97dfa7f556
When the kubelet sends the uid/gid mappings for a mount, just pass them down to the OCI runtime. OCI runtimes support this since runc 1.2 and crun 1.8.1. And whenever we add mounts (container mounts or image spec volumes) and userns are requested by the kubelet, we use those mappings in the mounts so the mounts are idmapped correctly. If no userns is used, we don't send any mappings which just keeps the current behavior. Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com> |
||
|---|---|---|
| .. | ||
| container.go | ||
| spec_darwin_opts.go | ||
| spec_linux_opts.go | ||
| spec_linux_test.go | ||
| spec_linux.go | ||
| spec_nonlinux.go | ||
| spec_nonwindows.go | ||
| spec_opts_test.go | ||
| spec_opts.go | ||
| spec_windows_opts.go | ||
| spec_windows_test.go | ||
| spec_windows.go | ||