External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-17 11:10:09 -03:30
Code Issues Packages Projects Releases Wiki Activity

Add privileged_without_host_devices support (#7343)

Browse Source 
When privileged is enabled for a container, all the `/dev/*` block
devices from the host are mounted into the guest. The
`privileged_without_host_devices` flag prevents host devices from
being passed to privileged containers.

More information:
* https://github.com/containerd/cri/pull/1225
* 1d0f68156b

(cherry picked from commit dc5df57c26)
This commit is contained in:
Victor Morales
2021-03-08 00:17:44 -08:00
committed by Kubernetes Prow Robot
parent 704a054064
commit 01e527abf1
3 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/container-engine/containerd/defaults/main.yml
View File

@@ -65,6 +65,7 @@ containerd_default_runtime:
# type: io.containerd.kata.v2
# engine: ""
# root: ""
# privileged_without_host_devices: true
containerd_runtimes: []
containerd_untrusted_runtime_type: ''