kata-containers/k8s-policy-pvc.yaml at runtime-rs-qemu-coco-dev-config - kata-containers - Gitea: Git with a cup of tea at home

github/kata-containers

mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-24 02:31:12 +00:00

Markus Rudy 13310587ed genpolicy: check requested devices

CreateContainerRequest objects can specify devices to be created inside
the guest VM. This change ensures that requested devices have a
corresponding entry in the PodSpec.

Devices that are added to the pod dynamically, for example via the
Device Plugin architecture, can be allowlisted globally by adding their
definition to the settings file.

Fixes: #9651
Signed-off-by: Markus Rudy <mr@edgeless.systems>

2024-05-31 22:05:49 +02:00

17 lines

266 B

YAML

Raw Permalink Blame History

 #
 # Copyright (c) 2024 Edgeless Systems GmbH
 #
 # SPDX-License-Identifier: Apache-2.0
 #
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: policy-dev
 spec:
   accessModes:
     - ReadWriteOnce
   volumeMode: Block
   resources:
     requests:
       storage: 1Mi