nvidia-container-toolkit/cmd/nvidia-container-runtime-hook
Evan Lezar 352b55c8ce
Add ignore-imex-channel-requests feature flag
This allows the NVIDIA Container Toolkit to ignore IMEX channel requests
through the NVIDIA_IMEX_CHANNELS envvar or volume mounts and ensures that
the NVIDIA Container Toolkit cannot be used to provide out-of-band access
to an IMEX channel by simply specifying an environment variable, possibly
bypassing other checks by an orchestration system such as kubernetes.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
2025-02-26 17:46:36 +02:00
..
capabilities.go
container_config_test.go
container_config.go Add ignore-imex-channel-requests feature flag 2025-02-26 17:46:36 +02:00
hook_config_test.go
hook_config.go
hook_test.go
main.go