Rodrigo Campos 5f7e611f73 validation: Return error if hostUsers=false && volumeDevices ...

Now if a pod tries to use user namespaces (hostUsers: false) and a
volume device, it will see this error:
	$ kubectl apply -f pod.yaml
	...
	* spec.ephemeralContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.initContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.containers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false

Note that if a pod is already created with volumeDevices and userns,
then we allow modifications to that object.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>

2025-07-28 16:54:08 +02:00

..

endpoints/testing

Move endpoints test-helper funcs to a package

2021-07-01 18:26:45 -07:00

job

pkg/api(s): drop pointer wrapper functions

2024-09-23 23:00:34 +02:00

legacyscheme

hack/update-bazel.sh

2021-02-28 15:17:29 -08:00

node

DisallowInvalidLabelValueInNodeSelector

2024-12-12 15:06:14 +08:00

persistentvolume

DisallowInvalidLabelValueInNodeSelector

2024-12-12 15:06:14 +08:00

persistentvolumeclaim

Bump RecoverVolumeExpansionFailure to GA

2025-07-10 12:19:31 -04:00

pod

validation: Return error if hostUsers=false && volumeDevices

2025-07-28 16:54:08 +02:00

service

Merge pull request #132214 from Peac36/fix/131497

2025-07-21 14:14:26 -07:00

servicecidr

update internal API

2025-01-20 13:01:53 +00:00

storage

use generic Set in api

2023-09-25 19:04:08 +08:00

testing

Unit test pod level hugepage Default and Validation logic

2025-07-24 21:29:04 +00:00

v1

Merge pull request #132642 from yuanwang04/restart-rules

2025-07-24 16:44:51 -07:00

OWNERS

Check in OWNERS modified by update-yamlfmt.sh

2021-12-09 21:31:26 -05:00