Merge pull request #41906 from kinvolk/rata/userns-1.27
content: Clarify version requirements for userns and other minor fixespull/41930/head
commit
64867627ff
|
@ -46,19 +46,22 @@ tmpfs, Secrets use a tmpfs, etc.)
|
|||
Some popular filesystems that support idmap mounts in Linux 6.3 are: btrfs,
|
||||
ext4, xfs, fat, tmpfs, overlayfs.
|
||||
|
||||
<!-- When merging this with the dev-1.27 branch conflicts will arise. The text
|
||||
as it is in the dev-1.27 branch should be used. -->
|
||||
In addition, support is needed in the
|
||||
{{< glossary_tooltip text="container runtime" term_id="container-runtime" >}}
|
||||
to use this feature with Kubernetes stateless pods:
|
||||
|
||||
* CRI-O: version 1.25 (and later) supports user namespaces for containers.
|
||||
|
||||
Please note that containerd v1.7 supports user namespaces for containers,
|
||||
compatible with Kubernetes {{< skew currentPatchVersion >}}. It should not be used
|
||||
with Kubernetes 1.27 (and later).
|
||||
containerd v1.7 is not compatible with the userns support in Kubernetes v{{< skew currentVersion >}}.
|
||||
Kubernetes v1.25 and v1.26 used an earlier implementation that **is** compatible with containerd v1.7,
|
||||
in terms of userns support.
|
||||
If you are using a version of Kubernetes other than {{< skew currentVersion >}},
|
||||
check the documentation for that version of Kubernetes for the most relevant information.
|
||||
If there is a newer release of containerd than v1.7 available for use, also check the containerd
|
||||
documentation for compatibility information.
|
||||
|
||||
Support for this in [cri-dockerd is not planned][CRI-dockerd-issue] yet.
|
||||
You can see the status of user namespaces support in cri-dockerd tracked in an [issue][CRI-dockerd-issue]
|
||||
on GitHub.
|
||||
|
||||
[CRI-dockerd-issue]: https://github.com/Mirantis/cri-dockerd/issues/74
|
||||
|
||||
|
|
Loading…
Reference in New Issue