summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2019-11-25Handle any volume type, not only tmpfs (#42)Fabricio Voznika
2019-10-09Support volume annotations (#40)Lantao Liu
* Add volume annotation support Signed-off-by: Lantao Liu <lantaol@google.com> * Add unit test. Signed-off-by: Lantao Liu <lantaol@google.com>
2019-09-16Enable go module by default in the Makefile. (#38)Lantao Liu
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-08-29Replace pre-go1.11 vendoring with a go1.12 module. (#37)brb-g
2019-08-13Add variable controlling the go binary path. (#35)brb-g
2019-05-29Create rootfs directory in shim. (#30)Lantao Liu
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-14Change code-owners to gvisor team (#29)Ian Lewis
2019-05-15Use context.Background for runtime.Wait. (#28)Lantao Liu
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-11Port shim fix (#27)Lantao Liu
Port shim fixes containerd/containerd#3264, containerd/containerd#3264 Update containerd to newest release/1.2 commit.
2019-04-12Also push the shim v2 binary to the GCS bucket. (#23)Lantao Liu
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-08fix: apply runtime path from runcOption to opts.BinaryName (#22)jerryzhuang
enable to pass a custom runtime path to gvisor-containerd-shim Signed-off-by: zhuangqh <zhuangqhc@gmail.com>
2019-03-29fix: instructions to install shim (#21)jerryzhuang
1. original LATEST_RELEASE is about containerd-shim-runsc-v1, we should choose the second line gvisor-containerd-shim. lol 2. should use /etc/containerd/gvisor-containerd-shim.toml not yaml : ) fixes #18 Signed-off-by: zhuangqh <zhuangqhc@gmail.com>
2019-03-29Support task creation options passed by ContainerD 1.2.4 (#20)jmillikin-stripe
When ContainerD v1.2.4 creates a task, it may pass a *runctypes.CreateOptions in the request options field. This currently causes the gvisor-containerd-shim to reject the request. This PR allows the shim to handle requests with creation options set, and also slightly improves the error message so future failures of this kind are easier to localize to the shim. Fixes #19
2019-03-08Put the gvisor user log into sandbox log directory. (#17)Lantao Liu
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-01-30Update to containerd 1.2.2 (#14)Lantao Liu
* Update containerd to 1.2.2 Signed-off-by: Lantao Liu <lantaol@google.com> * Port https://github.com/containerd/containerd/pull/2803. Signed-off-by: Lantao Liu <lantaol@google.com>
2019-01-29Add containerd shim v2 support. (#13)Lantao Liu
* Update vendors Signed-off-by: Lantao Liu <lantaol@google.com> * Add containerd shim v2 support. Signed-off-by: Lantao Liu <lantaol@google.com> * Add test and doc for containerd-shim-runsc-v1. Signed-off-by: Lantao Liu <lantaol@google.com> * Address comments.
2019-01-15Port containerd fix https://github.com/containerd/containerd/pull/2877. (#12)Lantao Liu
Adds a timeout and cancel to shim fifo open Signed-off-by: Lantao Liu <lantaol@google.com>
2019-01-15Use cni v0.7.0. (#11)Lantao Liu
Use cni v0.7.0 in the integration test. Signed-off-by: Lantao Liu <lantaol@google.com>
2019-01-14End to end tests refs #3 (#10)Ian Lewis
* Separate docs for containerd 1.1 and 1.2 The configuration for the untrusted workload annotation and runtime class are different enough that it makes sense to separate the docs. Commands in docs are taken from scripts in the docs/scripts directory. These scripts can be used later for integration & doc tests (#3). The docs can be updated using the embedmd tool: https://github.com/campoy/embedmd * Add basic e2e tests refs #3 Added end-to-end tests based on the quickstart workflows for containerd 1.1 and containerd 1.2+.
2018-12-17Merge pull request #7 from google/codeownersIan Lewis
Added code owners so that they are added to PRs See: https://help.github.com/articles/about-codeowners/
2018-12-17Merge branch 'master' into codeownersIan Lewis
2018-12-17Merge pull request #6 from google/fix-containerd-1.1-docsIan Lewis
Fix sandbox.json instructions for containerd 1.1
2018-12-14Added code owners so that they are added to PRsIan Lewis
See: https://help.github.com/articles/about-codeowners/
2018-12-14Fix sandbox.json instructions for containerd 1.1Ian Lewis
Annotations aren't part of the PodSandboxMetadata but rather part of the PodSandboxConfig object. crictl's parsing logic seems to ignore extraneous fields so it silently fails to create pods using the untrusted workload runtime. See: https://github.com/kubernetes-sigs/cri-tools/blob/v1.13.0/vendor/k8s.io/kubernetes/pkg/kubelet/apis/cri/runtime/v1alpha2/api.pb.go#L775
2018-12-04Initial commitIan Lewis