• Filipe Brandenburger's avatar
    Refactor handling of IpcMode for the actual container · ab219f27
    Filipe Brandenburger authored
    Having the field set in modifyCommonNamespaceOptions is misleading,
    since for the actual container it is later unconditionally overwritten
    to point to the sandbox container.
    
    So let's move its setting to modifyHostOptionsForSandbox (renamed from
    modifyHostNetworkOptionForSandbox as it's not about network only), since
    that reflects what actually happens in practice.
    
    This commit is purely a refactor, it doesn't change any behavior.
    ab219f27
security_context.go 7 KB