Defer multitenant key model to image auth discussion
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
This commit is contained in:
@@ -243,9 +243,6 @@ const (
|
||||
RuntimeUntrusted = "untrusted"
|
||||
// RuntimeDefault is the implicit runtime defined for ContainerdConfig.DefaultRuntime
|
||||
RuntimeDefault = "default"
|
||||
// EncryptionKeyModelMultitenant is the key model where keys are obtained from
|
||||
// kubernetes ImageDecryptSecrets
|
||||
EncryptionKeyModelMultitenant = "multitenant"
|
||||
// EncryptionKeyModelNode is the key model where key for encrypted images reside
|
||||
// on the worker nodes
|
||||
EncryptionKeyModelNode = "node"
|
||||
|
||||
@@ -165,7 +165,6 @@ func (c *criService) CreateContainer(ctx context.Context, r *runtime.CreateConta
|
||||
// rootfs readonly (requested by spec.Root.Readonly).
|
||||
customopts.WithNewSnapshot(id, containerdImage),
|
||||
}
|
||||
|
||||
if len(volumeMounts) > 0 {
|
||||
mountMap := make(map[string]string)
|
||||
for _, v := range volumeMounts {
|
||||
|
||||
Reference in New Issue
Block a user