Skip to content
Snippets Groups Projects
Select Git revision
  • e19ce2735244c7b07bfab00d8b92993694493187
  • master default protected
  • v2.28.0
  • v2.27.0
  • v2.25.1
  • v2.24.3
  • v2.26.0
  • v2.24.2
  • v2.25.0
  • v2.24.1
  • v2.22.2
  • v2.23.3
  • v2.24.0
  • v2.23.2
  • v2.23.1
  • v2.23.0
  • v2.22.1
  • v2.22.0
  • v2.21.0
  • v2.20.0
  • v2.19.1
  • v2.18.2
22 results

kata-containers.md

Blame
  • user avatar
    Cristian Calin authored and GitHub committed
    * Docs: update CONTRIBUTING.md
    
    * Docs: clean up outdated roadmap and point to github issues instead
    
    * Docs: update note on kubelet_cgroup_driver
    
    * Docs: update kata containers docs with note about cgroup driver
    
    * Docs: note about CI specific overrides
    52ee5d0f
    History

    Kata Containers

    Kata Containers is a secure container runtime with lightweight virtual machines that supports multiple hypervisor solutions.

    Hypervisors

    Qemu is the only hypervisor supported by Kubespray.

    Installation

    To use Kata Containers, set the following variables:

    k8s_cluster.yml:

    container_manager: containerd
    kata_containers_enabled: true

    etcd.yml:

    etcd_deployment_type: host

    Configuration

    Recommended : Pod Overhead

    Pod Overhead is a feature for accounting for the resources consumed by the Runtime Class used by the Pod.

    When this feature is enabled, Kubernetes will count the fixed amount of CPU and memory set in the configuration as used by the virtual machine and not by the containers running in the Pod.

    Pod Overhead is mandatory if you run Pods with Kata Containers that use resources limits.

    Set cgroup driver:

    To enable Pod Overhead feature you have to configure Kubelet with the appropriate cgroup driver, using the following configuration:

    cgroupfs works best:

    kubelet_cgroup_driver: cgroupfs

    ... but when using cgroups v2 (see https://www.redhat.com/en/blog/world-domination-cgroups-rhel-8-welcome-cgroups-v2) you can use systemd as well:

    kubelet_cgroup_driver: systemd

    Qemu hypervisor configuration:

    The configuration for the Qemu hypervisor uses the following values:

    kata_containers_qemu_overhead: true
    kata_containers_qemu_overhead_fixed_cpu: 10m
    kata_containers_qemu_overhead_fixed_memory: 290Mi

    Optional : Select Kata Containers version

    Optionally you can select the Kata Containers release version to be installed. The available releases are published in GitHub.

    kata_containers_version: 2.2.2

    Optional : Debug

    Debug is disabled by default for all the components of Kata Containers. You can change this behaviour with the following configuration:

    kata_containers_qemu_debug: 'false'