Pass io.microsoft.container.privileged annotation when creating conti…

…aners for Windows privileged contianer POC
marosset · Jan 25, 2021 · 7abbd21 · 7abbd21
1 parent c4d7527
commit 7abbd21
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/pkg/kubelet/kuberuntime/labels.go b/pkg/kubelet/kuberuntime/labels.go
@@ -113,6 +113,19 @@ func newContainerAnnotations(container *v1.Container, pod *v1.Pod, restartCount
 		annotations[a.Name] = a.Value
 	}
 
+	windowsPrivilegedAnnotation := "io.microsoft.container.privileged"
+
+	klog.Infof("Checking if pod annotations exist")
+	if pod.Annotations != nil {
+		klog.Infof("Checking if pod annotaions contains %s", windowsPrivilegedAnnotation)
+		if value, ok := pod.Annotations[windowsPrivilegedAnnotation]; ok {
+			klog.Infof("Pod annotations contains %s, value %s", windowsPrivilegedAnnotation, value)
+			annotations[windowsPrivilegedAnnotation] = value
+		} else {
+			klog.Infof("Pod annotations did not contian %s", windowsPrivilegedAnnotation)
+		}
+	}
+
 	annotations[containerHashLabel] = strconv.FormatUint(kubecontainer.HashContainer(container), 16)
 	annotations[containerRestartCountLabel] = strconv.Itoa(restartCount)
 	annotations[containerTerminationMessagePathLabel] = container.TerminationMessagePath