mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-09-16 06:18:58 +00:00
13310587ed
CreateContainerRequest objects can specify devices to be created inside the guest VM. This change ensures that requested devices have a corresponding entry in the PodSpec. Devices that are added to the pod dynamically, for example via the Device Plugin architecture, can be allowlisted globally by adding their definition to the settings file. Fixes: #9651 Signed-off-by: Markus Rudy <mr@edgeless.systems>
23 lines
453 B
YAML
23 lines
453 B
YAML
#
|
|
# Copyright (c) 2024 Edgeless Systems GmbH
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: policy-pod-pvc
|
|
spec:
|
|
terminationGracePeriodSeconds: 0
|
|
runtimeClassName: kata
|
|
containers:
|
|
- name: busybox
|
|
image: "quay.io/prometheus/busybox:latest"
|
|
volumeDevices:
|
|
- name: dev
|
|
devicePath: /dev/csi0
|
|
volumes:
|
|
- name: dev
|
|
persistentVolumeClaim:
|
|
claimName: policy-dev
|