9c61688098
We usually specify MCS Labels as comma separated pair. Finally if we run two different containers we want them on different MCS labels. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
68 lines
1.1 KiB
JSON
68 lines
1.1 KiB
JSON
{
|
|
"metadata": {
|
|
"name": "podsandbox1",
|
|
"uid": "redhat-test-ocid",
|
|
"namespace": "redhat.test.ocid",
|
|
"attempt": 1
|
|
},
|
|
"hostname": "ocic_host",
|
|
"log_directory": ".",
|
|
"dns_options": {
|
|
"servers": [
|
|
"server1.redhat.com",
|
|
"server2.redhat.com"
|
|
],
|
|
"searches": [
|
|
"8.8.8.8"
|
|
]
|
|
},
|
|
"port_mappings": [
|
|
{
|
|
"name": "port_map1",
|
|
"protocol": 1,
|
|
"container_port": 80,
|
|
"host_port": 4888,
|
|
"host_ip": "192.168.0.33"
|
|
},
|
|
{
|
|
"name": "port_map2",
|
|
"protocol": 2,
|
|
"container_port": 81,
|
|
"host_port": 4889,
|
|
"host_ip": "192.168.0.33"
|
|
}
|
|
],
|
|
"resources": {
|
|
"cpu": {
|
|
"limits": 3,
|
|
"requests": 2
|
|
},
|
|
"memory": {
|
|
"limits": 50000000,
|
|
"requests": 2000000
|
|
}
|
|
},
|
|
"labels": {
|
|
"group": "test"
|
|
},
|
|
"annotations": {
|
|
"owner": "hmeng"
|
|
%VALUE%
|
|
},
|
|
"linux": {
|
|
"cgroup_parent": "podsandbox1.slice:container:infra",
|
|
"security_context": {
|
|
"namespace_options": {
|
|
"host_network": false,
|
|
"host_pid": false,
|
|
"host_ipc": false
|
|
}
|
|
},
|
|
"selinux_options": {
|
|
"user": "system_u",
|
|
"role": "system_r",
|
|
"type": "container_t",
|
|
"level": "s0:c1,c2"
|
|
}
|
|
}
|
|
}
|