From d5ead764f8dee42f3c986438494c742d5b466e0d Mon Sep 17 00:00:00 2001 From: Yifan Gu Date: Fri, 23 Sep 2016 19:49:29 -0700 Subject: [PATCH] Fix an 'index out of range' panic when setting capabilities. --- pkg/kubelet/kuberuntime/kuberuntime_container.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/kubelet/kuberuntime/kuberuntime_container.go b/pkg/kubelet/kuberuntime/kuberuntime_container.go index ff9ca90ad1b..ed906cde7c1 100644 --- a/pkg/kubelet/kuberuntime/kuberuntime_container.go +++ b/pkg/kubelet/kuberuntime/kuberuntime_container.go @@ -209,8 +209,8 @@ func (m *kubeGenericRuntimeManager) generateLinuxContainerConfig(container *api. securityContext := container.SecurityContext if securityContext.Capabilities != nil { linuxConfig.Capabilities = &runtimeApi.Capability{ - AddCapabilities: make([]string, 0, len(securityContext.Capabilities.Add)), - DropCapabilities: make([]string, 0, len(securityContext.Capabilities.Drop)), + AddCapabilities: make([]string, len(securityContext.Capabilities.Add)), + DropCapabilities: make([]string, len(securityContext.Capabilities.Drop)), } for index, value := range securityContext.Capabilities.Add { linuxConfig.Capabilities.AddCapabilities[index] = string(value)