Commit Graph
5 Commits
Author SHA1 Message Date
Krisztian Litkey ec89339995 cri: treat disabled CDI an error for injection requests.
If a container has CDI devices requested by the dedicated CRI protocol
field, treat this as an error if CDI support is explicitly disabled by
configuration, instead of silently ignoring the requested devices.

Additionally, if CDI support is disabled log a warning about the future
deprecation of the EnableCDI configuration option.

Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>
2025-12-17 10:52:54 +02:00
Krisztian Litkey c49379c38a cri: deprecate the enable_cdi config option.
Deprecate the enable_cdi config option for CRI. Change it to a
pointer so we can differentiate between an unset value and one
that is set explicitly to false. Treat an omitted setting (nil
value) as enabled. Mark it deprecated in RELEASES.md. Add a
deprecation warning for it. Log that warning if we start up
with enable_cdi explicitly set to false.

Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>
2025-12-17 10:52:54 +02:00
Jin Dong 71958731e8 move security profile to cri/sputil pkg
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
2025-02-20 19:15:58 +00:00
Shingo Omura 8bcffa9446 KEP-3619: Fine grained SupplementalGroups control
Signed-off-by: Shingo Omura <everpeace@gmail.com>
2024-06-12 09:10:40 +09:00
Maksym Pavlenko bbac058cf3 Move CRI from pkg/ to internal/
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-02 10:12:08 -08:00