Fix an 'index out of range' panic when setting capabilities.

This commit is contained in:
Yifan Gu 2016-09-23 19:49:29 -07:00
parent 8c73e2bcbe
commit d5ead764f8

View File

@ -209,8 +209,8 @@ func (m *kubeGenericRuntimeManager) generateLinuxContainerConfig(container *api.
securityContext := container.SecurityContext securityContext := container.SecurityContext
if securityContext.Capabilities != nil { if securityContext.Capabilities != nil {
linuxConfig.Capabilities = &runtimeApi.Capability{ linuxConfig.Capabilities = &runtimeApi.Capability{
AddCapabilities: make([]string, 0, len(securityContext.Capabilities.Add)), AddCapabilities: make([]string, len(securityContext.Capabilities.Add)),
DropCapabilities: make([]string, 0, len(securityContext.Capabilities.Drop)), DropCapabilities: make([]string, len(securityContext.Capabilities.Drop)),
} }
for index, value := range securityContext.Capabilities.Add { for index, value := range securityContext.Capabilities.Add {
linuxConfig.Capabilities.AddCapabilities[index] = string(value) linuxConfig.Capabilities.AddCapabilities[index] = string(value)