You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/concepts/workloads/pods/_index.md
+21-4Lines changed: 21 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -289,14 +289,31 @@ section.
289
289
290
290
## Privileged mode for containers
291
291
292
-
In Linux, any container in a Pod can enable privileged mode using the `privileged` (Linux) flag on the [security context](/docs/tasks/configure-pod-container/security-context/) of the container spec. This is useful for containers that want to use operating system administrative capabilities such as manipulating the network stack or accessing hardware devices.
293
-
294
-
If your cluster has the `WindowsHostProcessContainers` feature enabled, you can create a [Windows HostProcess pod](/docs/tasks/configure-pod-container/create-hostprocess-pod) by setting the `windowsOptions.hostProcess` flag on the security context of the pod spec. All containers in these pods must run as Windows HostProcess containers. HostProcess pods run directly on the host and can also be used to perform administrative tasks as is done with Linux privileged containers.
295
-
296
292
{{< note >}}
297
293
Your {{< glossary_tooltip text="container runtime" term_id="container-runtime" >}} must support the concept of a privileged container for this setting to be relevant.
298
294
{{< /note >}}
299
295
296
+
Any container in a pod can run in privileged mode to use operating system administrative capabilities
297
+
that would otherwise be inaccessible. This is available for both Windows and Linux.
298
+
299
+
### Linux containers
300
+
301
+
In Linux, any container in a Pod can enable privileged mode using the `privileged` (Linux) flag
302
+
on the [security context](/docs/tasks/configure-pod-container/security-context/) of the
303
+
container spec. This is useful for containers that want to use operating system administrative
304
+
capabilities such as manipulating the network stack or accessing hardware devices.
0 commit comments