List disallowed ephemeral container fields

Listing these explicitly makes it easier to determine whether a new
Container field has been evaluated for use with ephemeral containers.
This does not change the behavior of ephemeral containers.
This commit is contained in:
Lee Verberne
2021-10-19 17:27:26 -04:00
parent 40e7689f0e
commit d874cf8ffd

View File

@@ -79,9 +79,15 @@ var allowedEphemeralContainerFields = map[string]bool{
"Command": true, "Command": true,
"Args": true, "Args": true,
"WorkingDir": true, "WorkingDir": true,
"Ports": false,
"EnvFrom": true, "EnvFrom": true,
"Env": true, "Env": true,
"Resources": false,
"VolumeMounts": true, "VolumeMounts": true,
"LivenessProbe": false,
"ReadinessProbe": false,
"StartupProbe": false,
"Lifecycle": false,
"TerminationMessagePath": true, "TerminationMessagePath": true,
"TerminationMessagePolicy": true, "TerminationMessagePolicy": true,
"ImagePullPolicy": true, "ImagePullPolicy": true,