diff options
| author | Kubernetes Submit Queue <k8s-merge-robot@users.noreply.github.com> | 2017-11-21 04:52:54 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-11-21 04:52:54 -0800 |
| commit | 29b7bddb830dca3b78e3ed3879b792e6ef7f36ef (patch) | |
| tree | 4965a518d384ab51216c48d803f4278c8e393bdb | |
| parent | f6db1026dd6ae64ecf12b296df5c948d4f8da48d (diff) | |
| parent | d4616759411a06a69aa1f6f9b88b32db3eceeb11 (diff) | |
Merge pull request #1389 from gin419/patch-6
Automatic merge from submit-queue.
Update propagation.md
| -rw-r--r-- | contributors/design-proposals/node/propagation.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/contributors/design-proposals/node/propagation.md b/contributors/design-proposals/node/propagation.md index 959e69f9..20cf58d9 100644 --- a/contributors/design-proposals/node/propagation.md +++ b/contributors/design-proposals/node/propagation.md @@ -189,7 +189,7 @@ Opinion against this: 1. It's not possible to validate a pod + mount propagation. Mount propagation is stored in a HostPath PersistentVolume object, while privileged mode is stored in Pod object. Validator sees only one object and we don't do - cross-object validation and can't reject non-provileged pod that uses a PV + cross-object validation and can't reject non-privileged pod that uses a PV with shared mount propagation. ### Make HostPath shared for privileged containers, slave for non-privileged. |