Specify Kata Container Runtime in Pod SpecΒΆ

You can specify the use of Kata Container runtime in your pod specification by runtime class or by annotation.

Procedure

  • Do one of the following:

    To use the runtime class method:

    1. Create a RuntimeClass with handler set to kata.

    2. Reference this class in the pod spec, as shown in the following example:

      kind: RuntimeClass
apiVersion: node.k8s.io/v1beta1
metadata:
  name: kata-containers
handler: kata
---
apiVersion: v1
kind: Pod
metadata:
  name: busybox-runtime
spec:
  runtimeClassName: kata-containers
  containers:
  - name: busybox
    command:
      - sleep
      - "3600"
    image: busybox

    To use the annotation method:

    Set io.kubernetes.cri.untrusted-workload to true in the annotations section of a pod spec.

    For example:

    apiVersion: v1
kind: Pod
metadata:
  name: busybox-untrusted
  annotations:
    io.kubernetes.cri.untrusted-workload: "true"
spec:
  containers:
  - name: busybox
    command:
      - sleep
      - "3600"
    image: busybox

    Note

    This method is deprecated and may not be supported in future releases.