DevAndTools/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-07-07 18:58:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add privileged_without_host_devices support (#7343)

Browse Source 
When privileged is enabled for a container, all the `/dev/*` block
devices from the host are mounted into the guest. The
`privileged_without_host_devices` flag prevents host devices from
being passed to privileged containers.

More information:
* https://github.com/containerd/cri/pull/1225
* https://github.com/cri-o/cri-o/commit/1d0f68156ba382651c776a44f156614c4fcf981d

(cherry picked from commit dc5df57c26)
This commit is contained in:
Victor Morales
2021-03-08 00:17:44 -08:00
committed by Kubernetes Prow Robot
parent 704a054064
commit 01e527abf1
3 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/container-engine/containerd/defaults/main.yml
+1
View File
@@ -65,6 +65,7 @@ containerd_default_runtime:
# type: io.containerd.kata.v2
# engine: ""
# root: ""
# privileged_without_host_devices: true
containerd_runtimes: []
containerd_untrusted_runtime_type: ''