From 834107c82ea50c3299d23c07c04f81b6974202f9 Mon Sep 17 00:00:00 2001 From: Peter Hunt Date: Thu, 1 Aug 2019 15:31:15 -0400 Subject: Add capability functionality to play kube Take capabilities written in a kube and add to a container adapt test suite and write cap-add/drop tests Signed-off-by: Peter Hunt --- pkg/adapter/pods.go | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'pkg') diff --git a/pkg/adapter/pods.go b/pkg/adapter/pods.go index b9d7fcd9b..c3a9ab8d8 100644 --- a/pkg/adapter/pods.go +++ b/pkg/adapter/pods.go @@ -682,6 +682,15 @@ func kubeContainerToCreateConfig(ctx context.Context, containerYAML v1.Container if containerYAML.SecurityContext.AllowPrivilegeEscalation != nil { containerConfig.NoNewPrivs = !*containerYAML.SecurityContext.AllowPrivilegeEscalation } + + } + if caps := containerYAML.SecurityContext.Capabilities; caps != nil { + for _, capability := range caps.Add { + containerConfig.CapAdd = append(containerConfig.CapAdd, string(capability)) + } + for _, capability := range caps.Drop { + containerConfig.CapDrop = append(containerConfig.CapDrop, string(capability)) + } } containerConfig.Command = []string{} -- cgit v1.2.3-54-g00ecf