Add containerized flag and update mount options (#2519)

* Add containerized flag and update mount options

* add —containerized as static kubelet config option

* —containerized is truly static config

Author: lachie83

parts/k8s/artifacts/kuberneteskubelet.service

@@ -22,21 +22,23 @@ ExecStart=/usr/bin/docker run \
   --pid=host \
   --privileged \
   --rm \
+  --volume=/:/rootfs:ro,shared \
   --volume=/dev:/dev \
   --volume=/sys:/sys:ro \
   --volume=/var/run:/var/run:rw \
   --volume=/var/lib/cni/:/var/lib/cni:rw \
   --volume=/sbin/apparmor_parser/:/sbin/apparmor_parser:rw \
-  --volume=/var/lib/docker/:/var/lib/docker:rw \
+  --volume=/var/lib/docker/:/var/lib/docker:rw,shared \
   --volume=/var/lib/containers/:/var/lib/containers:rw \
-  --volume=/var/lib/kubelet/:/var/lib/kubelet:shared \
+  --volume=/var/lib/kubelet/:/var/lib/kubelet:rw,shared \
   --volume=/var/log:/var/log:rw \
   --volume=/etc/kubernetes/:/etc/kubernetes:ro \
   --volume=/srv/kubernetes/:/srv/kubernetes:ro $DOCKER_OPTS \
   --volume=/var/lib/waagent/ManagedIdentity-Settings:/var/lib/waagent/ManagedIdentity-Settings:ro \
   --volume=/etc/kubernetes/volumeplugins:/etc/kubernetes/volumeplugins:rw \
     ${KUBELET_IMAGE} \
       /hyperkube kubelet \
+        --containerized \
         --enable-server \
         --node-labels="${KUBELET_NODE_LABELS}" \
         --v=2 \