From 9e0e42b665d5591d8cf245de8aab617d2a0f8afc Mon Sep 17 00:00:00 2001 From: Kevin Krakauer Date: Fri, 22 Nov 2024 12:33:02 -0800 Subject: [PATCH] allow `--reproduce-nftables` to be overwritten via OCI annotations Note that the flag is false by default. PiperOrigin-RevId: 699255206 --- runsc/config/flags.go | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/runsc/config/flags.go b/runsc/config/flags.go index 6ba30265b..beaecbb8b 100644 --- a/runsc/config/flags.go +++ b/runsc/config/flags.go @@ -156,13 +156,14 @@ func RegisterFlags(flagSet *flag.FlagSet) { var overrideAllowlist = map[string]struct { check func(name string, value string) error }{ - "debug": {}, - "debug-to-user-log": {}, - "strace": {}, - "strace-syscalls": {}, - "strace-log-size": {}, - "host-uds": {}, - "net-disconnect-ok": {}, + "debug": {}, + "debug-to-user-log": {}, + "strace": {}, + "strace-syscalls": {}, + "strace-log-size": {}, + "host-uds": {}, + "net-disconnect-ok": {}, + "reproduce-nftables": {}, "oci-seccomp": {check: checkOciSeccomp}, }