Commit 5eb2ec73 authored by Darren Shepherd's avatar Darren Shepherd

Remove ProcMountType

parent 423354b7
...@@ -282,17 +282,15 @@ func DropDisabledRunAsGroupField(podSpec *api.PodSpec) { ...@@ -282,17 +282,15 @@ func DropDisabledRunAsGroupField(podSpec *api.PodSpec) {
// DropDisabledProcMountField removes disabled fields from PodSpec related // DropDisabledProcMountField removes disabled fields from PodSpec related
// to ProcMount // to ProcMount
func DropDisabledProcMountField(podSpec *api.PodSpec) { func DropDisabledProcMountField(podSpec *api.PodSpec) {
if !utilfeature.DefaultFeatureGate.Enabled(features.ProcMountType) { defProcMount := api.DefaultProcMount
defProcMount := api.DefaultProcMount for i := range podSpec.Containers {
for i := range podSpec.Containers { if podSpec.Containers[i].SecurityContext != nil {
if podSpec.Containers[i].SecurityContext != nil { podSpec.Containers[i].SecurityContext.ProcMount = &defProcMount
podSpec.Containers[i].SecurityContext.ProcMount = &defProcMount
}
} }
for i := range podSpec.InitContainers { }
if podSpec.InitContainers[i].SecurityContext != nil { for i := range podSpec.InitContainers {
podSpec.InitContainers[i].SecurityContext.ProcMount = &defProcMount if podSpec.InitContainers[i].SecurityContext != nil {
} podSpec.InitContainers[i].SecurityContext.ProcMount = &defProcMount
} }
} }
} }
......
...@@ -25,9 +25,7 @@ import ( ...@@ -25,9 +25,7 @@ import (
// DropDisabledAlphaFields removes disabled fields from the pod security policy spec. // DropDisabledAlphaFields removes disabled fields from the pod security policy spec.
// This should be called from PrepareForCreate/PrepareForUpdate for all resources containing a od security policy spec. // This should be called from PrepareForCreate/PrepareForUpdate for all resources containing a od security policy spec.
func DropDisabledAlphaFields(pspSpec *policy.PodSecurityPolicySpec) { func DropDisabledAlphaFields(pspSpec *policy.PodSecurityPolicySpec) {
if !utilfeature.DefaultFeatureGate.Enabled(features.ProcMountType) { pspSpec.AllowedProcMountTypes = nil
pspSpec.AllowedProcMountTypes = nil
}
if !utilfeature.DefaultFeatureGate.Enabled(features.RunAsGroup) { if !utilfeature.DefaultFeatureGate.Enabled(features.RunAsGroup) {
pspSpec.RunAsGroup = nil pspSpec.RunAsGroup = nil
} }
......
...@@ -251,12 +251,6 @@ const ( ...@@ -251,12 +251,6 @@ const (
// Enable resource quota scope selectors // Enable resource quota scope selectors
ResourceQuotaScopeSelectors utilfeature.Feature = "ResourceQuotaScopeSelectors" ResourceQuotaScopeSelectors utilfeature.Feature = "ResourceQuotaScopeSelectors"
// owner: @jessfraz
// alpha: v1.12
//
// Enables control over ProcMountType for containers.
ProcMountType utilfeature.Feature = "ProcMountType"
// owner: @janetkuo // owner: @janetkuo
// alpha: v1.12 // alpha: v1.12
// //
...@@ -313,7 +307,6 @@ var defaultKubernetesFeatureGates = map[utilfeature.Feature]utilfeature.FeatureS ...@@ -313,7 +307,6 @@ var defaultKubernetesFeatureGates = map[utilfeature.Feature]utilfeature.FeatureS
PodReadinessGates: {Default: true, PreRelease: utilfeature.Beta}, PodReadinessGates: {Default: true, PreRelease: utilfeature.Beta},
KubeletPluginsWatcher: {Default: true, PreRelease: utilfeature.GA}, KubeletPluginsWatcher: {Default: true, PreRelease: utilfeature.GA},
ResourceQuotaScopeSelectors: {Default: true, PreRelease: utilfeature.Beta}, ResourceQuotaScopeSelectors: {Default: true, PreRelease: utilfeature.Beta},
ProcMountType: {Default: false, PreRelease: utilfeature.Alpha},
TTLAfterFinished: {Default: false, PreRelease: utilfeature.Alpha}, TTLAfterFinished: {Default: false, PreRelease: utilfeature.Alpha},
KubeletPodResources: {Default: false, PreRelease: utilfeature.Alpha}, KubeletPodResources: {Default: false, PreRelease: utilfeature.Alpha},
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment