18
18
- [ Design Details] ( #design-details )
19
19
- [ Pod.spec changes] ( #podspec-changes )
20
20
- [ CRI changes] ( #cri-changes )
21
- - [ Phases ] ( #phases )
22
- - [ Phase 1: pods & quot ; without & quot ; volumes] ( #phase-1-pods-without -volumes )
23
- - [ pkg/volume changes for phase I ] ( #pkgvolume-changes-for-phase-i )
24
- - [ Phase 2: pods with volumes ] ( #phase-2-pods-with-volumes )
25
- - [ Phase 3: TBD ] ( #phase-3-tbd )
26
- - [ Unresolved ] ( #unresolved )
27
- - [ Summary of the Proposed Changes ] ( #summary-of-the-proposed-changes )
21
+ - [ Support for stateless pods ] ( #support-for-stateless-pods )
22
+ - [ Handling of stateless volumes] ( #handling-of-stateless -volumes )
23
+ - [ Example of how idmap mounts work ] ( #example-of-how-idmap-mounts-work )
24
+ - [ Example without idmap mounts ] ( #example-without-idmap-mounts )
25
+ - [ Example with idmap mounts ] ( #example-with-idmap-mounts )
26
+ - [ Regarding the previous implementation for volumes ] ( #regarding-the-previous-implementation-for-volumes )
27
+ - [ Unresolved ] ( #unresolved )
28
28
- [ Test Plan] ( #test-plan )
29
29
- [ Prerequisite testing updates] ( #prerequisite-testing-updates )
30
30
- [ Unit tests] ( #unit-tests )
47
47
- [ Implementation History] ( #implementation-history )
48
48
- [ Drawbacks] ( #drawbacks )
49
49
- [ Alternatives] ( #alternatives )
50
+ - [ Don't use idmap mounts and rely chown all the files correctly] ( #dont-use-idmap-mounts-and-rely-chown-all-the-files-correctly )
51
+ - [ 64k mappings?] ( #64k-mappings )
52
+ - [ Allow runtimes to pick the mapping?] ( #allow-runtimes-to-pick-the-mapping )
50
53
- [ Infrastructure Needed (Optional)] ( #infrastructure-needed-optional )
51
54
<!-- /toc -->
52
55
@@ -406,9 +409,9 @@ In other words, we can make sure the pod can read files instead of chowning them
406
409
all using the host IDs the pod is mapped to, by just using an idmap mount that
407
410
has the same mapping that we use for the pod user namespace.
408
411
409
- ##### Regarding the previous implementation for volumes
410
- We previously added to the [ KubeletVolumeHost
411
- interface ] [ kubeletVolumeHost-interface ] the following method:
412
+ #### Regarding the previous implementation for volumes
413
+ We previously added to the [ KubeletVolumeHost interface ] [ kubeletVolumeHost-interface ]
414
+ the following method:
412
415
413
416
```
414
417
GetHostIDsForPod(pod *v1.Pod, containerUID, containerGID *int64) (hostUID, hostGID *int64, err error)
@@ -419,7 +422,7 @@ components that implement the interface.
419
422
420
423
[ kubeletVolumeHost-interface ] : https://github.com/kubernetes/kubernetes/blob/36450ee422d57d53a3edaf960f86b356578fe996/pkg/volume/plugins.go#L322
421
424
422
- #### Unresolved
425
+ ### Unresolved
423
426
424
427
Here is a list of considerations raised in PRs discussion that hasn't yet
425
428
settle. This list is not exhaustive, we are just trying to put the things that
0 commit comments