diff options
| author | Gin <hejin@ghostcloud.cn> | 2017-11-13 16:06:00 +0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-11-13 16:06:00 +0800 |
| commit | d4616759411a06a69aa1f6f9b88b32db3eceeb11 (patch) | |
| tree | 77c094e1d2699d52a13311b24c67ac0de13705fe | |
| parent | 17a2379a721e5b04a14b754085288a8b2506c0c2 (diff) | |
Update propagation.md
| -rw-r--r-- | contributors/design-proposals/node/propagation.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/contributors/design-proposals/node/propagation.md b/contributors/design-proposals/node/propagation.md index 3c665552..94b61852 100644 --- a/contributors/design-proposals/node/propagation.md +++ b/contributors/design-proposals/node/propagation.md @@ -189,7 +189,7 @@ Opinion against this: 1. It's not possible to validate a pod + mount propagation. Mount propagation is stored in a HostPath PersistentVolume object, while privileged mode is stored in Pod object. Validator sees only one object and we don't do - cross-object validation and can't reject non-provileged pod that uses a PV + cross-object validation and can't reject non-privileged pod that uses a PV with shared mount propagation. ### Make HostPath shared for privileged containers, slave for non-privileged. |