Commit aa037343 authored by Darren Shepherd's avatar Darren Shepherd

Remove ProcMountType

parent 911bf0c7
...@@ -289,7 +289,6 @@ func DropDisabledRunAsGroupField(podSpec *api.PodSpec) { ...@@ -289,7 +289,6 @@ func DropDisabledRunAsGroupField(podSpec *api.PodSpec) {
// DropDisabledProcMountField removes disabled fields from PodSpec related // DropDisabledProcMountField removes disabled fields from PodSpec related
// to ProcMount // to ProcMount
func DropDisabledProcMountField(podSpec *api.PodSpec) { func DropDisabledProcMountField(podSpec *api.PodSpec) {
if !utilfeature.DefaultFeatureGate.Enabled(features.ProcMountType) {
defProcMount := api.DefaultProcMount defProcMount := api.DefaultProcMount
for i := range podSpec.Containers { for i := range podSpec.Containers {
if podSpec.Containers[i].SecurityContext != nil { if podSpec.Containers[i].SecurityContext != nil {
...@@ -301,7 +300,6 @@ func DropDisabledProcMountField(podSpec *api.PodSpec) { ...@@ -301,7 +300,6 @@ func DropDisabledProcMountField(podSpec *api.PodSpec) {
podSpec.InitContainers[i].SecurityContext.ProcMount = &defProcMount podSpec.InitContainers[i].SecurityContext.ProcMount = &defProcMount
} }
} }
}
} }
// DropDisabledVolumeMountsAlphaFields removes disabled fields from []VolumeMount. // DropDisabledVolumeMountsAlphaFields removes disabled fields from []VolumeMount.
......
...@@ -17,15 +17,11 @@ limitations under the License. ...@@ -17,15 +17,11 @@ limitations under the License.
package podsecuritypolicy package podsecuritypolicy
import ( import (
utilfeature "k8s.io/apiserver/pkg/util/feature"
"k8s.io/kubernetes/pkg/apis/policy" "k8s.io/kubernetes/pkg/apis/policy"
"k8s.io/kubernetes/pkg/features"
) )
// DropDisabledAlphaFields removes disabled fields from the pod security policy spec. // DropDisabledAlphaFields removes disabled fields from the pod security policy spec.
// This should be called from PrepareForCreate/PrepareForUpdate for all resources containing a od security policy spec. // This should be called from PrepareForCreate/PrepareForUpdate for all resources containing a od security policy spec.
func DropDisabledAlphaFields(pspSpec *policy.PodSecurityPolicySpec) { func DropDisabledAlphaFields(pspSpec *policy.PodSecurityPolicySpec) {
if !utilfeature.DefaultFeatureGate.Enabled(features.ProcMountType) {
pspSpec.AllowedProcMountTypes = nil pspSpec.AllowedProcMountTypes = nil
}
} }
...@@ -213,12 +213,6 @@ const ( ...@@ -213,12 +213,6 @@ const (
// Enable resource quota scope selectors // Enable resource quota scope selectors
ResourceQuotaScopeSelectors utilfeature.Feature = "ResourceQuotaScopeSelectors" ResourceQuotaScopeSelectors utilfeature.Feature = "ResourceQuotaScopeSelectors"
// owner: @jessfraz
// alpha: v1.12
//
// Enables control over ProcMountType for containers.
ProcMountType utilfeature.Feature = "ProcMountType"
// owner: @janetkuo // owner: @janetkuo
// alpha: v1.12 // alpha: v1.12
// //
...@@ -264,7 +258,6 @@ var defaultKubernetesFeatureGates = map[utilfeature.Feature]utilfeature.FeatureS ...@@ -264,7 +258,6 @@ var defaultKubernetesFeatureGates = map[utilfeature.Feature]utilfeature.FeatureS
PodReadinessGates: {Default: true, PreRelease: utilfeature.Beta}, PodReadinessGates: {Default: true, PreRelease: utilfeature.Beta},
KubeletPluginsWatcher: {Default: true, PreRelease: utilfeature.Beta}, KubeletPluginsWatcher: {Default: true, PreRelease: utilfeature.Beta},
ResourceQuotaScopeSelectors: {Default: true, PreRelease: utilfeature.Beta}, ResourceQuotaScopeSelectors: {Default: true, PreRelease: utilfeature.Beta},
ProcMountType: {Default: false, PreRelease: utilfeature.Alpha},
TTLAfterFinished: {Default: false, PreRelease: utilfeature.Alpha}, TTLAfterFinished: {Default: false, PreRelease: utilfeature.Alpha},
// inherited features from generic apiserver, relisted here to get a conflict if it is changed // inherited features from generic apiserver, relisted here to get a conflict if it is changed
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment