mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-04 09:49:50 +00:00
Only set sysctls for infra containers
This commit is contained in:
parent
6babfb6ccc
commit
962e7534b4
@ -687,18 +687,20 @@ func (dm *DockerManager) runContainer(
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Set sysctls if requested
|
// Set sysctls if requested
|
||||||
sysctls, unsafeSysctls, err := api.SysctlsFromPodAnnotations(pod.Annotations)
|
if container.Name == PodInfraContainerName {
|
||||||
if err != nil {
|
sysctls, unsafeSysctls, err := api.SysctlsFromPodAnnotations(pod.Annotations)
|
||||||
dm.recorder.Eventf(ref, api.EventTypeWarning, events.FailedToCreateContainer, "Failed to create docker container %q of pod %q with error: %v", container.Name, format.Pod(pod), err)
|
if err != nil {
|
||||||
return kubecontainer.ContainerID{}, err
|
dm.recorder.Eventf(ref, api.EventTypeWarning, events.FailedToCreateContainer, "Failed to create docker container %q of pod %q with error: %v", container.Name, format.Pod(pod), err)
|
||||||
}
|
return kubecontainer.ContainerID{}, err
|
||||||
if len(sysctls)+len(unsafeSysctls) > 0 {
|
|
||||||
hc.Sysctls = make(map[string]string, len(sysctls)+len(unsafeSysctls))
|
|
||||||
for _, c := range sysctls {
|
|
||||||
hc.Sysctls[c.Name] = c.Value
|
|
||||||
}
|
}
|
||||||
for _, c := range unsafeSysctls {
|
if len(sysctls)+len(unsafeSysctls) > 0 {
|
||||||
hc.Sysctls[c.Name] = c.Value
|
hc.Sysctls = make(map[string]string, len(sysctls)+len(unsafeSysctls))
|
||||||
|
for _, c := range sysctls {
|
||||||
|
hc.Sysctls[c.Name] = c.Value
|
||||||
|
}
|
||||||
|
for _, c := range unsafeSysctls {
|
||||||
|
hc.Sysctls[c.Name] = c.Value
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user