Shinsuke Sugaya <******@****.***> 1576358545 +0900

Shinsuke Sugaya <******@****.***> 1576358545 +0900

  You can still access kubelet's `/healthz`, `/pods` and `/configz` by granting the caller `nodes/proxy` permission in RBAC but that also grants the caller permissions to exec, run and attach to containers on the nodes and doing so does not follow the least privilege principle. Granting callers more permissions than they need can give attackers an opportunity to escalate privileges. ([#12...

        // When
        Trans2QueryPathInformation trans = new Trans2QueryPathInformation(filename, informationLevel);

        // Then
        assertEquals(filename, trans.path, "The path should be set correctly.");
        assertEquals(ServerMessageBlock.SMB_COM_TRANSACTION2, trans.command, "The command should be SMB_COM_TRANSACTION2.");
        assertEquals(SmbComTransaction.TRANS2_QUERY_PATH_INFORMATION, trans.subCommand,

Shinsuke Sugaya <******@****.***> 1576358545 +0900

Shinsuke Sugaya <******@****.***> 1576358545 +0900

Shinsuke Sugaya <******@****.***> 1576358545 +0900

Shinsuke Sugaya <******@****.***> 1576358545 +0900

                    if (dr == null) {
                        if (trans == null) {
                            trans = getDc(domain, auth);
                            if (trans == null) {
                                return null;
                            }
                        }
                        dr = getReferral(trans, domain, root, path, auth);
                        if (dr != null) {

	}

	strippedAPIEndpoints := stripStandardPorts(apiEndpoints, globalMinioHost)

	// Prints credential, region and browser access.
	printServerCommonMsg(strippedAPIEndpoints)

	// Prints `mc` cli configuration message chooses
	// first endpoint as default.
	printCLIAccessMsg(strippedAPIEndpoints[0], "myminio")

	// Prints documentation message.
	printObjectAPIMsg()
	if globalIsDistErasure {