// ModifyContainerConfig is called before the Docker createContainer call. // The security context provider can make changes to the Config with which // the container is created. func (p SimpleSecurityContextProvider) ModifyContainerConfig(pod *api.Pod, container *api.Container, config *docker.Config) { if container.SecurityContext == nil { return } if container.SecurityContext.RunAsUser != nil { config.User = strconv.FormatInt(*container.SecurityContext.RunAsUser, 10) } }
// ModifyContainerConfig is called before the Docker createContainer call. // The security context provider can make changes to the Config with which // the container is created. func (p SimpleSecurityContextProvider) ModifyContainerConfig(pod *api.Pod, container *api.Container, config *docker.Config) { effectiveSC := DetermineEffectiveSecurityContext(pod, container) if effectiveSC == nil { return } if effectiveSC.RunAsUser != nil { config.User = strconv.Itoa(int(*effectiveSC.RunAsUser)) } }