Skip to content

K8S pod “securityContext.privileged: true” unable to convert containerd "noNewPrivileges: true“ #6399

@openpick

Description

@openpick

Description

K8S version: v1.18.8
pod yaml
securityContext: privileged: true

containerd
--privileged=true

According to the usual practice, the above two paragraphs should be equivalent.

Describe the results you received and expected

When use K8S privileged: true, Containerd gives an empty parameter.

When use ctr run --privileged, Containerd gives "noNewPrivileges: true“.

What version of containerd are you using?

d95d0153625a988b4c7e5bc37d4aa71db3ac597a

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions