kubernetes1.27-client-common-1.27.16-150400.9.12.1<>,Pf]p9|b[ FB46gQYivBs"8N.MQ']-o >;0`5Y&[ _nAdG5b#> .&]2͎#-sQh -Mf]pHBk,*ƭGׂJk9ݑVp⥬V܋?8?xl_&uqh F x6u7E$O7^\,*Kڧ+: 1vw|ϡg,=FCay_$w>E?d' 5 Z &qq q tq 8q #iq #q%q'q* *8q+,\,x-- -$-=(->8-H9-:/>1@9FAGXqHqIqXTY`\q]Xq^bqcdefluqvzex|Ckubernetes1.27-client-common1.27.16150400.9.12.1Kubernetes client tools common filesKubernetes client tools common filesf]h01-armsrv2SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxaarch64/usr/sbin/update-alternatives \ --install /usr/bin/kubectl kubectl /usr/bin/kubectl1.27 127if [ ! -f /usr/bin/kubectl1.27 ] ; then update-alternatives --remove kubectl /usr/bin/kubectl1.27 fi ,^9 I  }X `6;KNITQKwS  k Z7 3 B   2w??  M -   c; g gr/C 6h @x} A큤A큤f]f!f!f]f!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.27-1.27.16-150400.9.12.1.src.rpmkubernetes-client-commonkubernetes1.27-client-commonkubernetes1.27-client-common(aarch-64)    /bin/sh/bin/shkubernetes1.27-clientrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-client-common4.14.3f@f@f|fGFf! @f@f@e}@e7@eee`@e:Te e eRdd d@ddK@dK@d6@d6@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgpriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comeich@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.com- Follow up changes after go version bump to 1.22: - For ppc64le platform: disabled `export GOLDFLAGS='-linkmode=external'`. * to fix the build failure error: `-linkmode=external requires external (cgo) linking, but cgo is not enabled` - For linux/s390x platform: disabled building kubernetes binaries with `-buildmode=pie` * `-buildmode=pie` with "internal linking" is not yet supported on linux/s390x platform * ref: https://github.com/golang/go/blob/a63907808d14679c723e566cb83acc76fc8cafc2/src/internal/platform/supported.go#L223-L232 * ref: https://github.com/golang/go/issues/64875#issuecomment-1870734528- Update to version 1.27.16: * Add funcs in pkg/filesystem/util that can actually set file permissiosn on Windows and update container log dir perms to 660 on Windows * Bump images, dependencies and versions to go 1.22.5 and distroless iptables - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.22.5` * `BuildRequires: golang(API) = 1.22` * ref: https://github.com/kubernetes/kubernetes/blob/v1.27.16/build/dependencies.yaml#L96-L98- Update to version 1.27.15: * Bump images, dependencies and versions to go 1.21.11 and distroless iptables * Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable * Revert "scheduler: preallocation for NodeToStatusMap" * add an integration test when nodeAffinity specifies a non-existent node. * base on allNodes when calculating nextStartNodeIndex * backport verify-govulncheck.sh * Cherry pick #124618 to 1.27 * Fix NFS related issues on GCP/Ubuntu * Updated & added visibility to apiserver x509 test certificates expiring this year- Update to version 1.27.14: * scheduler: preallocation for NodeToStatusMap * add e2e test when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod should be scheduled normally if suitable nodes exists * test to catch illegal nodeNames returned by PreFilterResult * add integration test for pod with pvc has node-affinity to non-existent/existent nodes * hotfix when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod scheduling flow will abort immediately. * Fix PersistentVolumeLabel admission plugin on Azure * cluster/gce: upgrade cos-97-lts -> cos-109-lts * storage e2e: update hostpath and mock images * gce: fix test for non-existing instance in cloud * cloud-node-lifecycle controller: add fallback for empty providerID in shutdown- Update to version 1.27.13: * Add envFrom to serviceaccount admission plugin * [go] Bump images, dependencies and versions to go 1.21.9 and distroless iptables * [CVE-2023-45288] .*: bump x/net to v0.23.0, bsc#1229869 * Use the right feature gate when updating uncertain volumes * fix panic with SIGSEGV in kubeadm certs check-expiration * hack/tools: bump honnef.co/go/tools to v0.4.6 * Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. * Use DBG=1 for conformance verification * build: use -trimpath in non-DBG mode - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.9` * ref: https://github.com/kubernetes/kubernetes/blob/v1.27.13/build/dependencies.yaml#L96-L98- update .spec file to set FORCE_HOST_GO env variable, to force k8s build scripts use the local GOTOOLCHAIN version from the build pipeline (i.e. GOTOOLCHAIN='local') * ref: https://github.com/kubernetes/kubernetes/blob/9791f0d1f39f3f1e0796add7833c1059325d5098/hack/lib/golang.sh#L507- Update to version 1.27.12: * keep existing PDB conditions when updating status * remove --v arg from kubetest2-tester-ginkgo test args * ci: bump kind to latest for kms jobs * [go] Bump images, dependencies and versions to go 1.21.8 / distroless-iptables to v0.4.6 * [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0, bsc#1229867 * fix UT failure TestPrintIPAddressList * e2e_node: replace `registry.k8s.io/stress:v1` with agnhost * promote agnhost to v2.47 * fixing issue with GetCPUUsageNanoCores on Windows * Fix cleanup of file subpaths * etcd: Update to version 3.5.12 * build etcd image v3.5.12 - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.8` * ref: https://github.com/kubernetes/kubernetes/blob/v1.27.12/build/dependencies.yaml#L96-L98- Update to version 1.27.11: * [go] Bump images, dependencies and versions to go 1.21.7 / distroless-iptables to v0.4.5 * Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch" * Add processStartTime in metrics/slis * If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it. * Drop PendingChanges methods from change trackers, move into UpdateResults * Squash some unnecessarily-chained methods in the change trackers - Update .spec file to bump go version build requirements: * `BuildRequires: golang(API) = 1.21`- Use %patch -P N instead of deprecated %patchN.- Update .spec file to remove go version build requirements: * above build requirement causing build failures with following error: - `go: download go1.20.13 for linux/amd64: toolchain not available` - ref: https://go.dev/doc/toolchain - Update to version 1.27.10: * Revert "Graduate Evented PLEG to Beta" * [go] Bump images, dependencies and versions to go 1.20.13 and distroless iptables to 0.2.9 * e2e framework: adapt unit test to Go 1.22 * Handle edge cases in seat demand stats * .*: bump golang.org/x/tools to v0.16.1 * fix: 119921 * Use a separate function for checking if device was reconstructed * Add tests for checking of uncertain device paths * Fix device uncertain errors on reboot * fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times * etcd: Update to version 3.5.10 * fix: smb file share unavailable issue when it's deleted- Update to version 1.27.9: * run update-vendor script * [go] Bump images, dependencies and versions to go 1.20.12 * pass GOTOOLCHAIN to build containers * handle GOTOOLCHAIN in kube::golang::verify_go_version * Move adding GroupVersion log until after an update is confirmed * fix: requeue pods rejected by Extenders properly * Bump distroless-iptables to 0.2.8 based on Go 1.20.11 * Make StatefulSet restart pods with phase Succeeded * run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly * update filepath-securejoin dependency to 0.2.4 to fix security vulnerability * Fix panic when process RunScorePlugins for cap out of range * e2e: bootstrap vsphere tests earlier- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.11` - Update to version 1.27.8: * Use golang library instead of mklink * [go] Bump images, dependencies and versions to go 1.20.11 * Fixing attempt to deploy past allocatable memory limits test on Windows * bump golang.org/grpc to v1.56.3 * Add more test cases ensuring nextScheduleTimeDuration is never < 0 * Modify mostRecentScheduleTime to return more detailed information about missed schedules * Fixing gmsa-webhook install steps for Windows GMSA full tests * removing the import of "k8s.io/utils/ptr" because it was introduced after 1.28 * Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate * KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local * Use Patch instead of SSA for Pod Disruption condition * service controller: improve node lifecycle updates * Fix panic testing intree vSphere dynamic PV. * Retry operations if CSI Driver Isn't Found by Treating this Error as Transient- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.10` - Update to version 1.27.7: * Release commit for Kubernetes v1.27.7 * Register UnauthenticatedHTTP2DOSMitigation into kube components (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Disable UnauthenticatedHTTP2DOSMitigation by default (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Prevent rapid reset http2 DOS on API server (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Fix concurrent write when filling PVC labels * Modify test PVC to detect concurrent map write bug * [go] Bump images, dependencies and versions to go 1.20.10 * Fix to honor PDB with an empty selector `{}` * .: bump golang.org/x/net to v0.17.0 * Mark a volume as uncertain-attached after detach error * Add nil checks for hpa object target type values * [go] Bump images, versions and deps to use Go 1.20.9 * bump etcd cluster image to 3.5.9 * cronjob controller: ensure already existing jobs are added to Active list of cronjobs * change rolling update logic to exclude sunsetting nodes * vsphere: adapt to govmomi bump * .: bump govmomi to v0.30.6 * move check for noop managed field timestamp updates * mount-utils: fix flaky test 'TestFormat' * Increase range of job_sync_duration_seconds * sync Service API status rest storage * updating dependencies.yaml for etcd v3.5.9 version * use upstream etcd github path instead of redirecting one * update etcd version in install.sh to 3.5.9 * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.6 * fixup patcher test to include field manager * remove checks for fieldmanager from handlers * include apiextensions types in apiextensions generated openapi * fix scale not being given gvk in CRD openapi schemas * add OpenAPIV3 config to tests and server options * add error for attempting to initialize field manager with nil typeconverter * supply deduced typeconverter to apiserver tests * Throw error if OpenAPIV3 config is not provided * e2e pods: fix WaitForPodsResponding retry * scheduler: start scheduling attempt with clean UnschedulablePlugins- fixes for bsc#1214406 - update `Wants` directive in [Unit] section of `kubelet.service`: * add: `containerd.service` * remove: `docker.service` - updating container runtime prerequisites: (Refer: k8s.io/docs/setup/production-environment/container-runtimes/#install-and-configure-prerequisites) * update `90-kubeadm.conf` to add below iptables rules: - net.bridge.bridge-nf-call-iptables = 1 - net.bridge.bridge-nf-call-ip6tables = 1 * update `kubeadm.conf` to add `overlay` kernel module * update .spec file to: - add post-installation scriptlet for `kubeadm` package to enable iptables rules defined in `90-kubeadm.conf` using sysctl - add conditional checks to load kernel modules (br_netfilter, overlay) in `kubelet-common` package post-installation scriptlet - update `kubelet-common` post scriptlet to correctly update `KUBELET_VER` var in `/etc/sysconfig/kubelet` file based on fillup template - add below to `kubelet` subpackage to recommend installing correct version of package providing `kubernetes-kubelet-common` : * `Recommends: kubernetes-kubelet-common = %{version}` - add below to `kubeadm` subpackage to recommend installing correct version of `kubelet` and `kubelet-common` packages: * `Recommends: kubernetes%{baseversion}-kubelet`- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.8` - Update to version 1.27.6: * Release commit for Kubernetes v1.27.6 * [go] Bump images, versions and deps to use Go 1.20.8 * fix: concurrent map writes in e2e test * Automated cherry pick of #119776: Fix a job quota related deadlock (#120320) * Fix OpenAPI aggregation cleanup * Fallback to legacy discovery on a wider range of conditions in aggregator * apiextensions-apiserver: generate applyconfigurations * TopologyAwareHints: Take lock in HasPopulatedHints * Mark Job onPodConditions as optional in pod failure policy * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.5 * Incorporating feedback on 119341 * check for overflow * Fix CEL cost handling of zero length replacement strings * generate ReportingInstance and ReportingController in Event * Pass Pinned field to kubecontainer.Image * prep for go1.21: use -e in go list * Skip apiserver_admission_webhook_request_total during context-canceled * Ignore context canceled from validate and mutate webhook failopen metric * kubeadm: fix nil pointer when etcd member is already removed * update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 * fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap * Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip * Issue 4230: remove readiness check for cache exclusion * add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3 * update openapi * expose apiregistration.k8s.io into OpenAPIV3 * fix openapi/v3 non local apiservices aggregation * node: devicemgr: topomgr: add logs * e2e: node: add test to check device-requiring pods are cleaned up * e2e: node: devices: improve the node reboot test * e2e: node: devicemanager: update tests * kubelet: devices: skip allocation for running pods * Add test coverage of result size of string operations * Bump cel-go to v0.12.7- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.7` - Update to version 1.27.5: * Use environment varaibles for parameters in Powershell * Use env varaibles for passing path * Avoid returning nil responseKind in v1beta1 aggregated discovery * [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.7 * e2e_node: move getSampleDevicePluginPod to device_plugin_test.go * fix 'pod' in kubelet prober metrics * priority & fairness: support dynamically configuring work estimator max seats * Add mininumKubelet tag into ReadWriteOncePod test * Include ignored pods when computing backoff delay for Job pod failures * Adjust the algorithm for computing the pod finish time * Rename updateReconstructedFromAPIServer * Rename volumesNeedDevicePath * Update volumesInUse after attachability is confirmed * Add uncertain state of volume attach-ability * Refactor FindAttachablePluginBySpec out of CSI code path * kubeadm: backdate generated CAs by 5 minutes * client-go: allow to set NotBefore in NewSelfSignedCACert() * e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer' * Fix a data race in TopologyCache * Fix TopologyAwareHint not working when zone label is added after Node creation- Restore the correct content of the kublet wrapper script (boo#1213829).- Update: `BuildRequires: go >= 1.20.6` - Update to version 1.27.4: * [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.6 * Fix the converts an empty string to nil. * Add unit tests for parallel StatefulSet create & delete * Parallel StatefulSet pod create & delete * Refactor StatefulSet controller update logic * Only declare job as finished after removing all finalizers * Automated cherry pick of #118716 upstream release 1.27 (#118911) * Hide numberOfMissedSchedules as an algorithm internal number * Update schedule logic to properly calculate missed schedules * Automated cherry pick of #118805: test comment should match the code in podgc (#118913) * call ./hack/update-vendor.sh * kubeadm: remove function pointer comparison in phase test * CHANGELOG-1.27: Add note for AWS in-tree provider removal * Updating the nodeAffinity of gated pods having nil affinity should be allowed * fix the existing problem (0 SerialNumber in all certificate) as part of this PR in a separate commit * update serial number to a valid non-zero number in ca certificate * Delete CRDs created during field validation tests. * kubectl explain should work for both cluster and namespace resources and without a GET method * always execute condition for wait.PollUntilContextTimeout with immediate=true * Review remarks to improve HandlePodCleanups in kubelet * Fix the deletion of rejected pods * Unset gated pod info timestamp in addToActiveQ * deps: Bump to cAdvisor v0.47.2 * Make etcd component status consistent with health probes * e2e storage: terminate worker quietly on test completion * Fix flaky persistent volumes e2e test * Set the node-ips annotation correctly with CloudDualStackNodeIPs * Fix the git-repo test error caused by the correct use of loop variables * dra scheduler plugin test: fix loopvar bug and "reserve" expected data * Add node check to vSphere cloud provider * Adding additional validations to queried endpoint list iteration.- Update: `BuildRequires: go >= 1.20.5` - Update to version 1.27.3: * Release commit for Kubernetes v1.27.3 * update-vendor: update vendored go.sums * releng/go: Update images, dependencies and version to Go 1.20.5 * kube-proxy avoid race condition using LocalModeNodeCIDR * Add ephemeralcontainer to imagepolicy securityaccount admission plugin * supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 * e2e framework retry on Service unavailable errors * e2e: apply timeout for CSI Storage Capacity test only to node * Add DisruptionTarget condition when preempting for critical pod * update webhook test to go 1.21 * Test APIService safe handling at startup * Fix waiting for CRD sync at server start * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet * kubeadm: Make etcd member removal idempotent * kubeadm: Add etcd client unit tests * kubeadm: Use internal etcd client through an interface- Update: `BuildRequires: go >= 1.20.4` - Update to version 1.27.2: * Release commit for Kubernetes v1.27.2 * OpenAPI V3 invalid document checks * QueryParamVerifier falls back on invalid v3 document * QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents * kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade * benchmark test to evaluate the overhead of podMatchesScopeFunc * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope * Update podFailurePolicy comments from alpha-level to beta * Disable NewVolumeManagerReconstruction feature gate * releng/go: Update images, dependencies and version to Go 1.20.4 * Bump konnectivity-client to v0.1.2 * Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP * node: device-plugin: e2e: Additional test cases * node: device-plugin: add node reboot test scenario * node: device-plugin: e2e: Capture pod admission failure * node: device-mgr: e2e: adapt to sample device plugin refactoring * node: device-mgr: e2e: Update the e2e test to reproduce issue:109595 * node: device-mgr: e2e: Implement End to end test * node: device-mgr: Handle recovery by checking if healthy devices exist * node: device-plugin: e2e: Add test case for kubelet restart * node: device-plugin: e2e: Provide sleep intervals via constants * node: device-plugin: e2e: Update test description to make it explicit * node: device-plugin: e2e: Isolate test to pod restart scenario * node: device-plugin: e2e: Annotate device check with error message * node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount * node: device-plugins: e2e: Refactor parse log to return string and error * Update kube-openapi to fix race * Use absolute path instead requestURI in openapiv3 discovery * proxy/ipvs: don't bind nodeips to the dummy device * proxy/ipvs: add a GetAllLocalAddressesExcept() function * Refactors discovery content-type and helper functions * Fix scheduler performance regression after adding plugin metrics * Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go * Fix bug where CEL listOfString.join() results in unexpected error * Fix directory mismatch for `volume.SetVolumeOwnership()` * Fix stomping os env in kubectl e2e tests * KCCM: add providerID predicate to service controller * Re-work logic in shouldSyncUpdatedNode * add log includes pod preemption details * verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones * deflake: Add retry with timeout to wait for final conditions * kubelet: Mark new terminal pods as non-finished in pod worker * test: Add node e2e to restart kubelet while pod is terminating * kubelet: Ensure pods that have not started track a pendingUpdate * changelog: fix formatting issue with v1.27 change log * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1 * use case-insensitive header keys for http probes * kube-aggregator: correctly use client-go TLS cache with custom dialer * api: encode NamespacedName with lower case in JSON * Do not look at VPC-related resources outside the cluster's network * Fix azure disk e2e after migration * vendor: bump runc to 1.1.6 * CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 * fix: the volume is not detached after the pod and PVC objects are deleted * Return error for localhost seccomp type with no localhost profile defined- Update `Requires` in the "kubernetes1.27-client" pkg to: * Requires: kubernetes%{baseversion}-client-common - Remove following `Obsoletes` from the "kubernetes1.27-client-common" pkg: * Obsoletes: kubernetes%{baseversionminus1}-client-common- Update to version 1.27.1: * Release commit for Kubernetes v1.27.1 * fix: add the bug as a known issue o on the v1.26 release note * Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ" * Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" * Revert "CR conversion: protect from converter input edits" * kubelet: Do not mutate pods in the pod manager * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0- update patches: * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- initial package for Kubernetes v1.27.0/bin/sh/bin/shh01-armsrv2 1727179613  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopq1.27.161.27.16-150400.9.12.11.27.16-150400.9.12.1kubernetes1.27-client-commonCONTRIBUTING.mdREADME.mdkubernetes1.27-client-commonLICENSEkubectl-alpha.1.gzkubectl-annotate.1.gzkubectl-api-resources.1.gzkubectl-api-versions.1.gzkubectl-apply-edit-last-applied.1.gzkubectl-apply-set-last-applied.1.gzkubectl-apply-view-last-applied.1.gzkubectl-apply.1.gzkubectl-attach.1.gzkubectl-auth-can-i.1.gzkubectl-auth-reconcile.1.gzkubectl-auth-whoami.1.gzkubectl-auth.1.gzkubectl-autoscale.1.gzkubectl-certificate-approve.1.gzkubectl-certificate-deny.1.gzkubectl-certificate.1.gzkubectl-cluster-info-dump.1.gzkubectl-cluster-info.1.gzkubectl-completion.1.gzkubectl-config-current-context.1.gzkubectl-config-delete-cluster.1.gzkubectl-config-delete-context.1.gzkubectl-config-delete-user.1.gzkubectl-config-get-clusters.1.gzkubectl-config-get-contexts.1.gzkubectl-config-get-users.1.gzkubectl-config-rename-context.1.gzkubectl-config-set-cluster.1.gzkubectl-config-set-context.1.gzkubectl-config-set-credentials.1.gzkubectl-config-set.1.gzkubectl-config-unset.1.gzkubectl-config-use-context.1.gzkubectl-config-view.1.gzkubectl-config.1.gzkubectl-cordon.1.gzkubectl-cp.1.gzkubectl-create-clusterrole.1.gzkubectl-create-clusterrolebinding.1.gzkubectl-create-configmap.1.gzkubectl-create-cronjob.1.gzkubectl-create-deployment.1.gzkubectl-create-ingress.1.gzkubectl-create-job.1.gzkubectl-create-namespace.1.gzkubectl-create-poddisruptionbudget.1.gzkubectl-create-priorityclass.1.gzkubectl-create-quota.1.gzkubectl-create-role.1.gzkubectl-create-rolebinding.1.gzkubectl-create-secret-docker-registry.1.gzkubectl-create-secret-generic.1.gzkubectl-create-secret-tls.1.gzkubectl-create-secret.1.gzkubectl-create-service-clusterip.1.gzkubectl-create-service-externalname.1.gzkubectl-create-service-loadbalancer.1.gzkubectl-create-service-nodeport.1.gzkubectl-create-service.1.gzkubectl-create-serviceaccount.1.gzkubectl-create-token.1.gzkubectl-create.1.gzkubectl-debug.1.gzkubectl-delete.1.gzkubectl-describe.1.gzkubectl-diff.1.gzkubectl-drain.1.gzkubectl-edit.1.gzkubectl-events.1.gzkubectl-exec.1.gzkubectl-explain.1.gzkubectl-expose.1.gzkubectl-get.1.gzkubectl-kustomize.1.gzkubectl-label.1.gzkubectl-logs.1.gzkubectl-options.1.gzkubectl-patch.1.gzkubectl-plugin-list.1.gzkubectl-plugin.1.gzkubectl-port-forward.1.gzkubectl-proxy.1.gzkubectl-replace.1.gzkubectl-rollout-history.1.gzkubectl-rollout-pause.1.gzkubectl-rollout-restart.1.gzkubectl-rollout-resume.1.gzkubectl-rollout-status.1.gzkubectl-rollout-undo.1.gzkubectl-rollout.1.gzkubectl-run.1.gzkubectl-scale.1.gzkubectl-set-env.1.gzkubectl-set-image.1.gzkubectl-set-resources.1.gzkubectl-set-selector.1.gzkubectl-set-serviceaccount.1.gzkubectl-set-subject.1.gzkubectl-set.1.gzkubectl-taint.1.gzkubectl-top-node.1.gzkubectl-top-pod.1.gzkubectl-top.1.gzkubectl-uncordon.1.gzkubectl-version.1.gzkubectl-wait.1.gzkubectl.1.gz/usr/share/doc/packages//usr/share/doc/packages/kubernetes1.27-client-common//usr/share/licenses//usr/share/licenses/kubernetes1.27-client-common//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35819/SUSE_SLE-15-SP4_Update/1571d27e092dd24659a0e69b66fac0f6-kubernetes1.27.SUSE_SLE-15-SP4_Updatedrpmxz5aarch64-suse-linuxdirectoryASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)}fJbQbash-completionutf-891c4966426d25c7f8f1cbd5f6165d46bc7a6f14fc404748a85dc4a797dd090f7?7zXZ !t/\]"k%ܙ]{~4Fl#_[/TsQ/8P)RGKcI|0͋w;,:ߋKadNx YO~|jҮ팼F>=!Hr~yJ}C0îD+5ea 芋dܷ'T̄]҈\6I$/\-[-;SWg*N} =?TLQg@6GB.7C*c\JXjDYіatr֜G}@/r4}_5e{1q`Jye(O-%ȎJ;I]ȢpGG):tTaz&= YIٔP-ʴőA("&?y6 %d15 #`&Eܩ@g?;ݎj`34ۚ_1>MQ"5L" # h'IqnM.@|v]6OV D@fLMPyt=7|4LC O {;jT%i* u`@CI༺=kUCnE] c6VϟjxMylO}BOƖ0يvu m]̠w--2'K]|QyB,g*r0vjv^BȢDrl0t0S0[4ۈ4 =aS}H|"C*k-_b^47ñF͗a76pJ 3ei 5?Lpkk>cPs➚*q3r̆ilOp/I[|Z s6IXD^ PJ(+Z! u p<(--4OɄOpR (7c YZ