diff options
| author | Fabricio Voznika <fvoznika@google.com> | 2020-09-01 11:10:15 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-09-01 11:12:19 -0700 |
| commit | 71589b7f7e69b85820c9deb75fc6d0b6c5f00eb1 (patch) | |
| tree | 89811036609d6d6c1ad0da6c32f02024aa15c8b4 /runsc/config/config.go | |
| parent | 0eae08bc9e77d54c415c9d59ac3e1fa1f35f0a18 (diff) | |
Let flags be overriden from OCI annotations
This allows runsc flags to be set per sandbox instance. For
example, K8s pod annotations can be used to enable
--debug for a single pod, making troubleshoot much easier.
Similarly, features like --vfs2 can be enabled for
experimentation without affecting other pods in the node.
Closes #3494
PiperOrigin-RevId: 329542815
Diffstat (limited to 'runsc/config/config.go')
| -rw-r--r-- | runsc/config/config.go | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/runsc/config/config.go b/runsc/config/config.go index bca27ebf1..df134bb2f 100644 --- a/runsc/config/config.go +++ b/runsc/config/config.go @@ -157,6 +157,8 @@ type Config struct { // Enables FUSE usage. FUSE bool `flag:"fuse"` + AllowFlagOverride bool `flag:"allow-flag-override"` + // TestOnlyAllowRunAsCurrentUserWithoutChroot should only be used in // tests. It allows runsc to start the sandbox process as the current // user, and without chrooting the sandbox process. This can be |