Now the kubelet asks the runtime for the features it supports and if it
doesn't report user namespaces support, then the kubelet will fail the
pod creation.
Therefore, it is no longer possible for the field to be ignored.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
We were showing 4294967295 for the uid_map file, that is how it looks on
the host (not the container). Let's fix that.
While we are there, let's improve the explanation too.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
* content: Update user namespaces version requirements
Also, with the new implementation, the fsGroup was dropped. So removed
the mention to those limitations.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
* content: Add reference to the userns task in the concepts page
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
---------
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>