diff --git a/config-windows.md b/config-windows.md index 761f2a79a..cb3849193 100644 --- a/config-windows.md +++ b/config-windows.md @@ -104,4 +104,19 @@ For more information about tooling to generate a gMSA, see [Deployment Overview] [gMSAOverview]: https://aka.ms/windowscontainers/manage-serviceaccounts -[gMSATooling]: https://aka.ms/windowscontainers/credentialspec-tools \ No newline at end of file +[gMSATooling]: https://aka.ms/windowscontainers/credentialspec-tools + + +## Servicing + +When a container terminates, the Host Compute Service indicates if a Windows update servicing operation is pending. +You can indicate that a container should be started in a mode to apply pending servicing operations via the OPTIONAL `servicing` field of the Windows configuration. + + +### Example + +```json + "windows": { + "servicing": true + } +``` \ No newline at end of file diff --git a/schema/config-windows.json b/schema/config-windows.json index 5ecd6dbd6..23b99f0de 100644 --- a/schema/config-windows.json +++ b/schema/config-windows.json @@ -69,6 +69,10 @@ "credentialspec": { "id": "https://opencontainers.org/schema/bundle/windows/credentialspec", "type": "object" + }, + "servicing": { + "id": "https://opencontainers.org/schema/bundle/windows/servicing", + "type": "boolean" } } } diff --git a/specs-go/config.go b/specs-go/config.go index 716821523..f82905005 100644 --- a/specs-go/config.go +++ b/specs-go/config.go @@ -434,6 +434,8 @@ type Windows struct { Resources *WindowsResources `json:"resources,omitempty"` // CredentialSpec contains a JSON object describing a group Managed Service Account (gMSA) specification. CredentialSpec interface{} `json:"credentialspec,omitempty"` + // Servicing indicates if the container is being started in a mode to apply a Windows Update servicing operation. + Servicing bool `json:"servicing,omitempty"` } // WindowsResources has container runtime resource constraints for containers running on Windows.