd1kb} Ќ i5ص4"bWq-j(}duDή"<ʤ"Ggw+sM*Xeew | BY>RhZN̎M?vfVq͂nF*\~@fl[ŧBh9Lsqlg^DDJkRfxI&oȽ>^ ,dOPZB?bC'MYt܎,DR!=*?IdQJ8]. (w/.TD!nLŚՋcAMTmvͧ-5,}mSw0}zu&Wʯ5UH^JI~YguF Bfv){DQ/dAZMTP 1_Jvײn>_׋ٓ]J*vKyltPS޵v58ObFiz IsI Y:'^:0\|I%D2 qfj_Q6&bjkEM򘃨TKEbؔ7z oк.ArqW3[uve,F`KhvRPd\@F$=qQۼ (8\P;%0'͸L`M+i2l?& 1oČӹ7ͧDf鏞Lp7f("EdyQăg"9e٨9whiHln@_l>22]Y^i=EVG{% ?MҼ$%Җk'%F͚ !8[j d-4dҼ+'Bp׊?ǣ Z/\b-ۺBR~xO L }w1Rn(L g#<[ b t*<|Znn5XݦCfhAjeҗl)w*WS0VM6Goukhj VQY"晭;Bw - ݟu9"Q+` lCKͰ jy|PE0t4! /,\rg7,0'Zb _f8(]Dqj+,]РСW$#ۡuU>6:ӃHPW!lsش>t!(=bxtMF ȧrt&}WJ֞$X-(m >o^9}7؏D1H?d*yNx>jړ3gj p}UE;D\HIҮ/XpӷbR`b~W>* -5#W'y%"s4ht_,P*LXqD%M'sRTJle7:{GyHb{G,{r؀_tV"Nʺ bV/!\􇊴#[R?<$%Zڶ~}ҋVjw۴bK1*^5^ M/(.gÁ>8gOnk˗ fKYpڕ&Ruh$%Bjxk3vmsBÕNI/z&8 \PIb7BV߰;vDY37O!:\ K/Y!ͼUߡ3&vQ[yg+=+Pʐ\(WFHeW4/;uQH-c5zQ;r%f*4!ͥTva6/D+\dGPISDCȠn* eulw#@(1_? ^B |øC; wdl49G[Ւ 9~}g-#Ni8u⼍>,}MևRe,[^444k܂Hwxs;#Lff$;} OEC [V@QNk2^BqrzG_@f-O#u}O${c:(5NFKfҦ?`Y @<˩yK]^(*xXڊY9ӕ:M<.,K9ʸLP*z'#!7LR~&u srT"8}אhGB3K kdIj8Q&ak.T[JmŵaK*sKą0p,/FJbWpZЦ׾ ˁ,5 ހ(wFIjd7َCեRkkwj #x3IҠf!}GCԹ:beG`pW]שTzq f|OEL=nL7Ą<{MzF\6'øl`^ySCv ޅ}xH]G.Įv?gQHRl.7Ƶ7Ҥ, Ü'ѨLiP?|">zqSiUk6)<Q 3&=\@k,KA= Y;f%W{;)Yܭ"N c,,lÝy"֣30 qAZH5uUj;7 ` Q+b¢MpSw%zj]}(^<r%U |MU)=X"94N>~" hW{&a|]0. 4m6:&l -:VceA<(d5>/45{h?9a+dz JnV>jjVVĤo07MUclN9S?I*nlZU@Ӫa-mm0|'v-Mp:H[8(:%6Q;P72ªP1ٕƸO: C`F*Iho:؄ax 'G&t f=n_'OͰ<>U}8.|69u:c9qh߭!p;sW'&ՍKĿj_rlZbkx4񡉿Dű]U}g?I޽Oo4j1`oh?s;A$x[[mfHƹ^&)OE$c^0!^a9c3,ߓ *#5my&,3F湲Uj80/8f43dp+lWvɖ jm/<9abZP:M2_9OZ E];Ss!*aMiX%Md27o$ 5T|7P eld mVV~ﾻZVBOay`-=xA}54dC>VwRvE݅ǁE } _Q-zft̙jHiF%fuN;[ oTSa+VtG#JQ`/Jt]Mkc)yFw >ڎ2z$0Ny*{m":Ϟ abMYM!fف>:Sǟ% Ġ R;p{acǩ5A.B]wQOV0 4aYnjL:>dh Ȁ% k_ n+ϻ 5Rs.F0G/-dH8Z.h#ɉ^ s N IʤPi^%E6-N k`#*HN|{4ܐX0f vW70t"^krNY1.JjX G^xP9:]&p2NK. x9!(c VOlPflʉf=B? J\hE̎ ]7ק9[Mis@ZDwgVQG-RcY4Bip1~XCPW,yhbgsMư^5p)Ϻ®oFJ8(t4z^JgnWKnA?=_Rh:"Mnj;jltT֣ٛH|`wGJI:(,,ԭfE)qKC=ALeTRN1glj H6˙4"Y'#%DtNUB|GHؿ8ջ :w؆[/ADqnDS ͽ6H ]?g87 5`i;e2 1|`ϓ<[n^5aQ}F4Ke0'wn*9T 5B-єBCy+PzL$bU˱lY Ȋg`JR7AF G@P7σZ~ƟBۿw =FM"g+1.QS2]FoƋ ;%6)&5ň @+5SRnqmt/~lbt&C$=6k%F47h0}u|3%ک/ O(NH67V[䃟du齣[FQ~Hݮuw*B\'.6RfJ]qv̤uCf (HKxOh uf>)07c\+1g!鿇׈O'VBB>4\Ja?OWtHTa^LU"6h  _t$q_ O[v׮g{k.F /ITiUuċh~&o*6ה"n2(Y<6( ,稹!Pc~8 @i"ONRG(bB'0&ś\}*ʢbi&W${&%ۅ3 Rz*X=z "x!MB6=DL>C_GA흁7 v&$]gEfl8s m;tL Cθ4fބ"Y*ߞ2lUHĄCzE:Nliy*t{F)RWDt{X,>=YQW?;Fd"﵃0]~2|*#i`mKQG8*mu k2Z {<KTڽ ޛ#HFweVV=*g-\eF%3"|xaC:;.yq1/վköXAaqN`]盅\(x&Z3g1Cr&ܠaPՊzGe`{Tr<+ xGcJ:~ԥtE|kSv≠rpD٘28 lmbYN JZ6\~ڎ35ޒ$5!1 A⽆^r&p>D.kƆ:z :yamcAKUAm͵Мڢ(!f .g@<0Vd<+_(_7dX2؝efkf\<#2iҀ )ku&EU,86&sngojrצ4iu ?M'ap!Ms݃o#pR[.6ԧZ }P{BܟvM$PQI08}zîZ(S'fLԽm"8u+^{[$xpUvI'B/`-C>΋p8>@ݮ}Zג,S>qS xfظէ|ן>\G] ]-x:m(I H9 WD2tcW:M3̾_RDe:A⧂2w8XRmB6* >gЬ9V6?Gؤxg7JF).| HzqQ&Ή*8T6.fWZ/>Ɉ>5OKBS(wS>%99- Ϥv|ɪBڐ3P18l=m{B^I4ߛ5b 8wxf|IcEHlP8C2M>j.{jLRvTkl2t}jb~⣠wJRq^&NDGz0 K.oSU$dAG!m-Xd=E8@-LLE^o bU12H U8l% =5zC_뼩vcz 뗐d-P@x4e ڷΓ YR5YWr{"vz&o v=YTSum H=?(+@ vZGܓ"~ɶ2q'QÙ* <|AsR+ q*@ rUG'?!UŖ 8h !8ץbnm'ᦥ?UC˪o [ubm0)fcE"w<:4)d#FA.rIVGyPdª ]n/=~[D7:[Oe&9-|}+HJ?5A70(6nܩLvZ}cDRaT!%h{5> ! WI棐SF6RuoЧR%;o:dLoz^"B`@mJhŊӢXO!u s'da\d–hO_2ñW44CzmY,s-K$ZVH<~l!T/8Աɵslvp=k,8֊ ֜ҡ%Y6ddEʁcۖV%r?,3 s=]v6e.Tya=,J;bdyywMNH'K>h鯴"qv7+5/tv oJL"Z0Z1YOzghvS+-KȞPP)Q[je'E@SqҐj -4WQ*r 5Kn7!h{|id˨d{P[ɟHxaڍx\+i5W7oyAmdHJ)vg l%͞_1$$uKR)y&[c-ɓth>_Жk?q.l?1nHTQ6|R ".D5=y_`rY99r~laCWñgT G=cm-? "~C+.˼d|B,Y'T7iD34XU؞v ,`TuT.+2̽l(w6Wo4(T?`FnfZ-w>@fxmORlas:5 '/OL!hTvO7mL8&,hޙ>ˀi٭B.U6'"$ˀ|C_ K+SX%ww ĝ }0Bg)j $*S9xA 㛃"c:vu,tyDNF#ZݝOA$uPyė4t4A/V(}L:`i`/%t-5}^BP髐^fTry|h1K&AUKԦ&qUY@H=/$f@i\A e!Ң -b'9GOpkU4Ao8l8{@ Hk@MYe fF^@&;5 4?٦F_u}Q:œJtAJ[xD|fJ%oM'k6i9k{ Gv7t|0h!M@eg")#gN7& gXZ7+&<(T"HiV J؋{[+@&ĂEQitR9yg(Ms+}:>nZe)4,zk؆k%fSG*BH%8?~x?U ); Pkd鈞J o񾂦` >o g}YSUcxpN8vGje h^ҒGH rԈ >Hc2]{瘴/1zSzP/eֈ$Y¹QO4)ѧAHSE_3F;V0Y,,z0K@;ثBMW?HJ shn.7p'_3<9}H*{ꘖd4HL?pOyFt% vwQS>b- d x#>>+ݤ)iMn8*Z<^dq2-8> )p2^c7@EFB&,#Aޔ'\»5e]pCBFfTWѶg1D n Y=,|QĮ(ZJDC}UxW 9}FhY|a1W06Y[j-tnUd KXVs?#S#l\+e2p\73B]|IXI?7oIH,3zNi!O%%!#N|{VOC_H 䞋owj.gG?gk2r>x']~Ab6?F DbN6@' dah%>>h̳g[y/~\L7> '"E&-'Gn( RG9cӐq"r/ʭntfb|?Bm<3`Us|  >pFE0P:5Ia`bEJ͜u!uSD0>z @i!b^b1e5~ K;M|K͐~5w^=<ڷ7 +:"ˍP9otRem6 :&0JLSʀ0*haE@Skpۡ\AeB/0UӅ%"ж'Qs#A>ZJx(fs~l5E7͸sj o,­GVNq 㬭peҿ4Z!OKr*"D R!16$W +:9O6ok_}QZu)ps=?_ "//Dn(!~)/%:v)aMlAu! >gAϳg +E/35N S+D6;WpRcg4>''K- Cь<ݟ}.p`';uz 0&K#8 +#'&O`/n,zn˺AYj [WhlC^4+luKZ ҲB nA)aB/9 L,# IDcVյ D3f*p9샥( 4p²i H!}T0' z1Vh4O/;r3<9)loh򎨵Hx ZNb\ahODÈO ;k8 =; CCϊ5[q{K(ϮhRO䗭D6r[@د^ӡ0!EN<ofTd$nbL~it!Yku/j.~EV꼹QquXU#KNK,.{T=֡SoDppNMLai6ΖwzDTڟO7R4 ~H_a _~ţ2K-Y/UiԧdOEó¼K@%*Cp[]AfM%>kmJKnJpGG2,?WMhA\笔sPN2}Hl1v,,[J}<#դejzz9r &YMmu/ḽX~%ʧ$"Om8xdӫ/0/ ziE} rnpy%8.TAN3:DlB>6<|94{v`<UL 5=F/A hm#OUT,'%䧬E֬:~0j8M|>۲{P._֯PfEj穢ig,N_#v2X2 ߻ t xE"Z8wV}El_0;k) @3 IX=8kޕ@WcQ/B^nв$LdR_/G- /yEj"jPe!q UahE cp7XY#*237 %D&su*5bxf:u^3A"Jn*!IuÍtDҌ^F%][87aO-׵xL]V$ƯTMH=9e}K"Pyӎݺ,"xKH5rؽ6v׬h3b*e} SLqG2E3I>Jޅ]×{1`#>Yr9# e|C}hY9 1*4ɚcY0r6wM)(Fm{V^ՙ7_;WS\4jrqQb%J/<6R-.]Â-,{!a7bݍS!2W~豿cd260'?rkP<~T,_pX|jv*l/iSd?C 1WyY3Fw>[4~ݮR(&挸ov>ITz 3Amۑ\(ƪ=86g3\x*5=OMwXyLm4ؑlp.]ZvoxW+ )%ܜ?s@Uh);eQ (lArO,BWq^/ȭ~=▘\@g'LheM;*6hGl:x# C*ghDlH =.CRt!@ZDɶ^ZvO#K*tM5MXtvẘ}ЉFr9lEE\/4ǵ ",H:]l׋iXkO+ɷ ju04R_ +_ ahN ?=A3b kE&Cj'&h8_Hl!W8$-@ִI$?uuX9uj,۠" }1Нz7oo \ÛC-;Wc7xvGuܑޘf }1Q}K}wvu!HԕJOC+t4bep XV<{JvU3'N|yPw(I91t|L{W8`׫=_w!)~(]R N`OɃ:5);LhI,YO˥%bZnܢ (?W`j犲.gڦt{^]Oע?v똸-,ĥyݺH16?ÞMToIM|ų\㹾:6-5v+jnu%etp_ZQЭå1l{DJl(^S\]!.Q)uՇ>^: {5GuLShr*E65hZa4:UqHo|Y򐣖u6Dݶ_c]$vs42{{@D!ա_D\{"d*g۳).9~y"Pbz)`f_o¼'MG%Nt ~eWgP/+H,ɛ.)v8RW [i,6bVrqy!ZѪC k/̧JN9('9J:PYأʸE*me tn]=-E\5-60$J~1k"`6T}h$:&Y;H%}Y:]k[WaR};ר}ׂV*i|y2>F ]@N8m s?ɐe2cw/|l֏om.k-qT3e+2&YXaOSàb{4 T<8R,齰Rbe$fJlȊ_3NDNFe8ך f)rXdBѤArY:JEFڑ" DKEGG4.]r@J~BNX،SUr=P `b>'9W.\.8c# 2SшdfX^Ԡڰ-)*Z,V82i` zlv|)F܊6,~rF 6J=k(zITNiCLTZۭ0-MĂ5G;|jVx(n>>95_9|sPᶌɑ SNO R89ż=&m9ؒS+ޝ+~~IY2٩c\` &),KXb)-N1N UzuɖM7Z*6"ͪ5VCV3)Yw:H}xW \ţ}]D%ET?T̺scy~|cgVt/y2y!{)䴼]||/z}燪'vH\kN[j+xe(}qJ!UJ"ECh_g*)+rɞ3gnVǻx(I[&q;x|"*W-]} )2n1ۦ~'cB%kWIé N0( {jx[CAomX&}Ae a#M@3M[j3 o^&' 7$y,I/E}>}4]ҋ`V(^n6K5h~ +XYN7a}ؙ, 53wQ̰Uz®o'rR|[،?8cɈUJJ j//[BN- _+P"R-x0D^3*v:6l< r+>hHʹzG Z%q$nar´^Gif ?tRA/a:$ j +.mx@Ũ``?' B@zU$ysև2a (ׁUSWfn- QڎmiEeJ}ƠCvՅ]Vd3*_f#tƱٻx0 R_KD=sjb"=fYw)v%N\BDLѨ Y#O:-4[w^0]Gvj@ݮs&! u 14TSsP!&gI}cj -sNIײS}f30G-6q@:e9Y>%G|B~- }5\a$֊+ɷK1 lD( o-՞?XzDt>Fzҍ/ߥW_v|ɱh<@&H%W_'Y7s`?dؽj5+=P~fũ;yA$yd6&9c=uV̝ ց0^bvfAdv6B ȍwVoJ$Xж7˟=O#Vyǟ;b9j M fm`\.GMɧX,nAݽgfG?m,Xi  {1]W1!+: 1dX:_yElD k:J V'}'"|$H9F5\b½UdZ^t ;#D%vU#@-*2|MDDX+WN~DI|jr>.Gj)IEo\Pl`Pd\[d ܽ/e"]S,D[ Yq;ӌRB STDVE:8. _ %?@A,oFE ޒ ;=} Ȅ7j8Ifi,H;",ܦ,!$SM [S瑙Wx7F.9CDZՔ).M1qt`UU _2"HJaX uhHS H9IV+\%jQk@}\$h)0l9A] 2N#J.1m?NG :k} 3÷֪"$7ɱVZepU2Li sZ7 hkEX.ʮ8hb+D Q^%X!@exfjuJDPjDmkz0!ӀZl#A)hu{% x1QG 3m2Wt}2]F2%!I O]B@Mq]p<=AT8PJ~p 1e? 1 CC]cDޥB3 PH6ni2֯# /y%<-=E& r6tyDL-l.q3c;J:!c_Q 2Xiˑ߭N7zΪ0[ }txyZN{ON q6)gC; AxpKⓇRnHY ;I}++ Fe) ?="R tC@ۄZQH_Mahu3gw2<@Iۼ=&zఈ_8Q[$*=OAD%㌠PP*92~UsjӃ@}at,ād&^$KEQŠ7c+Uu[]B{r`ʬf- {$F4[3z͋ABH#TG=9*^َw6td2q1`Zfr@bͼ*[VÌnb&Ƿ)c~ {W|jSfBO{a64-:XdO?hGE]gTǣ ٟ(y P`gU j3dǵ]T۞6b UK[153{DAgk#;Tд{)AHI:-J2 2d?ubCd IC4GDx>A C"wbX2ev[ Ʌф0P4rT[pYgB r9.R=zf,E&[׺"8LJ?[<8A ȑOuDaQ3)ZA_%8E Ahoܾ0Vt3,'tc+qw䑋^&q++jZ}{Й~.+ d|n}mMecdPcwrB2=l '= :ɋx*3Y"Hb*J:џ[R 漑!/]аa]S\ModXyOղBZwG85 '~BzfO\ kW˙ Lʹ3XQbZ<>w% RҦUڃ!C@a[?X:d`4T._vwZQ5ou$.'6M(;_%nIY&{&Y!4_麃tK=P%P8|aI n ڟah,a^u$|=ywd%#RJ'G, C #H}p-ii9i1'|xb *G򧛥Ԥ3HP`>L:! e@B _`w*҉0wpD%*I9n5I緙#+'OCA)"_xXAS>PM8b4MLc+! Ӄ<  MNj oA?rV9QXbUeຜ&wpewO3~=2%cu1EF\~Wxo}\)DnRjrMm X(p˿J=RVy,1S HuJ&"L`tLYoa $;6U$nq>ޑjDTf!RlKyhb@,D?l+'ZC<(62ZiK$B?x: R)1}DnҡR-kY|^~>AD j)IVGs(9W /N`o:O*XNk\]sz5Ù/Np4YNu.ےL3m06F@bG>ǂ %&&fU,STXt5\MKE@{bU9n" xOdo o$VuHG't=m9<I!e6Bal(cS K@YUu|E{IRiBR0L[}uAn*[68A_=_2͍XPQOJA8 sk.'x?ƑNj$@߉}d Q[ (΄m߾^7eGtSBP4Vcǹ$ i6(߁EV7nMLY|2NpaR`GuR1զFH<n/-saJMbk5p=L9듗a}08s,.XIgs@8 >K-i9uN=e.@iVQՏo"+0#5OKJ%|.: HV h*V Sص9n5dDɵOHSpL2Fx%#rpTeQ*3\cj '@9'$M!S6gn4|B|~M)@Jh\11=Ůj5yK3s7%ҟӳ i@dw! KJ3ќ?IȆ;Mw[ ߈2q[COxRS| *?Lc1.kv- Ź zD!1iI-dICO!@>-|412Cܮޝ\+&-V˾jNQ VY%w$S>V۞ Vw"\3j_499;ɁY-Gpr ~"vZx.bca"$?EJ'a Td֓@^+;A ۊnX|N]BQ>I~e4cPco:0Ag6#U5Gc*_ia֑@YI:>rg9\_sS!y' Kp;aNVm5sA~I$B9nC*mEiFw}(=FWks_*b!N# pqiYvѮ~sE9s \ZiR #>sKc7*eb9m!(ᷦD>Oy4+vZH6buuj{Y[,3* HOoaتu IwAT?Wkm.P#蕓P>$ RżW7;o}g]>]=JJ"w(-ٿ,'KZWFP'SlUZM 8N" ݌ d Uѯ5- 3 IkKb@˯SZ Ba ΅ |_'%dzf6Q^-k\;8nOV_d3''K8WxC)OY$0ome  :ca Lpi Q4]1V0{ :cLU3Lq%O[%8e[{R!Ƨ "'/YiQGMm=M2>:?$?3ڣbZq)4:{gsn3*d)S]}b~XePU-   pKtMXI,,"Dyh ŴfISx"2yqq1^{ x;7n ;ϝ$z>gz,."Fyf׆2JPPQuڕ'VwBfT?GޱA]'iPWR/Uz s1k G"_Cر*4r7U ݆C:t691@M-OҋXiNHzjft[_ g~zThR)u-Jn!NY"_99?GPAL@W*lj?]BzQSIc'Wv]UhT0/;md%'ٷ>S4>Ty Bozӂ %>K"\G=;*V񬠎H^g[ÊB/vQpK.m^UOjB4a]WW `Z|~c_ CVSٲ!6%oR\hذ*Iomw]qm͸þg,Jُ|gl OkFrU$»H&ܞupnpȿ?A e%47̎ *+?_DizqR Fn!^)[}oYD(g Rf2d*S,< h}T(|{5kbNᾅޟmʜsIwv*b_L=&y&Xn;c˦Ȫ:*Kmsˁ^V;N$č9tv 5tEѾj5zYb_%YO|FFP8ZavwZ۵7Ij:fA+ʾy{[sVnb`/- F Ƌ(|4,T> w!xq4C9SONPG.}ܔ^Da! ~t-G1>\abu *yXaHbv)F?R"mlPӣ34D\ra%OC%}}Fu- ˓PWnu[+ k8,Ȏ &e0b}.&>9a/_Wz?cKw:UFְ+ *Z^t]P&q9?`!DNqNhtkDyE ۳_(ޙ 3H'̢]CD@  l4c6|!RѢqݠcA]++4<>v@ uP9Fʄ -A_Fd~Љ`Iݘ)6}?fdQ1MZ@]J!o0ᣞU #7_ 1]{`'><1[Oy'2!) )qn[s-mbI+a،Ye^ma c;MlZ_&:ZpJBk^EJ=vXͤޚ]n䄞T"![Ƭ$ǭw ,԰œy@So>%jQOT%?8a;0~r KΟOհv3rp%3tF EDBm TrǸq52왩 H42˂Ȑ< 0 r]#)h \%#d@?^J-ML@2 q܆Ɋc̐z0êiR7MB{wԈ3{lQ|)a(W~r]mQkCEࡘ#CVOg=sQ"E28R $prAWrO! p|J,D^HM<R͐un[%Rf\YM1{ 3++O TϞYO#a,Rd:%)CX>˿bdݰ'tOw L1|$Ubc5ۜ ޗ5rzŢ4V:=m g9bZgV% yM!p>˓ּK٢a@=6xwޟ"EG0,:6)pJnJTP1R6E*ۿb-rLOѝD|丯j/67y'|7KN0ݮF7.: C5B>qTԲ@u2\P,$o If‘r޲1}q4gD0b+~^Eօ)5|r~%U+Ln^> gLdHRaRh#Sx2ӋDֶ=N`ɹu'}bb0'J]'0苩v\x,87CXآݽb5[y#<c{/;d^ukFzBEbݚ'߁Y \+a˘e_Va_pd$%{Ժj>%E'!B,KCb= 䅭{=sM~HEi+mq羕f;F qڐ7&8uB4 s`%tpZN mNΣo PJ(.J*h[\fL+Y@@Xf顯*L6F~+\l3IAnV7ӻgU0?[gG\i$("ȓC `v~$_~hi6"7{D7œH!czԗdo'p,65FgVB9tNmN޸">gE6qj8XXo &SNm@jn/{]* WCjɡ~BZ]rHȢ*X]6=mT#nRO 牱;z励@ S::S vUE>*/#_88˃j5Pp5gDdL/Iͺ(rQd1P7XnUf7"sک2& w`lignm /z`U(ބ&ޕ%#tk))vT AeۉsŚ;Ú6K7`_MSq /[#\zy5H7i>Ǔ1][2c}FLM'S[7.5يUFW8 ="#Kzvu"w_+^ipғѣSRP 顸!lez?ChC͖,E,̶pwH;^6c/O#۴>~;|)205:3x _nXzpF9œ&" lZo=zD6G5VS[ea_,slՊRˊδo Q33ìRѸX {Y &Y ZWt+*ǀ Zp9&<iC Q" aAir$)qp Bcq$wԱ:%FPޡ'ǵ?G=3KӔmlw7}LDԌmfj͹/3L R!) %مHo[D.}C3MobǠKfY#8OKF_OE GYr5 C! F9ʹ Ź:nBdž4D0$yQ|5y7=z L🧯\'$oZ1>tS|{9"9=V0T/.2;& jMUJ3%%,^Dm2 @7ds8p@w *ZxL"\Dz*F^EZ=AgD',@u sչ@[׿.Un1ӓ-q+#,GX*Mw +a~"\nN ȔΊ/7Erm{#~P*J|SFﱕCY0-HSgѶ 0!?WO( ,!L/kD{=ðUdi*q'HP nbEWT18%6%Ln#1QqA<* \AaFvDVs*Չú|ygk&"My|߆%!c]nI|K\/`>/3#O?qS2SAY4ˤ Vq7$hRIq5*@v/#;'N0\R \[6@^ISرp Y!""!x[ ;/L,y926+j.~Aw#I]G2cwE$8 UE3Z'ˉ$P$\ CD/@D9zY+#k!IҤ}c :߲3։j$ e+Ek퐪BXd3zq'0e9[b)t9(6v&Kpڤn驮W|a_ cx$G)J1vVaoh2*C_FYd kX*k21l˵A:u透-RF#E=.3Uf2P)Ġjr#X[GOKI)1Z{ebݹG}w}g&|5Ё[yj`ʯqjJ"ژ/RqMʕ P1ƏJ;U[SڍOEKf;`=7"+ìo'SWv}~&& 3mZ'od4]`'P,3MQU䀄 i&-pn+~%Q½?W8JkK"߳727=-_Eb8B`kp*vVe8 g)fLw7vm墁ۡavAmwzyHd˳{~hJ| ƄI8ti{ D`THW(ɘ/Gq;zn&,>"^P|mI%C)>80EB8uwtk*Ե mΠw۠f[`u2wbHƉItдBM[x0;s J `N{}|Ml^"xQJ ȕ[Oe<1 EpgAO19 2yȖYl.1PeyZ1ֿ4?qG| 4pqN̔-Od+Gi]KחjE>n@{%J颹v3ONKT:S%̜9Px2s>(?oS5G9?!P)dkډ!Y;h,TP3(3;:W~N` jVJYʣo.9\"D6z?P7uCt7pOnλYfM+6~dl563JMtY@?{u(Ȱ6z²4O;'!荾 \}HӸ'2P{.(UiB65FENH ~`PNS%ypyr6ߨ)PKL'iCsbx_j`<7A;^“2EB  j4) *CՌ-5$u*o~f'8.$d*K/FǺuӅ-ES>цQq ;۬4H}e  779>%YH7ab ~2ueLfըoȷoNs͠xs~V֣H غou(AXxSFv%5vK(sτ9-V7J:sb <[ﮠ zYYG_g+ͯ.IYo;vw>ȷHB1Ё<04\7#Ia1Y^Qyʊ>o#R-4[5 ;Sy(E: bُ^ӅϢ/Ge-zRb<)k3>K t=};j+u칻 ӔSTPZlI"Ar4#ZkAʪJ\TڌRxx ̘/7m;:\s4 w`iZdw8񒄒'BJD8nlj(:|z}֗-sj灮do@ GVi ?~W8㹏!xPu01dc6sj 1?rF_Cu7`Iq ? Vg{Bt UW>׌])l~F8qGò&}^跔&]lֳ+9OkIW$Gm=>l`XٰL+MF"eB3>wrwyP03mm,1cԹĺ$a]M aNGWiv|%-?$fiiwb aK \(s7eN0jo-T &L8'4i { IϋͿ=SRBH]#5Tps;F M4jHtٻF>)P.Ҹ˅]d6@j@eB9[}iA<0¯'r@\عE]_9Cnw߮Z7-Ca"|" bDe>$.*0I—ftԢ%iJ^^$j^NiH |{$ Lc?#_bt N𕺣t5Ұ>[aWp/:i:Vx )Ҕ}y[/Q&l2q r! /~ڄ Gl)Ɏ%`Jbuwٰub@l[fIJX.\T\ݙ rDGEҰ&sIA ^dw lk_eB\aYR 8)O BV~SdS*JXXu)w׎n{΢j!?4jHؙ&בKsұ5Nb6v9]N!-i-~,=c41TrSܣICXrJ#PS,l/i'SqF ܱ~2Әg}4SߊDwٞ'PD$zvyv|e 2>,L8*G~P;XQȶ F Oʔ?DTI[O~AJ[PO!#pUm5̄|&(;=C9 ;gmAC3l<ϋ/#47?=h'~ҕ.\Uw sHf{v%P~0匀,ĺCqawiv)Jn#tiyO۬:&9?^$ch!3hs_^_l/πǷwlW. I~"^Ƒxbi=`u%JM#ޖk +ڋDÇ|U hs8MueVSlËb]-/G龅eZX(īt8m&ITJh=p%nXt*/n`՟P)Q' /岤] $ر@'4Q1 (Eo3v)țwhD,POr׮[ }ޡBH_6y-R MƄ}^Ej"Go,笶vtXV(/\^,ߞٽ+%R7eOqvhu 8'v\@ AGd/YܣgE7xI;xѩB- :A'ڕ/`guM-Ng 23ODIѨ|)% lIѝ;UxV`{TT`ժ{B_Y3^/JAM+E-WЯ] ǁz &OW-bɊ0Um-cpd17V@=/=eK3"`}/{j;nMĻqrꫬ9MT os by{67Q ӌP"G4<@XT;YWr3)'bͯlWNvY4Q]lP Ffzک%<͑J%[*I-&%L鼒u3f'z!ۣI"( LʧT2ՐÎb N*B .ۈo-%'Cf^7YP B MI0Et61]?cMz,UmxxvB t&X H\GPc3<;R\z =IfZcl( O!ʹ댍tg0l0b#nM;ta}qTT$ZQ9Qw3~n?5,034hz&F}xg:a c3`N:,L`ɀW?yOy\@Sm?y}Dx+o@ m+ɽ$B}ۍrIQ"* E_C:hU coR59 ӓƀwfK(=Ē/g4Q(Tsx|(R\[$ÖzQ#NPlK"D%jgdVglQ=i+1,v>Vbn7Vn\M"}mI'_jxU5 T:Ƣ 1zcNKU0M_baxdɓe"86MpfxOϹ#nGAcU 0GH"ڷ~ف{ !rH^pEQ#x _]@CiSX^ ;+dƗ:M?Ww  W㽃Ho,r[5JIhe>/)VRy 'FL`-<3*2:6h뢓e"3rY/yjlp3JMؖ@Ml'3[^edw/_O[==bc=ƹ{CQ1cOƔYH{a,?QdŘsMZcA-CP!{,>BV:f.=27Z|u A{sGTsD}`͞|jz;4K%RW#3B'*TB{x[0 m$/3M%.Vi'}o/l QP }\k=>F.͑!Rݿ v 5d>_yhhN81{7Ƈ<W0/Dnf*7ECpa) 2ZwMAzى=%=P ]b̀W݆1ev<(y_kK[ CD,c@£| kދUu1}a~&Ŭލ!}C+ 'ˢ4]<-bni,_:*]3F)3RaY4`d 6ҝP 9_nw4 BӲZ_waOkn餬m @P-[鳸8=6  9 ʨg (?