1eae56ba7f
Update Kata containers docs Fix conflict Story: 2010765 Task: 49554 Change-Id: I07e31de31baca504e073efc5358ab664d9355909 Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
67 lines
9.6 KiB
ReStructuredText
67 lines
9.6 KiB
ReStructuredText
|
|
.. rpw1591793808686
|
|
.. _specifying-kata-container-runtime-in-pod-spec:
|
|
|
|
==========================================
|
|
Specify Kata Container Runtime in Pod Spec
|
|
==========================================
|
|
|
|
You can specify the use of Kata Container runtime in your pod specification by
|
|
runtime class or by annotation.
|
|
|
|
.. rubric:: |proc|
|
|
|
|
Choose one of the methods below:
|
|
|
|
.. table::
|
|
:widths: auto
|
|
|
|
+--------------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------------+
|
|
| **To use the runtime class method:** | #. Create a RuntimeClass with handler set to kata. |
|
|
| | |
|
|
| | #. Reference this class in the pod spec, as shown in the following example: |
|
|
| | |
|
|
| | .. code-block:: none |
|
|
| | |
|
|
| | kind: RuntimeClass |
|
|
| | apiVersion: node.k8s.io/v1 |
|
|
| | metadata: |
|
|
| | name: kata-containers |
|
|
| | handler: kata |
|
|
| | --- |
|
|
| | apiVersion: v1 |
|
|
| | kind: Pod |
|
|
| | metadata: |
|
|
| | name: busybox-runtime |
|
|
| | spec: |
|
|
| | runtimeClassName: kata-containers |
|
|
| | containers: |
|
|
| | - name: busybox |
|
|
| | command: |
|
|
| | - sleep |
|
|
| | - "3600" |
|
|
| | image: busybox |
|
|
+--------------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------------+
|
|
| **To use the annotation method:** | Set io.kubernetes.cri.untrusted-workload to true in the annotations section of a pod spec. |
|
|
| | |
|
|
| | For example: |
|
|
| | |
|
|
| | .. code-block:: none |
|
|
| | |
|
|
| | apiVersion: v1 |
|
|
| | kind: Pod |
|
|
| | metadata: |
|
|
| | name: busybox-untrusted |
|
|
| | annotations: |
|
|
| | io.kubernetes.cri.untrusted-workload: "true" |
|
|
| | spec: |
|
|
| | containers: |
|
|
| | - name: busybox |
|
|
| | command: |
|
|
| | - sleep |
|
|
| | - "3600" |
|
|
| | image: busybox |
|
|
| | |
|
|
| | .. note:: |
|
|
| | This method is deprecated and may not be supported in future releases. |
|
|
+--------------------------------------------------------------------------------------------+--------------------------------------------------------------------------------------------+ |