Skip pods not created by the kubelet.

Author: Casey Callendrello

rktlet/runtime/helpers.go

@@ -394,6 +394,13 @@ func generateAppSandboxCommand(req *runtimeApi.RunPodSandboxRequest, uuidfile, s
 	return cmd
 }
 
+// isKubernetesPod determines if the pod is actually owned by Kubernetes.
+// It checks for critical annotations.
+func isKubernetesPod(pod *rkt.Pod) bool {
+	_, ok := pod.UserAnnotations[kubernetesReservedAnnoPodUid]
+	return ok
+}
+
 func getKubernetesMetadata(annotations map[string]string) (*runtimeApi.PodSandboxMetadata, error) {
 	podUid := annotations[kubernetesReservedAnnoPodUid]
 	podName := annotations[kubernetesReservedAnnoPodName]

rktlet/runtime/pod_sandbox.go

@@ -193,6 +193,10 @@ func (r *RktRuntime) ListPodSandbox(ctx context.Context, req *runtimeApi.ListPod
 	sandboxes := make([]*runtimeApi.PodSandbox, 0, len(pods))
 	for i, _ := range pods {
 		p := pods[i]
+		if !isKubernetesPod(&p) {
+			glog.V(6).Infof("Skipping non-kubernetes pod %s", p.UUID)
+			continue
+		}
 		sandboxStatus, err := toPodSandboxStatus(&p)
 		if err != nil {
 			return nil, fmt.Errorf("error converting the status of pod sandbox %v: %v", p.UUID, err)

rktlet/runtime/rkt_runtime.go

@@ -189,6 +189,10 @@ func (r *RktRuntime) ListContainers(ctx context.Context, req *runtimeApi.ListCon
 	var containers []*runtimeApi.Container
 	for _, p := range pods {
 		p := p
+		if !isKubernetesPod(&p) {
+			glog.V(6).Infof("Skipping non-kubernetes pod %s", p.UUID)
+			continue
+		}
 		for _, appName := range p.AppNames {
 			if strings.HasPrefix(appName, internalAppPrefix) {
 				continue