Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

podman pod create needs to support --security-opt #12173

Closed
rhatdan opened this issue Nov 4, 2021 · 1 comment · Fixed by #12208
Closed

podman pod create needs to support --security-opt #12173

rhatdan opened this issue Nov 4, 2021 · 1 comment · Fixed by #12208
Assignees
Labels
locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.

Comments

@rhatdan
Copy link
Member

rhatdan commented Nov 4, 2021

We need to be able to disable SELinux, Seccomp, apparmor support for a POD,especially if volumes are being leaked into the pod.

cdoern added a commit to cdoern/podman that referenced this issue Nov 5, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overrided).

In order to easily do this, added a new container misc config entity tha stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 8, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overrided).

In order to easily do this, added a new container misc config entity tha stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 8, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

In order to easily do this, added a new container misc config entity that stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 8, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

In order to easily do this, added a new container misc config entity that stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 8, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

In order to easily do this, added a new container misc config entity that stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 8, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

In order to easily do this, added a new container misc config entity that stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 9, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

In order to easily do this, added a new container misc config entity that stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 9, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

In order to easily do this, added a new container misc config entity that stores a final copy of
the container's specgen. This will be useful for more complex options which need a properly filled specgen
to be properly executed.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 12, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 12, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 12, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 16, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 17, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 17, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 17, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 17, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 17, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 17, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 18, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 18, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 18, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 19, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 20, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Nov 22, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 2, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 2, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 2, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 2, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 3, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
@github-actions
Copy link

github-actions bot commented Dec 5, 2021

A friendly reminder that this issue had no activity for 30 days.

@cdoern cdoern removed the stale-issue label Dec 8, 2021
cdoern added a commit to cdoern/podman that referenced this issue Dec 21, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 27, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
cdoern added a commit to cdoern/podman that referenced this issue Dec 27, 2021
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 21, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 21, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants