Skip to content

Commit 3a2f272

Browse files
committed
reworking hostPID section
1 parent a8aeb63 commit 3a2f272

File tree

1 file changed

+1
-1
lines changed
  • keps/sig-windows/1981-windows-privileged-container-support

1 file changed

+1
-1
lines changed

keps/sig-windows/1981-windows-privileged-container-support/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -327,7 +327,7 @@ Additionally, privileged containers may impact other pod security policies (PSPs
327327
</td>
328328
<td>no
329329
</td>
330-
<td>Windows does not have configurable PID/IPC namespaces (unlike Linux). Job objects run in the host 'silo' and will have access to other other host processes. Because on Windows this setting is per-container instead of being Pod-wide and also because future plans include the improvements to schedule pods container both normal and 'privileged'/HostProcess containers in the same Pod we will not enforce setting this pod security flag for HostProcess containers.
330+
<td>Windows does not have configurable PID/IPC namespaces (unlike Linux). Windows containers are always assigned their own process namespace. Job objects always run in the host's process namespace. These behaviors are not configurable. Future plans in this area include improvements to enable scheduling pods that can contain both normal and HostProcess/Job Object containers. These fields would not makes in this scenario because Windows cannot configure PID/IPC namespaces like in Linux.
331331
</td>
332332
<td>N/A
333333
</td>

0 commit comments

Comments
 (0)