tree f82fa1f5722c3eae99506510056fb6a5ce736309
parent 7a1b27df41a9729dd9669cdaabd6864afc5e85b7
author Tim Windelschmidt <tim@monogon.tech> 1726424079 +0200
committer Tim Windelschmidt <tim@monogon.tech> 1726698479 +0000

m/n/k/containerd: set device ownership based on security context

When a user deploys a pod with a kvm device it is owned by root. By
setting device_ownership_from_security_context to true, containerd
will chown these devices to the uid/gid set in the securityContext.
For more informations see
https://kubernetes.io/blog/2021/11/09/non-root-containers-and-devices/

Change-Id: I1a0285dfc560c3c662d5e2eb8e37e68d87408b83
Reviewed-on: https://review.monogon.dev/c/monogon/+/3428
Tested-by: Jenkins CI
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>