mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-09-16 14:28:35 +00:00
runtime: Support policy in remote hypervisor
Move the `sandbox.agent.setPolicy` call out of the remoteHypervisor if, block, so we can use the policy implementation on peer pods Signed-off-by: stevenhorsman <steven@uk.ibm.com>
This commit is contained in:
@@ -766,19 +766,21 @@ func (k *kataAgent) startSandbox(ctx context.Context, sandbox *Sandbox) error {
|
||||
|
||||
if sandbox.config.HypervisorType == RemoteHypervisor {
|
||||
ctx = context.WithValue(ctx, customRequestTimeoutKey, remoteRequestTimeout)
|
||||
} else {
|
||||
// Check grpc server is serving
|
||||
if err = k.check(ctx); err != nil {
|
||||
}
|
||||
|
||||
// Check grpc server is serving
|
||||
if err = k.check(ctx); err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
// If a Policy has been specified, send it to the agent.
|
||||
if len(sandbox.config.AgentConfig.Policy) > 0 {
|
||||
if err := sandbox.agent.setPolicy(ctx, sandbox.config.AgentConfig.Policy); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
|
||||
// If a Policy has been specified, send it to the agent.
|
||||
if len(sandbox.config.AgentConfig.Policy) > 0 {
|
||||
if err := sandbox.agent.setPolicy(ctx, sandbox.config.AgentConfig.Policy); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
|
||||
if sandbox.config.HypervisorType != RemoteHypervisor {
|
||||
// Setup network interfaces and routes
|
||||
interfaces, routes, neighs, err := generateVCNetworkStructures(ctx, sandbox.network)
|
||||
if err != nil {
|
||||
|
Reference in New Issue
Block a user