diff options
| author | Ian Lewis <ianmlewis@gmail.com> | 2019-03-29 22:40:11 -0400 |
|---|---|---|
| committer | Ian Lewis <ianmlewis@gmail.com> | 2019-03-29 22:40:11 -0400 |
| commit | 22f1890a9beab11d8cfdceba3a4d66f8bbbb468c (patch) | |
| tree | 110ec3a84a72560244ee4476852295b86a737eb0 /content/docs/user_guide/kubernetes.md | |
Initial commit
Diffstat (limited to 'content/docs/user_guide/kubernetes.md')
| -rw-r--r-- | content/docs/user_guide/kubernetes.md | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/content/docs/user_guide/kubernetes.md b/content/docs/user_guide/kubernetes.md new file mode 100644 index 000000000..a1150622f --- /dev/null +++ b/content/docs/user_guide/kubernetes.md @@ -0,0 +1,16 @@ ++++ +title = "Kubernetes" +weight = 30 ++++ +gVisor can run sandboxed containers in a Kubernetes cluster with Minikube. After +the gVisor addon is enabled, pods with `io.kubernetes.cri.untrusted-workload` +set to true will execute with `runsc`. Follow [these instructions][minikube] to +enable gVisor addon. + +You can also setup Kubernetes nodes to run pods in gvisor using the `containerd` +CRI runtime and the `gvisor-containerd-shim`. Pods with the +`io.kubernetes.cri.untrusted-workload` annotation will execute with `runsc`. You +can find instructions [here][gvisor-containerd-shim]. + +[minikube]: https://github.com/kubernetes/minikube/blob/master/deploy/addons/gvisor/README.md +[gvisor-containerd-shim]: https://github.com/google/gvisor-containerd-shim |