mirror of
https://github.com/k3s-io/kubernetes.git
synced 2026-01-05 15:37:24 +00:00
Merge pull request #23368 from saad-ali/renameBuilderCleaner
Auto commit by PR queue bot
This commit is contained in:
@@ -391,11 +391,11 @@ type Host interface {
|
||||
|
||||
The secret volume plugin will be responsible for:
|
||||
|
||||
1. Returning a `volume.Builder` implementation from `NewBuilder` that:
|
||||
1. Returning a `volume.Mounter` implementation from `NewMounter` that:
|
||||
1. Retrieves the secret data for the volume from the API server
|
||||
2. Places the secret data onto the container's filesystem
|
||||
3. Sets the correct security attributes for the volume based on the pod's `SecurityContext`
|
||||
2. Returning a `volume.Cleaner` implementation from `NewClear` that cleans the volume from the
|
||||
2. Returning a `volume.Unmounter` implementation from `NewUnmounter` that cleans the volume from the
|
||||
container's filesystem
|
||||
|
||||
### Kubelet: Node-level secret storage
|
||||
|
||||
@@ -278,7 +278,7 @@ criteria to activate the kubelet SELinux label management for volumes are:
|
||||
3. The `pod.Spec.SecurityContext.SELinuxOptions` field is set
|
||||
4. The volume plugin supports SELinux label management
|
||||
|
||||
The `volume.Builder` interface should have a new method added that indicates whether the plugin
|
||||
The `volume.Mounter` interface should have a new method added that indicates whether the plugin
|
||||
supports SELinux label management:
|
||||
|
||||
```go
|
||||
|
||||
@@ -301,13 +301,13 @@ or read the `pod.Spec.SecurityContext.FSGroup` field.
|
||||
|
||||
### Volume changes
|
||||
|
||||
The `volume.Builder` interface should have a new method added that indicates whether the plugin
|
||||
The `volume.Mounter` interface should have a new method added that indicates whether the plugin
|
||||
supports ownership management:
|
||||
|
||||
```go
|
||||
package volume
|
||||
|
||||
type Builder interface {
|
||||
type Mounter interface {
|
||||
// other methods omitted
|
||||
|
||||
// SupportsOwnershipManagement indicates that this volume supports having ownership
|
||||
@@ -403,7 +403,7 @@ func (kl *Kubelet) mountExternalVolumes(pod *api.Pod) (kubecontainer.VolumeMap,
|
||||
|
||||
// Try to use a plugin for this volume.
|
||||
internal := volume.NewSpecFromVolume(volSpec)
|
||||
builder, err := kl.newVolumeBuilderFromPlugins(internal, pod, volume.VolumeOptions{RootContext: rootContext}, kl.mounter)
|
||||
builder, err := kl.newVolumeMounterFromPlugins(internal, pod, volume.VolumeOptions{RootContext: rootContext}, kl.mounter)
|
||||
if err != nil {
|
||||
glog.Errorf("Could not create volume builder for pod %s: %v", pod.UID, err)
|
||||
return nil, err
|
||||
|
||||
Reference in New Issue
Block a user