github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-01-05 23:47:50 +00:00
Code Issues Projects Releases Wiki Activity

Drop RuntimeClass from PSP when feature is disabled

Browse Source
This commit is contained in:
Tim Allclair
2019-04-24 15:32:57 -07:00
parent 1bd4340c7c
commit c666bd0012
3 changed files with 59 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/api/podsecuritypolicy/util.go
View File

@@ -38,6 +38,10 @@ func DropDisabledFields(pspSpec, oldPSPSpec *policy.PodSecurityPolicySpec) {
if !utilfeature.DefaultFeatureGate.Enabled(features.CSIInlineVolume) {
pspSpec.AllowedCSIDrivers = nil
}
if !utilfeature.DefaultFeatureGate.Enabled(features.RuntimeClass) &&
(oldPSPSpec == nil || oldPSPSpec.RuntimeClass == nil) {
pspSpec.RuntimeClass = nil
}
}
func allowedProcMountTypesInUse(oldPSPSpec *policy.PodSecurityPolicySpec) bool {