Skip to content

K
k3s
Unverified Commit 6b7c39a4 authored by Jess Frazelle's avatar Jess Frazelle
Browse files
Options

pkg/kubelet/apis/cri/runtime: add masked_paths and readonly_paths

generate runtime protobufs Signed-off-by: 's avatarJess Frazelle <acidburn@microsoft.com>
parent 58ead1c1
Expand all Hide whitespace changes
Inline Side-by-side
Showing with 6 additions and 0 deletions
pkg/kubelet/apis/cri/runtime/v1alpha2/api.proto
View file @ 6b7c39a4
...@@ -593,6 +593,12 @@ message LinuxContainerSecurityContext { ...@@ -593,6 +593,12 @@ message LinuxContainerSecurityContext {
// no_new_privs defines if the flag for no_new_privs should be set on the // no_new_privs defines if the flag for no_new_privs should be set on the
// container. // container.
bool no_new_privs = 11; bool no_new_privs = 11;
// masked_paths is a slice of paths that should be masked by the container
// runtime, this can be passed directly to the OCI spec.
repeated string masked_paths = 13;
// readonly_paths is a slice of paths that should be set as readonly by the
// container runtime, this can be passed directly to the OCI spec.
repeated string readonly_paths = 14;
} }
// LinuxContainerConfig contains platform-specific configuration for // LinuxContainerConfig contains platform-specific configuration for
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment