sets sysctls from pod config annotations
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
This commit is contained in:
parent
69251dd7ec
commit
8d37d97d01
@ -306,7 +306,11 @@ func (c *criContainerdService) generateSandboxContainerSpec(id string, config *r
|
|||||||
|
|
||||||
// TODO(random-liu): [P1] Set privileged.
|
// TODO(random-liu): [P1] Set privileged.
|
||||||
|
|
||||||
// TODO(random-liu): [P2] Set sysctl from annotations.
|
// Add sysctls
|
||||||
|
sysctls := config.GetLinux().GetSysctls()
|
||||||
|
for key, value := range sysctls {
|
||||||
|
g.AddLinuxSysctl(key, value)
|
||||||
|
}
|
||||||
|
|
||||||
// TODO(random-liu): [P2] Set apparmor and seccomp from annotations.
|
// TODO(random-liu): [P2] Set apparmor and seccomp from annotations.
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user