sets sysctls from pod config annotations

Signed-off-by: Mike Brown <brownwm@us.ibm.com>
This commit is contained in:
Mike Brown 2017-08-08 15:01:13 -05:00
parent 69251dd7ec
commit 8d37d97d01

View File

@ -306,7 +306,11 @@ func (c *criContainerdService) generateSandboxContainerSpec(id string, config *r
// TODO(random-liu): [P1] Set privileged. // TODO(random-liu): [P1] Set privileged.
// TODO(random-liu): [P2] Set sysctl from annotations. // Add sysctls
sysctls := config.GetLinux().GetSysctls()
for key, value := range sysctls {
g.AddLinuxSysctl(key, value)
}
// TODO(random-liu): [P2] Set apparmor and seccomp from annotations. // TODO(random-liu): [P2] Set apparmor and seccomp from annotations.