kubernetes1.27-client-common-1.27.16-150400.9.12.1<>,Lfp9|%@Mn@=xfgp~sr\M ߥ:ّlBƯ-4axw EDzm?6*)&R E?d' 5 Z "*qq q xq <q #mq #q%q'q**<q,,\,x-- -$-=(->8-H9-:/>1@9FAG\qH qIqXXYd\q]\q^bucdefluqvzi|Ckubernetes1.27-client-common1.27.16150400.9.12.1Kubernetes client tools common filesKubernetes client tools common filesfibs-power9-10SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxppc64le/usr/sbin/update-alternatives \ --install /usr/bin/kubectl kubectl /usr/bin/kubectl1.27 127if [ ! -f /usr/bin/kubectl1.27 ] ; then update-alternatives --remove kubectl /usr/bin/kubectl1.27 fi ,^9 I  }X `6;KNITQKwS  k Z7 3 B   2w??  M -   c; g gr/C 6h @x} A큤A큤ff!f!ff!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.27-1.27.16-150400.9.12.1.src.rpmkubernetes-client-commonkubernetes1.27-client-commonkubernetes1.27-client-common(ppc-64)    /bin/sh/bin/shkubernetes1.27-clientrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-client-common4.14.3f@f@f|fGFf! @f@f@e}@e7@eee`@e:Te e eRdd d@ddK@dK@d6@d6@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgpriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comeich@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.com- Follow up changes after go version bump to 1.22: - For ppc64le platform: disabled `export GOLDFLAGS='-linkmode=external'`. * to fix the build failure error: `-linkmode=external requires external (cgo) linking, but cgo is not enabled` - For linux/s390x platform: disabled building kubernetes binaries with `-buildmode=pie` * `-buildmode=pie` with "internal linking" is not yet supported on linux/s390x platform * ref: https://github.com/golang/go/blob/a63907808d14679c723e566cb83acc76fc8cafc2/src/internal/platform/supported.go#L223-L232 * ref: https://github.com/golang/go/issues/64875#issuecomment-1870734528- Update to version 1.27.16: * Add funcs in pkg/filesystem/util that can actually set file permissiosn on Windows and update container log dir perms to 660 on Windows * Bump images, dependencies and versions to go 1.22.5 and distroless iptables - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.22.5` * `BuildRequires: golang(API) = 1.22` * ref: https://github.com/kubernetes/kubernetes/blob/v1.27.16/build/dependencies.yaml#L96-L98- Update to version 1.27.15: * Bump images, dependencies and versions to go 1.21.11 and distroless iptables * Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable * Revert "scheduler: preallocation for NodeToStatusMap" * add an integration test when nodeAffinity specifies a non-existent node. * base on allNodes when calculating nextStartNodeIndex * backport verify-govulncheck.sh * Cherry pick #124618 to 1.27 * Fix NFS related issues on GCP/Ubuntu * Updated & added visibility to apiserver x509 test certificates expiring this year- Update to version 1.27.14: * scheduler: preallocation for NodeToStatusMap * add e2e test when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod should be scheduled normally if suitable nodes exists * test to catch illegal nodeNames returned by PreFilterResult * add integration test for pod with pvc has node-affinity to non-existent/existent nodes * hotfix when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod scheduling flow will abort immediately. * Fix PersistentVolumeLabel admission plugin on Azure * cluster/gce: upgrade cos-97-lts -> cos-109-lts * storage e2e: update hostpath and mock images * gce: fix test for non-existing instance in cloud * cloud-node-lifecycle controller: add fallback for empty providerID in shutdown- Update to version 1.27.13: * Add envFrom to serviceaccount admission plugin * [go] Bump images, dependencies and versions to go 1.21.9 and distroless iptables * [CVE-2023-45288] .*: bump x/net to v0.23.0, bsc#1229869 * Use the right feature gate when updating uncertain volumes * fix panic with SIGSEGV in kubeadm certs check-expiration * hack/tools: bump honnef.co/go/tools to v0.4.6 * Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. * Use DBG=1 for conformance verification * build: use -trimpath in non-DBG mode - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.9` * ref: https://github.com/kubernetes/kubernetes/blob/v1.27.13/build/dependencies.yaml#L96-L98- update .spec file to set FORCE_HOST_GO env variable, to force k8s build scripts use the local GOTOOLCHAIN version from the build pipeline (i.e. GOTOOLCHAIN='local') * ref: https://github.com/kubernetes/kubernetes/blob/9791f0d1f39f3f1e0796add7833c1059325d5098/hack/lib/golang.sh#L507- Update to version 1.27.12: * keep existing PDB conditions when updating status * remove --v arg from kubetest2-tester-ginkgo test args * ci: bump kind to latest for kms jobs * [go] Bump images, dependencies and versions to go 1.21.8 / distroless-iptables to v0.4.6 * [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0, bsc#1229867 * fix UT failure TestPrintIPAddressList * e2e_node: replace `registry.k8s.io/stress:v1` with agnhost * promote agnhost to v2.47 * fixing issue with GetCPUUsageNanoCores on Windows * Fix cleanup of file subpaths * etcd: Update to version 3.5.12 * build etcd image v3.5.12 - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.8` * ref: https://github.com/kubernetes/kubernetes/blob/v1.27.12/build/dependencies.yaml#L96-L98- Update to version 1.27.11: * [go] Bump images, dependencies and versions to go 1.21.7 / distroless-iptables to v0.4.5 * Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch" * Add processStartTime in metrics/slis * If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it. * Drop PendingChanges methods from change trackers, move into UpdateResults * Squash some unnecessarily-chained methods in the change trackers - Update .spec file to bump go version build requirements: * `BuildRequires: golang(API) = 1.21`- Use %patch -P N instead of deprecated %patchN.- Update .spec file to remove go version build requirements: * above build requirement causing build failures with following error: - `go: download go1.20.13 for linux/amd64: toolchain not available` - ref: https://go.dev/doc/toolchain - Update to version 1.27.10: * Revert "Graduate Evented PLEG to Beta" * [go] Bump images, dependencies and versions to go 1.20.13 and distroless iptables to 0.2.9 * e2e framework: adapt unit test to Go 1.22 * Handle edge cases in seat demand stats * .*: bump golang.org/x/tools to v0.16.1 * fix: 119921 * Use a separate function for checking if device was reconstructed * Add tests for checking of uncertain device paths * Fix device uncertain errors on reboot * fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times * etcd: Update to version 3.5.10 * fix: smb file share unavailable issue when it's deleted- Update to version 1.27.9: * run update-vendor script * [go] Bump images, dependencies and versions to go 1.20.12 * pass GOTOOLCHAIN to build containers * handle GOTOOLCHAIN in kube::golang::verify_go_version * Move adding GroupVersion log until after an update is confirmed * fix: requeue pods rejected by Extenders properly * Bump distroless-iptables to 0.2.8 based on Go 1.20.11 * Make StatefulSet restart pods with phase Succeeded * run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly * update filepath-securejoin dependency to 0.2.4 to fix security vulnerability * Fix panic when process RunScorePlugins for cap out of range * e2e: bootstrap vsphere tests earlier- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.11` - Update to version 1.27.8: * Use golang library instead of mklink * [go] Bump images, dependencies and versions to go 1.20.11 * Fixing attempt to deploy past allocatable memory limits test on Windows * bump golang.org/grpc to v1.56.3 * Add more test cases ensuring nextScheduleTimeDuration is never < 0 * Modify mostRecentScheduleTime to return more detailed information about missed schedules * Fixing gmsa-webhook install steps for Windows GMSA full tests * removing the import of "k8s.io/utils/ptr" because it was introduced after 1.28 * Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate * KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local * Use Patch instead of SSA for Pod Disruption condition * service controller: improve node lifecycle updates * Fix panic testing intree vSphere dynamic PV. * Retry operations if CSI Driver Isn't Found by Treating this Error as Transient- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.10` - Update to version 1.27.7: * Release commit for Kubernetes v1.27.7 * Register UnauthenticatedHTTP2DOSMitigation into kube components (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Disable UnauthenticatedHTTP2DOSMitigation by default (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Prevent rapid reset http2 DOS on API server (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Fix concurrent write when filling PVC labels * Modify test PVC to detect concurrent map write bug * [go] Bump images, dependencies and versions to go 1.20.10 * Fix to honor PDB with an empty selector `{}` * .: bump golang.org/x/net to v0.17.0 * Mark a volume as uncertain-attached after detach error * Add nil checks for hpa object target type values * [go] Bump images, versions and deps to use Go 1.20.9 * bump etcd cluster image to 3.5.9 * cronjob controller: ensure already existing jobs are added to Active list of cronjobs * change rolling update logic to exclude sunsetting nodes * vsphere: adapt to govmomi bump * .: bump govmomi to v0.30.6 * move check for noop managed field timestamp updates * mount-utils: fix flaky test 'TestFormat' * Increase range of job_sync_duration_seconds * sync Service API status rest storage * updating dependencies.yaml for etcd v3.5.9 version * use upstream etcd github path instead of redirecting one * update etcd version in install.sh to 3.5.9 * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.6 * fixup patcher test to include field manager * remove checks for fieldmanager from handlers * include apiextensions types in apiextensions generated openapi * fix scale not being given gvk in CRD openapi schemas * add OpenAPIV3 config to tests and server options * add error for attempting to initialize field manager with nil typeconverter * supply deduced typeconverter to apiserver tests * Throw error if OpenAPIV3 config is not provided * e2e pods: fix WaitForPodsResponding retry * scheduler: start scheduling attempt with clean UnschedulablePlugins- fixes for bsc#1214406 - update `Wants` directive in [Unit] section of `kubelet.service`: * add: `containerd.service` * remove: `docker.service` - updating container runtime prerequisites: (Refer: k8s.io/docs/setup/production-environment/container-runtimes/#install-and-configure-prerequisites) * update `90-kubeadm.conf` to add below iptables rules: - net.bridge.bridge-nf-call-iptables = 1 - net.bridge.bridge-nf-call-ip6tables = 1 * update `kubeadm.conf` to add `overlay` kernel module * update .spec file to: - add post-installation scriptlet for `kubeadm` package to enable iptables rules defined in `90-kubeadm.conf` using sysctl - add conditional checks to load kernel modules (br_netfilter, overlay) in `kubelet-common` package post-installation scriptlet - update `kubelet-common` post scriptlet to correctly update `KUBELET_VER` var in `/etc/sysconfig/kubelet` file based on fillup template - add below to `kubelet` subpackage to recommend installing correct version of package providing `kubernetes-kubelet-common` : * `Recommends: kubernetes-kubelet-common = %{version}` - add below to `kubeadm` subpackage to recommend installing correct version of `kubelet` and `kubelet-common` packages: * `Recommends: kubernetes%{baseversion}-kubelet`- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.8` - Update to version 1.27.6: * Release commit for Kubernetes v1.27.6 * [go] Bump images, versions and deps to use Go 1.20.8 * fix: concurrent map writes in e2e test * Automated cherry pick of #119776: Fix a job quota related deadlock (#120320) * Fix OpenAPI aggregation cleanup * Fallback to legacy discovery on a wider range of conditions in aggregator * apiextensions-apiserver: generate applyconfigurations * TopologyAwareHints: Take lock in HasPopulatedHints * Mark Job onPodConditions as optional in pod failure policy * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.5 * Incorporating feedback on 119341 * check for overflow * Fix CEL cost handling of zero length replacement strings * generate ReportingInstance and ReportingController in Event * Pass Pinned field to kubecontainer.Image * prep for go1.21: use -e in go list * Skip apiserver_admission_webhook_request_total during context-canceled * Ignore context canceled from validate and mutate webhook failopen metric * kubeadm: fix nil pointer when etcd member is already removed * update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 * fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap * Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip * Issue 4230: remove readiness check for cache exclusion * add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3 * update openapi * expose apiregistration.k8s.io into OpenAPIV3 * fix openapi/v3 non local apiservices aggregation * node: devicemgr: topomgr: add logs * e2e: node: add test to check device-requiring pods are cleaned up * e2e: node: devices: improve the node reboot test * e2e: node: devicemanager: update tests * kubelet: devices: skip allocation for running pods * Add test coverage of result size of string operations * Bump cel-go to v0.12.7- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.7` - Update to version 1.27.5: * Use environment varaibles for parameters in Powershell * Use env varaibles for passing path * Avoid returning nil responseKind in v1beta1 aggregated discovery * [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.7 * e2e_node: move getSampleDevicePluginPod to device_plugin_test.go * fix 'pod' in kubelet prober metrics * priority & fairness: support dynamically configuring work estimator max seats * Add mininumKubelet tag into ReadWriteOncePod test * Include ignored pods when computing backoff delay for Job pod failures * Adjust the algorithm for computing the pod finish time * Rename updateReconstructedFromAPIServer * Rename volumesNeedDevicePath * Update volumesInUse after attachability is confirmed * Add uncertain state of volume attach-ability * Refactor FindAttachablePluginBySpec out of CSI code path * kubeadm: backdate generated CAs by 5 minutes * client-go: allow to set NotBefore in NewSelfSignedCACert() * e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer' * Fix a data race in TopologyCache * Fix TopologyAwareHint not working when zone label is added after Node creation- Restore the correct content of the kublet wrapper script (boo#1213829).- Update: `BuildRequires: go >= 1.20.6` - Update to version 1.27.4: * [release-1.27] releng/go: Bump images, versions and deps to use Go 1.20.6 * Fix the converts an empty string to nil. * Add unit tests for parallel StatefulSet create & delete * Parallel StatefulSet pod create & delete * Refactor StatefulSet controller update logic * Only declare job as finished after removing all finalizers * Automated cherry pick of #118716 upstream release 1.27 (#118911) * Hide numberOfMissedSchedules as an algorithm internal number * Update schedule logic to properly calculate missed schedules * Automated cherry pick of #118805: test comment should match the code in podgc (#118913) * call ./hack/update-vendor.sh * kubeadm: remove function pointer comparison in phase test * CHANGELOG-1.27: Add note for AWS in-tree provider removal * Updating the nodeAffinity of gated pods having nil affinity should be allowed * fix the existing problem (0 SerialNumber in all certificate) as part of this PR in a separate commit * update serial number to a valid non-zero number in ca certificate * Delete CRDs created during field validation tests. * kubectl explain should work for both cluster and namespace resources and without a GET method * always execute condition for wait.PollUntilContextTimeout with immediate=true * Review remarks to improve HandlePodCleanups in kubelet * Fix the deletion of rejected pods * Unset gated pod info timestamp in addToActiveQ * deps: Bump to cAdvisor v0.47.2 * Make etcd component status consistent with health probes * e2e storage: terminate worker quietly on test completion * Fix flaky persistent volumes e2e test * Set the node-ips annotation correctly with CloudDualStackNodeIPs * Fix the git-repo test error caused by the correct use of loop variables * dra scheduler plugin test: fix loopvar bug and "reserve" expected data * Add node check to vSphere cloud provider * Adding additional validations to queried endpoint list iteration.- Update: `BuildRequires: go >= 1.20.5` - Update to version 1.27.3: * Release commit for Kubernetes v1.27.3 * update-vendor: update vendored go.sums * releng/go: Update images, dependencies and version to Go 1.20.5 * kube-proxy avoid race condition using LocalModeNodeCIDR * Add ephemeralcontainer to imagepolicy securityaccount admission plugin * supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 * e2e framework retry on Service unavailable errors * e2e: apply timeout for CSI Storage Capacity test only to node * Add DisruptionTarget condition when preempting for critical pod * update webhook test to go 1.21 * Test APIService safe handling at startup * Fix waiting for CRD sync at server start * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet * kubeadm: Make etcd member removal idempotent * kubeadm: Add etcd client unit tests * kubeadm: Use internal etcd client through an interface- Update: `BuildRequires: go >= 1.20.4` - Update to version 1.27.2: * Release commit for Kubernetes v1.27.2 * OpenAPI V3 invalid document checks * QueryParamVerifier falls back on invalid v3 document * QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents * kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade * benchmark test to evaluate the overhead of podMatchesScopeFunc * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope * Update podFailurePolicy comments from alpha-level to beta * Disable NewVolumeManagerReconstruction feature gate * releng/go: Update images, dependencies and version to Go 1.20.4 * Bump konnectivity-client to v0.1.2 * Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP * node: device-plugin: e2e: Additional test cases * node: device-plugin: add node reboot test scenario * node: device-plugin: e2e: Capture pod admission failure * node: device-mgr: e2e: adapt to sample device plugin refactoring * node: device-mgr: e2e: Update the e2e test to reproduce issue:109595 * node: device-mgr: e2e: Implement End to end test * node: device-mgr: Handle recovery by checking if healthy devices exist * node: device-plugin: e2e: Add test case for kubelet restart * node: device-plugin: e2e: Provide sleep intervals via constants * node: device-plugin: e2e: Update test description to make it explicit * node: device-plugin: e2e: Isolate test to pod restart scenario * node: device-plugin: e2e: Annotate device check with error message * node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount * node: device-plugins: e2e: Refactor parse log to return string and error * Update kube-openapi to fix race * Use absolute path instead requestURI in openapiv3 discovery * proxy/ipvs: don't bind nodeips to the dummy device * proxy/ipvs: add a GetAllLocalAddressesExcept() function * Refactors discovery content-type and helper functions * Fix scheduler performance regression after adding plugin metrics * Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go * Fix bug where CEL listOfString.join() results in unexpected error * Fix directory mismatch for `volume.SetVolumeOwnership()` * Fix stomping os env in kubectl e2e tests * KCCM: add providerID predicate to service controller * Re-work logic in shouldSyncUpdatedNode * add log includes pod preemption details * verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones * deflake: Add retry with timeout to wait for final conditions * kubelet: Mark new terminal pods as non-finished in pod worker * test: Add node e2e to restart kubelet while pod is terminating * kubelet: Ensure pods that have not started track a pendingUpdate * changelog: fix formatting issue with v1.27 change log * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1 * use case-insensitive header keys for http probes * kube-aggregator: correctly use client-go TLS cache with custom dialer * api: encode NamespacedName with lower case in JSON * Do not look at VPC-related resources outside the cluster's network * Fix azure disk e2e after migration * vendor: bump runc to 1.1.6 * CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 * fix: the volume is not detached after the pod and PVC objects are deleted * Return error for localhost seccomp type with no localhost profile defined- Update `Requires` in the "kubernetes1.27-client" pkg to: * Requires: kubernetes%{baseversion}-client-common - Remove following `Obsoletes` from the "kubernetes1.27-client-common" pkg: * Obsoletes: kubernetes%{baseversionminus1}-client-common- Update to version 1.27.1: * Release commit for Kubernetes v1.27.1 * fix: add the bug as a known issue o on the v1.26 release note * Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ" * Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" * Revert "CR conversion: protect from converter input edits" * kubelet: Do not mutate pods in the pod manager * Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0- update patches: * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- initial package for Kubernetes v1.27.0/bin/sh/bin/shibs-power9-10 1727179735  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopq1.27.161.27.16-150400.9.12.11.27.16-150400.9.12.1kubernetes1.27-client-commonCONTRIBUTING.mdREADME.mdkubernetes1.27-client-commonLICENSEkubectl-alpha.1.gzkubectl-annotate.1.gzkubectl-api-resources.1.gzkubectl-api-versions.1.gzkubectl-apply-edit-last-applied.1.gzkubectl-apply-set-last-applied.1.gzkubectl-apply-view-last-applied.1.gzkubectl-apply.1.gzkubectl-attach.1.gzkubectl-auth-can-i.1.gzkubectl-auth-reconcile.1.gzkubectl-auth-whoami.1.gzkubectl-auth.1.gzkubectl-autoscale.1.gzkubectl-certificate-approve.1.gzkubectl-certificate-deny.1.gzkubectl-certificate.1.gzkubectl-cluster-info-dump.1.gzkubectl-cluster-info.1.gzkubectl-completion.1.gzkubectl-config-current-context.1.gzkubectl-config-delete-cluster.1.gzkubectl-config-delete-context.1.gzkubectl-config-delete-user.1.gzkubectl-config-get-clusters.1.gzkubectl-config-get-contexts.1.gzkubectl-config-get-users.1.gzkubectl-config-rename-context.1.gzkubectl-config-set-cluster.1.gzkubectl-config-set-context.1.gzkubectl-config-set-credentials.1.gzkubectl-config-set.1.gzkubectl-config-unset.1.gzkubectl-config-use-context.1.gzkubectl-config-view.1.gzkubectl-config.1.gzkubectl-cordon.1.gzkubectl-cp.1.gzkubectl-create-clusterrole.1.gzkubectl-create-clusterrolebinding.1.gzkubectl-create-configmap.1.gzkubectl-create-cronjob.1.gzkubectl-create-deployment.1.gzkubectl-create-ingress.1.gzkubectl-create-job.1.gzkubectl-create-namespace.1.gzkubectl-create-poddisruptionbudget.1.gzkubectl-create-priorityclass.1.gzkubectl-create-quota.1.gzkubectl-create-role.1.gzkubectl-create-rolebinding.1.gzkubectl-create-secret-docker-registry.1.gzkubectl-create-secret-generic.1.gzkubectl-create-secret-tls.1.gzkubectl-create-secret.1.gzkubectl-create-service-clusterip.1.gzkubectl-create-service-externalname.1.gzkubectl-create-service-loadbalancer.1.gzkubectl-create-service-nodeport.1.gzkubectl-create-service.1.gzkubectl-create-serviceaccount.1.gzkubectl-create-token.1.gzkubectl-create.1.gzkubectl-debug.1.gzkubectl-delete.1.gzkubectl-describe.1.gzkubectl-diff.1.gzkubectl-drain.1.gzkubectl-edit.1.gzkubectl-events.1.gzkubectl-exec.1.gzkubectl-explain.1.gzkubectl-expose.1.gzkubectl-get.1.gzkubectl-kustomize.1.gzkubectl-label.1.gzkubectl-logs.1.gzkubectl-options.1.gzkubectl-patch.1.gzkubectl-plugin-list.1.gzkubectl-plugin.1.gzkubectl-port-forward.1.gzkubectl-proxy.1.gzkubectl-replace.1.gzkubectl-rollout-history.1.gzkubectl-rollout-pause.1.gzkubectl-rollout-restart.1.gzkubectl-rollout-resume.1.gzkubectl-rollout-status.1.gzkubectl-rollout-undo.1.gzkubectl-rollout.1.gzkubectl-run.1.gzkubectl-scale.1.gzkubectl-set-env.1.gzkubectl-set-image.1.gzkubectl-set-resources.1.gzkubectl-set-selector.1.gzkubectl-set-serviceaccount.1.gzkubectl-set-subject.1.gzkubectl-set.1.gzkubectl-taint.1.gzkubectl-top-node.1.gzkubectl-top-pod.1.gzkubectl-top.1.gzkubectl-uncordon.1.gzkubectl-version.1.gzkubectl-wait.1.gzkubectl.1.gz/usr/share/doc/packages//usr/share/doc/packages/kubernetes1.27-client-common//usr/share/licenses//usr/share/licenses/kubernetes1.27-client-common//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35819/SUSE_SLE-15-SP4_Update/1571d27e092dd24659a0e69b66fac0f6-kubernetes1.27.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linuxdirectoryASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) 'p f9a+bash-completionutf-8a7eee0f8b9776a3a127bca8f6fe24aee053583cd09331f9228cb5e106b83f1d7?7zXZ !t/[]"k%ܙ]{~4Fl#_[/TsQ/8P)RGKcI|0͋En*[ 4U5#e%Ӹ5va[l;|W?ť%کSxL2-S= ra"ci~J yv>XA0m9)U0)~vi]\U$ÈǦ\HG5zW~ޗEZ@r1hNT$ tPa{ￋd[5I2t@;zǎ<-S+4-cOF&_FLR`m1P+?zX )f(\,ׯ5P3VPb]!6-_ڡ&DY2. a)3[_]վjwYw`W٪!G9I`٣J 3싰SzԄm:@%MWxv޶o 'ɟMr'Ҳc{/:66:>9iuܶdDs4Iõee 1C`Vi>NKuP",lNJ>t%@kkCS_kyG=5S'8ۙOG7VxJڑ9|_81A8lsTzQzA uR*q~lƖdgy\ ۽ kmf{DR e!BػeâR F3kB Eӓ)#Zo&[ywHZ*P s氉`%!G*-HrT1νOe%QE{ܭʕyXR@ C JI$ak&Kt.blFukqnu+Jz6A|čD -EhKb4)(l=/789GA~2 `-or>.RM