code: func modifyHostOptionsForSandbox(nsOpts *runtimeapi.NamespaceOption, network *knetwork.PluginManager, hc *dockercontainer.HostConfig) {
  	if nsOpts.GetIpc() == runtimeapi.NamespaceMode_NODE {
  		hc.IpcMode = namespaceModeHost
  	}
  	if nsOpts.GetNetwork() == runtimeapi.NamespaceMode_NODE {
  		hc.NetworkMode = namespaceModeHost
  		return
  	}
  
  	if network == nil {
  		hc.NetworkMode = "default"
  		return
  	}
  
  	switch network.PluginName() {
  	case "cni":
  		fallthrough
  	case "kubenet":
  		hc.NetworkMode = "none"
  	default:
  		hc.NetworkMode = "default"
  	}
  }
docs: // modifyHostOptionsForSandbox applies NetworkMode/UTSMode to sandbox's dockercontainer.HostConfig.