Constrain docker shared pid proposal to rollout
Also rename file to be docker specific.
This commit is contained in:
		
							parent
							
								
									f6d262fd4e
								
							
						
					
					
						commit
						d3b09aa70d
					
				|  | @ -1,8 +1,9 @@ | |||
| # Shared PID Namespace for the Docker Runtime | ||||
| 
 | ||||
| Pods share many namespaces, but the ability to share a PID namespace was not | ||||
| supported by Docker until version 1.12. This document proposes how to roll out | ||||
| support for sharing the PID namespace in the docker runtime. | ||||
| supported by Docker until version 1.12. SIG Node approved a change to the | ||||
| default behavior contingent on a brief rollout plan, which is this document. | ||||
| Please refer to [#1615](https://issues.k8s.io/1615) for full technical details. | ||||
| 
 | ||||
| ## Motivation | ||||
| 
 | ||||
|  | @ -18,11 +19,16 @@ and enables: | |||
| ## Goals and Non-Goals | ||||
| 
 | ||||
| Goals include: | ||||
|   - Change default behavior in the Kubernetes Docker runtime | ||||
|   - Changing default behavior in the Kubernetes Docker runtime | ||||
| 
 | ||||
| Non-goals include: | ||||
|   - Creating an init solution that works for all runtimes | ||||
|   - Supporting isolated PID namespace indefinitely | ||||
|   - Addressing the larger issue of requiring shared namespaces in all runtimes | ||||
| 
 | ||||
| Kubernetes does not currently specify how runtimes must support a PID namespace, | ||||
| but many runtimes (e.g. cri-o & rkt) already support a shared namespace. This | ||||
| rolls out support for Docker. | ||||
| 
 | ||||
| ## Rollout Plan | ||||
| 
 | ||||
|  | @ -30,7 +36,9 @@ Sharing the PID namespace changes an implicit behavior of the Docker runtime | |||
| whereby the command run by the container image is always PID 1. This is a side | ||||
| effect of isolated namespaces rather than intentional behavior, but users may | ||||
| have built upon this assumption so we should change the default behavior over | ||||
| the course of multiple releases. | ||||
| the course of multiple releases. (The following release numbers are earliest | ||||
| possible releases and may change based on implementation and community | ||||
| feedback.) | ||||
| 
 | ||||
|   1. Release 1.6: Enable the shared PID namespace for pods annotated with | ||||
|      `docker.kubernetes.io/shared-pid: true` (i.e. opt-in) when running with | ||||
		Loading…
	
		Reference in New Issue