Fix rootless regression in 1.22 (Set KubeletInUserNamespace gate) (#3901)

Fix issue 3900 Kubernetes 1.22 requires `KuebletInUserNamespace` feature gate to be set for rootless: https://kubernetes.io/docs/tasks/administer-cluster/kubelet-in-userns/#userns-the-hard-waySigned-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>

Fix rootless regression in 1.22 (Set KubeletInUserNamespace gate) (#3901)
176451f4 · Akihiro Suda · GitHub · 66dacc6e · 176451f4
Unverified Commit 176451f4 authored Aug 25, 2021 by Akihiro Suda Committed by GitHub Aug 24, 2021
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

agent_linux.go pkg/daemons/agent/agent_linux.go +1 -0

No files found.
--- a/pkg/daemons/agent/agent_linux.go
+++ b/pkg/daemons/agent/agent_linux.go
@@ -18,6 +18,7 @@ import (
 )

 func createRootlessConfig(argsMap map[string]string, hasCFS, hasPIDs bool) {
+	argsMap["feature-gates=KubeletInUserNamespace"] = "true"
 	// "/sys/fs/cgroup" is namespaced
 	cgroupfsWritable := unix.Access("/sys/fs/cgroup", unix.W_OK) == nil
 	if hasCFS && hasPIDs && cgroupfsWritable {