From 4ea18b6e1ea8273e2e0895de3652887e2bde7460 Mon Sep 17 00:00:00 2001
From: Jay Li <xenium_lee@163.com>
Date: Thu, 26 Nov 2020 12:30:55 +0800
Subject: [PATCH] fix privileged config of Pod Sandbox

---
 pkg/kubelet/dockershim/security_context.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/kubelet/dockershim/security_context.go b/pkg/kubelet/dockershim/security_context.go
index 571fdd33767..6c6d313f271 100644
--- a/pkg/kubelet/dockershim/security_context.go
+++ b/pkg/kubelet/dockershim/security_context.go
@@ -43,6 +43,7 @@ func applySandboxSecurityContext(lc *runtimeapi.LinuxPodSandboxConfig, config *d
 			ReadonlyRootfs:     lc.SecurityContext.ReadonlyRootfs,
 			SelinuxOptions:     lc.SecurityContext.SelinuxOptions,
 			NamespaceOptions:   lc.SecurityContext.NamespaceOptions,
+			Privileged:         lc.SecurityContext.Privileged,
 		}
 	}