play: handle 'private' as 'auto'

currently there is no way to specify the mappings, so at least treat a private user namespace as "auto". Signed-off-by: Giuseppe Scrivano <[email protected]>
containers · Jul 24, 2024 · fa2590a · fa2590a
1 parent 61f0230
commit fa2590a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/domain/infra/abi/play.go b/pkg/domain/infra/abi/play.go
@@ -610,6 +610,10 @@ func (ic *ContainerEngine) playKubePod(ctx context.Context, podName string, podY
 		} else {
 			options.Userns = "host"
 		}
+		// FIXME: how to deal with explicit mappings?
+		if options.Userns == "private" {
+			options.Userns = "auto"
+		}
 	} else if podYAML.Spec.HostUsers != nil {
 		logrus.Info("overriding the user namespace mode in the pod spec")
 	}