Only set sysctls for infra containers
This commit is contained in:
		| @@ -687,18 +687,20 @@ func (dm *DockerManager) runContainer( | |||||||
| 	} | 	} | ||||||
|  |  | ||||||
| 	// Set sysctls if requested | 	// Set sysctls if requested | ||||||
| 	sysctls, unsafeSysctls, err := api.SysctlsFromPodAnnotations(pod.Annotations) | 	if container.Name == PodInfraContainerName { | ||||||
| 	if err != nil { | 		sysctls, unsafeSysctls, err := api.SysctlsFromPodAnnotations(pod.Annotations) | ||||||
| 		dm.recorder.Eventf(ref, api.EventTypeWarning, events.FailedToCreateContainer, "Failed to create docker container %q of pod %q with error: %v", container.Name, format.Pod(pod), err) | 		if err != nil { | ||||||
| 		return kubecontainer.ContainerID{}, err | 			dm.recorder.Eventf(ref, api.EventTypeWarning, events.FailedToCreateContainer, "Failed to create docker container %q of pod %q with error: %v", container.Name, format.Pod(pod), err) | ||||||
| 	} | 			return kubecontainer.ContainerID{}, err | ||||||
| 	if len(sysctls)+len(unsafeSysctls) > 0 { |  | ||||||
| 		hc.Sysctls = make(map[string]string, len(sysctls)+len(unsafeSysctls)) |  | ||||||
| 		for _, c := range sysctls { |  | ||||||
| 			hc.Sysctls[c.Name] = c.Value |  | ||||||
| 		} | 		} | ||||||
| 		for _, c := range unsafeSysctls { | 		if len(sysctls)+len(unsafeSysctls) > 0 { | ||||||
| 			hc.Sysctls[c.Name] = c.Value | 			hc.Sysctls = make(map[string]string, len(sysctls)+len(unsafeSysctls)) | ||||||
|  | 			for _, c := range sysctls { | ||||||
|  | 				hc.Sysctls[c.Name] = c.Value | ||||||
|  | 			} | ||||||
|  | 			for _, c := range unsafeSysctls { | ||||||
|  | 				hc.Sysctls[c.Name] = c.Value | ||||||
|  | 			} | ||||||
| 		} | 		} | ||||||
| 	} | 	} | ||||||
|  |  | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user
	 Dr. Stefan Schimanski
					Dr. Stefan Schimanski