kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Feat: add definition of `ignore_image_defined_volumes` in containerd cri plugin configuration

pull/11421/head
Eugenio Alessandria 2024-08-06 14:31:11 +02:00
parent 1968db9a52
commit c6d0b1fbeb
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/container-engine/containerd/defaults/main.yml
View File

@ -61,6 +61,8 @@ containerd_registries_mirrors:
containerd_max_container_log_line_size: -1 containerd_max_container_log_line_size: -1
containerd_ignore_image_defined_volumes: false
# If enabled it will allow non root users to use port numbers <1024 # If enabled it will allow non root users to use port numbers <1024
containerd_enable_unprivileged_ports: false containerd_enable_unprivileged_ports: false
# If enabled it will allow non root users to use icmp sockets # If enabled it will allow non root users to use icmp sockets

1
roles/container-engine/containerd/templates/config.toml.j2
View File

@ -20,6 +20,7 @@ oom_score = {{ containerd_oom_score }}
[plugins] [plugins]
[plugins."io.containerd.grpc.v1.cri"] [plugins."io.containerd.grpc.v1.cri"]
ignore_image_defined_volumes = {{ containerd_ignore_image_defined_volumes }}
sandbox_image = "{{ pod_infra_image_repo }}:{{ pod_infra_image_tag }}" sandbox_image = "{{ pod_infra_image_repo }}:{{ pod_infra_image_tag }}"
max_container_log_line_size = {{ containerd_max_container_log_line_size }} max_container_log_line_size = {{ containerd_max_container_log_line_size }}
enable_unprivileged_ports = {{ containerd_enable_unprivileged_ports | lower }} enable_unprivileged_ports = {{ containerd_enable_unprivileged_ports | lower }}