Skip to content

Commit fb04707

Browse files
committed
KEP-127: Update TOC
Signed-off-by: Rodrigo Campos <[email protected]>
1 parent 60560db commit fb04707

File tree

1 file changed

+14
-11
lines changed

1 file changed

+14
-11
lines changed

keps/sig-node/127-user-namespaces/README.md

+14-11
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@
1818
- [Design Details](#design-details)
1919
- [Pod.spec changes](#podspec-changes)
2020
- [CRI changes](#cri-changes)
21-
- [Phases](#phases)
22-
- [Phase 1: pods &quot;without&quot; volumes](#phase-1-pods-without-volumes)
23-
- [pkg/volume changes for phase I](#pkgvolume-changes-for-phase-i)
24-
- [Phase 2: pods with volumes](#phase-2-pods-with-volumes)
25-
- [Phase 3: TBD](#phase-3-tbd)
26-
- [Unresolved](#unresolved)
27-
- [Summary of the Proposed Changes](#summary-of-the-proposed-changes)
21+
- [Support for stateless pods](#support-for-stateless-pods)
22+
- [Handling of stateless volumes](#handling-of-stateless-volumes)
23+
- [Example of how idmap mounts work](#example-of-how-idmap-mounts-work)
24+
- [Example without idmap mounts](#example-without-idmap-mounts)
25+
- [Example with idmap mounts](#example-with-idmap-mounts)
26+
- [Regarding the previous implementation for volumes](#regarding-the-previous-implementation-for-volumes)
27+
- [Unresolved](#unresolved)
2828
- [Test Plan](#test-plan)
2929
- [Prerequisite testing updates](#prerequisite-testing-updates)
3030
- [Unit tests](#unit-tests)
@@ -47,6 +47,9 @@
4747
- [Implementation History](#implementation-history)
4848
- [Drawbacks](#drawbacks)
4949
- [Alternatives](#alternatives)
50+
- [Don't use idmap mounts and rely chown all the files correctly](#dont-use-idmap-mounts-and-rely-chown-all-the-files-correctly)
51+
- [64k mappings?](#64k-mappings)
52+
- [Allow runtimes to pick the mapping?](#allow-runtimes-to-pick-the-mapping)
5053
- [Infrastructure Needed (Optional)](#infrastructure-needed-optional)
5154
<!-- /toc -->
5255

@@ -406,9 +409,9 @@ In other words, we can make sure the pod can read files instead of chowning them
406409
all using the host IDs the pod is mapped to, by just using an idmap mount that
407410
has the same mapping that we use for the pod user namespace.
408411

409-
##### Regarding the previous implementation for volumes
410-
We previously added to the [KubeletVolumeHost
411-
interface][kubeletVolumeHost-interface] the following method:
412+
#### Regarding the previous implementation for volumes
413+
We previously added to the [KubeletVolumeHost interface][kubeletVolumeHost-interface]
414+
the following method:
412415

413416
```
414417
GetHostIDsForPod(pod *v1.Pod, containerUID, containerGID *int64) (hostUID, hostGID *int64, err error)
@@ -419,7 +422,7 @@ components that implement the interface.
419422

420423
[kubeletVolumeHost-interface]: https://github.com/kubernetes/kubernetes/blob/36450ee422d57d53a3edaf960f86b356578fe996/pkg/volume/plugins.go#L322
421424

422-
#### Unresolved
425+
### Unresolved
423426

424427
Here is a list of considerations raised in PRs discussion that hasn't yet
425428
settle. This list is not exhaustive, we are just trying to put the things that

0 commit comments

Comments
 (0)