summaryrefslogtreecommitdiffhomepage
path: root/content/docs/user_guide/kubernetes.md
diff options
context:
space:
mode:
Diffstat (limited to 'content/docs/user_guide/kubernetes.md')
-rw-r--r--content/docs/user_guide/kubernetes.md12
1 files changed, 12 insertions, 0 deletions
diff --git a/content/docs/user_guide/kubernetes.md b/content/docs/user_guide/kubernetes.md
index 4fed63c7a..3aa5c719b 100644
--- a/content/docs/user_guide/kubernetes.md
+++ b/content/docs/user_guide/kubernetes.md
@@ -20,7 +20,19 @@ use either the `io.kubernetes.cri.untrusted-workload` annotation or
[RuntimeClass][runtimeclass] to run Pods with `runsc`. You can find
instructions [here][gvisor-containerd-shim].
+## Using GKE Sandbox
+
+[GKE Sandbox][gke-sandbox] is available in [Google Kubernetes Engine][gke]. You
+just need to deploy a node pool with gVisor enabled in your cluster, and it will
+run pods annotated with `runtimeClassName: gvisor` inside a gVisor sandbox for
+you. [Here][wordpress-quick] is a quick example showing how to deploy a
+WordPress site. You can view the full documentation [here][gke-sandbox-docs].
+
[containerd]: https://containerd.io/
[minikube]: https://github.com/kubernetes/minikube/blob/master/deploy/addons/gvisor/README.md
+[gke]: https://cloud.google.com/kubernetes-engine/
+[gke-sandbox]: https://cloud.google.com/kubernetes-engine/sandbox/
+[gke-sandbox-docs]: https://cloud.google.com/kubernetes-engine/docs/how-to/sandbox-pods
[gvisor-containerd-shim]: https://github.com/google/gvisor-containerd-shim
[runtimeclass]: https://kubernetes.io/docs/concepts/containers/runtime-class/
+[wordpress-quick]: /docs/tutorials/kubernetes/ \ No newline at end of file