[GitHub] tysonnorris commented on issue #3454: Control Container Capabilities?

[GitBox <gi...@apache.org>]

tysonnorris commented on issue #3454: Control Container Capabilities?
URL: https://github.com/apache/incubator-openwhisk/issues/3454#issuecomment-384468570
 
 
   You could pretty easily change these from hard coded to system-wide configurations by setting them as default values on the `whisk.container-factory.container-args.extra-args` config:
   https://github.com/apache/incubator-openwhisk/blob/d7c9fd661a8a5b339f20b3f549bfa4fa47124706/core/invoker/src/main/resources/application.conf#L55
   (and deleting the hard coded bits in InvokerReactive)
   
   
   To do this per action may be weird though, since generally you will want to maintain some restrictions over args passed to `docker run`, I think. 
   
   To keep that control, but make it accessible, you might be able to add something like `extra-args` that are based on image name, so that you (as OW operator) can allow only some specific images to be launched with a different set of args.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services