Package securitycontext contains security context api implementations.

Temporarily export this function to share with dockershim.

Creates a name which can be reversed to identify both full pod name and container name.

ConnectToDockerOrDie creates docker client connecting to docker daemon.

FmtDockerOpts formats the docker security options using the given separator.

Temporarily export this function to share with dockershim.

Temporarily export this function to share with dockershim.

GetFakeContainerID generates a fake container id from container name with a hash.

GetImageRef returns the image digest if exists, or else returns the image ID.

GetKubeletDockerContainers lists all container or just the running ones.

Temporarily export this function to share with dockershim.

GetUserFromImageUser splits the user out of an user:group string.

IsContainerNotFoundError checks whether the error is container not found error.

IsImageNotFoundError checks whether the error is image not found error.

NewCalledDetail create a new call detail item.

Creates an instrumented DockerInterface from an existing DockerInterface.

Unpacks a container name, returning the pod full name and container name we would have used to construct the docker name.

ParseDockerTimestamp parses the timestamp returned by DockerInterface from string to time.Time.

Temporarily export this function to share with dockershim.

RewriteResolvFile rewrites resolv.conf file generated by docker.

SetContainerNamePrefix allows the container prefix name for this process to be changed.

Corresponds to docker 1.11.x.

ErrContainerCannotRun is returned when a container is created, but cannot run properly.

Because the new data type returned by engine-api is too complex to manually initialize, we need a fake container which is easier to initialize.

FakeDockerClient is a simple fake docker client, so that kubelet can be run for testing without requiring a real docker setup.

FakeDockerPuller is meant to be a simple wrapper around FakeDockerClient.

ImageNotFoundError is the error returned by InspectImage when image not found.

KubeletContainerName encapsulates a pod name and a Kubernetes container name.

NativeExecHandler executes commands in Docker containers using Docker's exec API.

NsenterExecHandler executes commands in Docker containers using nsenter.

StreamOptions are the options used to configure the stream redirection.

DockerInterface is an abstract interface for testability.

DockerPuller is an abstract interface for testability.

ExecHandler knows how to execute a command in a running Docker container.