kubernetes1.23-kubeadm-1.23.17-150500.3.18.1<>,fc@p9|U})G%LW8_8!Ll5O V̇r xHD!F74SyB曄mZA;ۃst׼L$6=CP>UMdVOʄF+9k!Dg6ӕoEᎸt܌'m#Ɋ5 ㇮(Ks䞰_~th9tg6N|^7MQY9 CE%Y妝EN4>D?d! / U% ;MdjpwLw :w (w w ${w $w&w)#w+v+w--./e///(/8/90:1Bu@FuWGulwHwHwIy$wXyYyZy[y\yw]{w^7 bAcdsexf{l}uwvlwwxwylzxCkubernetes1.23-kubeadm1.23.17150500.3.18.1Kubernetes kubeadm bootstrapping toolManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubeadm bootstrapping toolfc@s390zl36|DSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxs390xt#0Y*v ;,^S~B\\\5UDBkm<d`-al=Ic8T 7B F yf Ffc] sA큤A큤A큤fbtfc7fc7fc7fc7fc>cccfc>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.23-1.23.17-150500.3.18.1.src.rpmkubernetes-kubeadm-providerkubernetes1.23-kubeadmkubernetes1.23-kubeadm(s390-64)@@@     (kmod(br_netfilter.ko) if kernel)(kubernetes1.23-kubelet or kubernetes1.22-kubelet)cri-runtimecri-toolsebtablesethtoolkubernetes-kubeadm-criconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rpmlib(RichDependencies)shadowsocat3.0.4-14.6.0-14.0-15.2-14.12.0-1kubernetes-kubeadm-provider4.14.3ff@f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- Fix for bsc#1229008 (installing kubernetes1.23-client also installs kubernetes1.28-client and kubernetes1.28-client-common) * update `Requires` in the "kubernetes1.23-client" pkg to: - `Requires: kubernetes%{baseversion}-client-common` * Remove following `Obsoletes` from the "kubernetes1.23-client-common" pkg: - `Obsoletes: kubernetes%{baseversionminus1}-client-common`- add new security patch to escape terminal special characters in kubectl output, bsc#1194400, CVE-2021-25743 * patch file - escape-terminal-special-characters-in-kubectl-112553.patch- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packagekubernetes1.22-kubeadms390zl36 1724146496  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvw1.23.171.23.17-150500.3.18.11.23.17-150500.3.18.1 kubeadmmodules-load.dkubeadm.conf90-kubeadm.conf10-kubeadm.confkubernetes1.23-kubeadmCHANGELOG-1.23.mdCONTRIBUTING.mdREADME.mdkubernetes1.23-kubeadmLICENSEkubeadm-alpha.1.gzkubeadm-certs-certificate-key.1.gzkubeadm-certs-check-expiration.1.gzkubeadm-certs-generate-csr.1.gzkubeadm-certs-renew-admin.conf.1.gzkubeadm-certs-renew-all.1.gzkubeadm-certs-renew-apiserver-etcd-client.1.gzkubeadm-certs-renew-apiserver-kubelet-client.1.gzkubeadm-certs-renew-apiserver.1.gzkubeadm-certs-renew-controller-manager.conf.1.gzkubeadm-certs-renew-etcd-healthcheck-client.1.gzkubeadm-certs-renew-etcd-peer.1.gzkubeadm-certs-renew-etcd-server.1.gzkubeadm-certs-renew-front-proxy-client.1.gzkubeadm-certs-renew-scheduler.conf.1.gzkubeadm-certs-renew.1.gzkubeadm-certs.1.gzkubeadm-completion.1.gzkubeadm-config-images-list.1.gzkubeadm-config-images-pull.1.gzkubeadm-config-images.1.gzkubeadm-config-migrate.1.gzkubeadm-config-print-init-defaults.1.gzkubeadm-config-print-join-defaults.1.gzkubeadm-config-print.1.gzkubeadm-config.1.gzkubeadm-init-phase-addon-all.1.gzkubeadm-init-phase-addon-coredns.1.gzkubeadm-init-phase-addon-kube-proxy.1.gzkubeadm-init-phase-addon.1.gzkubeadm-init-phase-bootstrap-token.1.gzkubeadm-init-phase-certs-all.1.gzkubeadm-init-phase-certs-apiserver-etcd-client.1.gzkubeadm-init-phase-certs-apiserver-kubelet-client.1.gzkubeadm-init-phase-certs-apiserver.1.gzkubeadm-init-phase-certs-ca.1.gzkubeadm-init-phase-certs-etcd-ca.1.gzkubeadm-init-phase-certs-etcd-healthcheck-client.1.gzkubeadm-init-phase-certs-etcd-peer.1.gzkubeadm-init-phase-certs-etcd-server.1.gzkubeadm-init-phase-certs-front-proxy-ca.1.gzkubeadm-init-phase-certs-front-proxy-client.1.gzkubeadm-init-phase-certs-sa.1.gzkubeadm-init-phase-certs.1.gzkubeadm-init-phase-control-plane-all.1.gzkubeadm-init-phase-control-plane-apiserver.1.gzkubeadm-init-phase-control-plane-controller-manager.1.gzkubeadm-init-phase-control-plane-scheduler.1.gzkubeadm-init-phase-control-plane.1.gzkubeadm-init-phase-etcd-local.1.gzkubeadm-init-phase-etcd.1.gzkubeadm-init-phase-kubeconfig-admin.1.gzkubeadm-init-phase-kubeconfig-all.1.gzkubeadm-init-phase-kubeconfig-controller-manager.1.gzkubeadm-init-phase-kubeconfig-kubelet.1.gzkubeadm-init-phase-kubeconfig-scheduler.1.gzkubeadm-init-phase-kubeconfig.1.gzkubeadm-init-phase-kubelet-finalize-all.1.gzkubeadm-init-phase-kubelet-finalize-experimental-cert-rotation.1.gzkubeadm-init-phase-kubelet-finalize.1.gzkubeadm-init-phase-kubelet-start.1.gzkubeadm-init-phase-mark-control-plane.1.gzkubeadm-init-phase-preflight.1.gzkubeadm-init-phase-upload-certs.1.gzkubeadm-init-phase-upload-config-all.1.gzkubeadm-init-phase-upload-config-kubeadm.1.gzkubeadm-init-phase-upload-config-kubelet.1.gzkubeadm-init-phase-upload-config.1.gzkubeadm-init-phase.1.gzkubeadm-init.1.gzkubeadm-join-phase-control-plane-join-all.1.gzkubeadm-join-phase-control-plane-join-etcd.1.gzkubeadm-join-phase-control-plane-join-mark-control-plane.1.gzkubeadm-join-phase-control-plane-join-update-status.1.gzkubeadm-join-phase-control-plane-join.1.gzkubeadm-join-phase-control-plane-prepare-all.1.gzkubeadm-join-phase-control-plane-prepare-certs.1.gzkubeadm-join-phase-control-plane-prepare-control-plane.1.gzkubeadm-join-phase-control-plane-prepare-download-certs.1.gzkubeadm-join-phase-control-plane-prepare-kubeconfig.1.gzkubeadm-join-phase-control-plane-prepare.1.gzkubeadm-join-phase-kubelet-start.1.gzkubeadm-join-phase-preflight.1.gzkubeadm-join-phase.1.gzkubeadm-join.1.gzkubeadm-kubeconfig-user.1.gzkubeadm-kubeconfig.1.gzkubeadm-reset-phase-cleanup-node.1.gzkubeadm-reset-phase-preflight.1.gzkubeadm-reset-phase-remove-etcd-member.1.gzkubeadm-reset-phase.1.gzkubeadm-reset.1.gzkubeadm-token-create.1.gzkubeadm-token-delete.1.gzkubeadm-token-generate.1.gzkubeadm-token-list.1.gzkubeadm-token.1.gzkubeadm-upgrade-apply.1.gzkubeadm-upgrade-diff.1.gzkubeadm-upgrade-node-phase-control-plane.1.gzkubeadm-upgrade-node-phase-kubelet-config.1.gzkubeadm-upgrade-node-phase-preflight.1.gzkubeadm-upgrade-node-phase.1.gzkubeadm-upgrade-node.1.gzkubeadm-upgrade-plan.1.gzkubeadm-upgrade.1.gzkubeadm-version.1.gzkubeadm.1.gz/usr/bin//usr/lib//usr/lib/modules-load.d//usr/lib/sysctl.d//usr/lib/systemd/system/kubelet.service.d//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-kubeadm//usr/share/licenses//usr/share/licenses/kubernetes1.23-kubeadm//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35296/SUSE_SLE-15-SP5_Update/d46d6d7920f61cfa98dec478e009a2c8-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=dd663e137bfc34830bc5570bd44b4fbe2902242f, for GNU/Linux 3.2.0, strippeddirectoryASCII textexported SGML document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)RRRhZ^(څutf-86b69a25e49ebaa956743f2c95088167d54558e4446688f800d712d70d9f40bd4?7zXZ !t/ M]"k%9[]{~lR&-~YCy]|HE`m魌hHcHwJ]?BL|E5x ff^mCa Z-ؚ1-s$9>dn&<^Enj"oWF@堢S?HdA6\W?p/ŽO<'&f Q$:r5)zjn4`A!3"h *mYr{.< C5ض:@ѺYטyO? 8t)d\W} L#o{rydwL^o-[s_E 0:/[hOuy_W* xIPZv7y-T){yc:N1bܖd JZ*۷7p;;lG`◕z__S⸢+- ȌEq&B~?Iotj]Cw fx*4Va[ܼ;G:-ul(+ +/N&":z=7o"ӎCdt4^}zMnFO/dmɫܑN\IM#{g62~&ՄROxưJ|j(@)#8O\/-z-JwF6烧/b֩sF(FyWFr#>{U/*-G&!̈́\0T3yd?ֽvf,kO!ҤO|ƴ+QP:RD.3Ř\'cZq,rPe1GwBsI4[n}yP p"G~9)=D*!|N!b]￑pp,0r0f.Ts%*8]fh+NfZ5>P *Hr<]p bJB!^mOg*f nBߥ߇Pލ<MTEԟNē_ݭ;ieM7谱||ؐ#S&]{E@Y>) {8&gm,\fQ h7e:\8!v]t%4U>uj HBW,O`OK)%_80=3.A6.XJ/=s;oWbΨ"B"Ηj( všhMUAFrBFµlcMLL G.TT~CiY%P+^p&Y6arJl_2P 4ntD\[ؓtm  *|| YZ