525b8e5cd6
The field in fact says that the container runtime should relabel a volume when running a container with it, it does not say that the volume supports SELinux. For example, NFS can support SELinux, but we don't want NFS volumes relabeled, because they can be shared among several Pods.
57 lines
1.5 KiB
Go
57 lines
1.5 KiB
Go
/*
|
|
Copyright 2017 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package flexvolume
|
|
|
|
import (
|
|
"k8s.io/klog/v2"
|
|
|
|
"k8s.io/kubernetes/pkg/volume"
|
|
)
|
|
|
|
type mounterDefaults flexVolumeMounter
|
|
|
|
// SetUpAt is part of the volume.Mounter interface.
|
|
// This implementation relies on the attacher's device mount path and does a bind mount to dir.
|
|
func (f *mounterDefaults) SetUpAt(dir string, mounterArgs volume.MounterArgs) error {
|
|
klog.Warning(logPrefix(f.plugin), "using default SetUpAt to ", dir)
|
|
|
|
src, err := f.plugin.getDeviceMountPath(f.spec)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := doMount(f.mounter, src, dir, "auto", []string{"bind"}); err != nil {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// Returns the default volume attributes.
|
|
func (f *mounterDefaults) GetAttributes() volume.Attributes {
|
|
klog.V(5).Info(logPrefix(f.plugin), "using default GetAttributes")
|
|
return volume.Attributes{
|
|
ReadOnly: f.readOnly,
|
|
Managed: !f.readOnly,
|
|
SELinuxRelabel: f.flexVolume.plugin.capabilities.SELinuxRelabel,
|
|
}
|
|
}
|
|
|
|
func (f *mounterDefaults) CanMount() error {
|
|
return nil
|
|
}
|