Contents

Kubernetes Runtime Class

Container Runtime Handlers

RuntimeHandler
gVisorrunsc
Katakata

gVisor

gvisor.yaml

1
2
3
4
5
apiVersion: node.k8s.io/v1beta1
kind: RuntimeClass
metadata:
  name: gvisor
handler: runsc

Create a RuntimeClass

1
kubectl create -f gvisor.yaml

Kata

kata.yaml

1
2
3
4
5
apiVersion: node.k8s.io/v1beta1
kind: RuntimeClass
metadata:
  name: kata
handler: kata

Create a RuntimeClass

1
kubectl create -f gvisor.yaml

Apply to POD

gVisor POD

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
apiVersion: v1
kind: Pod
metadata:
  labels:
    run: nginx
  name: nginx
spec:
  runtimeClassName: gvisor
  containers:
    - image: nginx
      name: nginx

Kata POD

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
apiVersion: v1
kind: Pod
metadata:
  labels:
    run: nginx
  name: nginx
spec:
  runtimeClassName: kata
  containers:
    - image: nginx
      name: nginx

Check Container Runtime

Connect to the Node

1
ssh node01

Grep Process

1
pgrep -a nginx
1
pgrep -a runsc
1
pgrep -a kata