...
Using Kata in an ICN deployment is as simple as adding the RuntimeClass to each Pod spec. Below is a simple example showing how this is done for the cloud-hypervisor test pod.
kind: Pod
apiVersion: v1
metadata:
name: kata-clh
spec:
runtimeClassName: kata-clh
containers:
- name: busybox
image: busybox
imagePullPolicy: Always
command: [ "sleep", "100000" ]
Figure 1: Kata RuntimeClass example
| Code Block | ||||
|---|---|---|---|---|
| ||||
kind: Pod
apiVersion: v1
metadata:
name: kata-clh
spec:
runtimeClassName: kata-clh
containers:
- name: busybox
image: busybox
imagePullPolicy: Always
command: [ "sleep", "100000" ] |
Alternatively, if the Kata webhook is enabled then all pods that are not privileged and do not have net=host will be mutated to run as a Kata Container using the hypervisor specified with KATA_WEBHOOK_RUNTIMECLASS.
Note: Please refer to the ICN README.md for detailed further installation instructions.