[
https://issues.apache.org/jira/browse/YARN-8343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16488084#comment-16488084
]
Eric Badger commented on YARN-8343:
-----------------------------------
I think we need to do a rework around privileged/non-privileged containers as
is. I agree that there is use in a mechanism that you only allow images from a
certain registry to run at all. This could manifest as a whitelist or as a flag
to only accept images from the privileged registries list or something else
that we design that makes this all less confusing
> YARN should have ability to run images only from a whitelist docker registries
> ------------------------------------------------------------------------------
>
> Key: YARN-8343
> URL: https://issues.apache.org/jira/browse/YARN-8343
> Project: Hadoop YARN
> Issue Type: Sub-task
> Reporter: Wangda Tan
> Priority: Critical
> Labels: Docker
>
> This is a superset of docker.privileged-containers.registries, admin can
> specify a whitelist and all images from non-privileged-container.registries
> will be rejected.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
