github/confidential-containers
1
0
Fork 0
mirror of https://github.com/confidential-containers/confidential-containers.git synced 2025-08-15 22:43:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

guides: add runtime handler annotation to examples

Browse Source 
With Nydus snapshotter we require a minor change to pod yaml files.

Signed-off-by: Tobin Feldman-Fitzthum <tobin@ibm.com>
This commit is contained in:
Tobin Feldman-Fitzthum 2023-11-08 13:48:16 -06:00 committed by Tobin Feldman-Fitzthum
parent fccda517ed
commit b36a57e530
4 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
guides/ephemeral_storage.md
View File

@ -12,6 +12,8 @@ apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: trusted-lvm-block name: trusted-lvm-block
annotations:
io.containerd.cri.runtime-handler: kata-qemu-tdx
spec: spec:
runtimeClassName: kata-qemu-tdx runtimeClassName: kata-qemu-tdx
containers: containers:

2
guides/nontee_demo.md
View File

@ -57,6 +57,8 @@ spec:
metadata: metadata:
labels: labels:
app: ccv0-ssh app: ccv0-ssh
annotations:
io.containerd.cri.runtime-handler: kata
spec: spec:
runtimeClassName: kata runtimeClassName: kata
containers: containers:

2
guides/sev.md
View File

@ -129,6 +129,8 @@ spec:
metadata: metadata:
labels: labels:
app: encrypted-image-tests app: encrypted-image-tests
annotations:
io.containerd.cri.runtime-handler: kata-qemu-sev
spec: spec:
runtimeClassName: kata-qemu-sev runtimeClassName: kata-qemu-sev
containers: containers:

16
quickstart.md
View File

@ -63,9 +63,9 @@ with the desired [release tag](https://github.com/confidential-containers/operat
kubectl apply -k github.com/confidential-containers/operator/config/release?ref=<RELEASE_VERSION> kubectl apply -k github.com/confidential-containers/operator/config/release?ref=<RELEASE_VERSION>
``` ```
For example, to deploy the `v0.3.0` release run: For example, to deploy the `v0.8.0` release run:
``` ```
kubectl apply -k github.com/confidential-containers/operator/config/release?ref=v0.3.0 kubectl apply -k github.com/confidential-containers/operator/config/release?ref=v0.8.0
``` ```
Wait until each pod has the STATUS of Running. Wait until each pod has the STATUS of Running.
@ -87,14 +87,14 @@ kubectl apply -k github.com/confidential-containers/operator/config/samples/ccru
The current present overlays are: `default` and `s390x` The current present overlays are: `default` and `s390x`
For example, to deploy the `v0.3.0` release for `x86_64`, run: For example, to deploy the `v0.8.0` release for `x86_64`, run:
``` ```
kubectl apply -k github.com/confidential-containers/operator/config/samples/ccruntime/default?ref=v0.3.0 kubectl apply -k github.com/confidential-containers/operator/config/samples/ccruntime/default?ref=v0.8.0
``` ```
And to deploy `v0.3.0` release for `s390x`, run: And to deploy `v0.8.0` release for `s390x`, run:
``` ```
kubectl apply -k github.com/confidential-containers/operator/config/samples/ccruntime/s390x?ref=v0.3.0 kubectl apply -k github.com/confidential-containers/operator/config/samples/ccruntime/s390x?ref=v0.8.0
``` ```
Wait until each pod has the STATUS of Running. Wait until each pod has the STATUS of Running.
@ -184,6 +184,8 @@ metadata:
labels: labels:
run: nginx run: nginx
name: nginx name: nginx
annotations:
io.containerd.cri.runtime-handler: kata
spec: spec:
containers: containers:
- image: bitnami/nginx:1.22.0 - image: bitnami/nginx:1.22.0
@ -392,6 +394,8 @@ metadata:
labels: labels:
run: encrypted-image-test-busybox run: encrypted-image-test-busybox
name: encrypted-image-test-busybox name: encrypted-image-test-busybox
annotations:
io.containerd.cri.runtime-handler: [RUNTIME_CLASS]
spec: spec:
containers: containers:
- image: [REGISTRY_URL]:encrypted - image: [REGISTRY_URL]:encrypted