From 26d94ad628691a61de52b67a05902eff4cf1753d Mon Sep 17 00:00:00 2001
From: Giuseppe Scrivano <gscrivan@redhat.com>
Date: Thu, 9 Apr 2020 12:18:40 +0200
Subject: [PATCH] kubelet: do not configure the device cgroup

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
---
 pkg/kubelet/cm/cgroup_manager_linux.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/kubelet/cm/cgroup_manager_linux.go b/pkg/kubelet/cm/cgroup_manager_linux.go
index 8a53688dbee..a9177d94e75 100644
--- a/pkg/kubelet/cm/cgroup_manager_linux.go
+++ b/pkg/kubelet/cm/cgroup_manager_linux.go
@@ -500,6 +500,8 @@ func setResourcesV2(cgroupConfig *libcontainerconfigs.Cgroup) error {
 	if err := propagateControllers(cgroupConfig.Path); err != nil {
 		return err
 	}
+	allowAll := true
+	cgroupConfig.Resources.AllowAllDevices = &allowAll
 
 	manager, err := cgroupfs2.NewManager(cgroupConfig, cgroupConfig.Path, false)
 	if err != nil {