Testing and Validating Container Images with Container Canary
Lightningat ContainerCon @ Open Source Summit Europe 2022 · on Thursday, 2022-09-15· at 11:00· Wicklow Hall 1 (Level 2), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Container Canary is an open source tool (NVIDIA GitHub) that records platform requirements as a YAML manifest and programmatically checks images against them, using the Kubernetes probes API to run exec/http/tcp probes and produce a pass/fail result via the CLI command canary validate. It finds real regressions—used with Rapids to catch compatibility breaks between Kubeflow expectations like an HTTP service on port 888 and a specific username/user ID—and ships as a single Go binary suitable for local use and CI.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:30Need for image testing
- 2:32How Container Canary works
- 4:40Kubeflow image requirements
- 7:28Writing Container Canary tests
- 8:33Container Canary in CI
- 9:58Future plans
related talks
09mLightning Talk: What’s Inside Your Container Image? How to Audit All the Dependencies...
30mA secure journey on Kubernetes
24mDon’t be a fail whale, secure your containers
38mOpen Source Security Tools for Kubernetes Applications
40mContinuous Delivery with Containers: The Good, the Bad, and the Ugly
20mEmerging Automated License Compliance for Containers
24mSecuring Container Workloads
18mPractical End-to-End Container Security at Scale