[enhancement request] Advanced configuration for Sandbox and Container in CRI

[YaoZengzeng]

Task tracking

Sandbox related

• Sysctl configuration for sandbox feature: sysctl configuration for both cri manager and container manager #654
• DNS configuration for sandbox feature: dns configuration for cri manager #912
• Port mapping configuration for sandbox feature: port mapping for cri manager #730

Container related

• Basic volume and device adding for container feature: volume and mount propagation for cri manager #717
• Mount propagation support for container feature: volume and mount propagation for cri manager #717
• AppArmor support for container feature: appArmor for both cri manager and container manager #672
• Capabilities setting for container feature: capability for both cri manager and container manager #680
• NoNewPrivs support container feature: implement ReadOnlyRootfs and NoNewPrivs of cri manager #935

Sandbox & Container Both

• Namespace option for sandbox & container feature: namespace options and supplemental groups for cri manager #753
• Supplemental Group support for sandbox & container feature: namespace options and supplemental groups for cri manager #753
• RunAsUser support for sandbox & container feature: user configuration for cri manager #722
• RunAsUserName support for sandbox & container
• ReadOnlyRootfs support for sandbox & container feature: implement ReadOnlyRootfs and NoNewPrivs of cri manager #935
• Privileged mode support for sandbox & container feature: privilege mode for both cri manager and container manager #691
• Seccomp support for sandbox & container feature: seccomp for cri manager and container manager #701
• SELinux support for sandbox & container

NOTE

The list may not be complete yet, we should supplement it anytime as the development going on :)

cc @allencloud

[allencloud]

Any update on this ? @YaoZengzeng

[allencloud]

Do we finish RunAsUserName support for sandbox & container and SELinux support for sandbox & container?

If the answer is yes, please close this issue. Thanks. @YaoZengzeng @starnop

[YaoZengzeng]

All tasks have been finished, close now.