Deep Dive: CNI
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 14:25· Room 15AB - San Diego Convention Center, Mezzanine Level·
summary
CNI is a small spec plus a Go library (libcni) that runtimes call to exec plugins; spec sits at v0.4 while plugins evolve faster and the project is pushing toward 1.0 stable spec. The session covers a real CVE from the portmap plugin (ordering in iptables), the addition of the check verb implemented across reference plugins, and result caching and config caching now provided by libcni so runtimes can reliably run check and delete. Future work includes conformance tests and optional gRPC daemonization.
AI-written summary · about
chapters (11)
- 0:00Introduction and recap
- 1:24CNI specification overview
- 2:38Reference plugins and role
- 4:33Versioning and evolution
- 5:59CNI architecture diagram
- 8:24Security vulnerability story
- 12:39The check command feature
- 20:20Caching and config management
- 24:01Roadmap to CNI 1.0
- 25:17Future plans and CNI 2.0
- 28:16Q&A session
related talks
35mCNI Intro
33mOverview of CNI 1.0.0 and preview of CNI 2.0
27mTowards CNI v2.0
34m"My CNI Plugin Did… What?!": Debugging CNI with Style & Aplomb
28mCNI, CRI, and OCI - Oh My! [I]
31mMayday! CNI Overboard!
37mKubernetes and the CNI: Where We Are and What's Next - Casey Callendrello, CoreOS
32mDemystifying CNI Writing a CNI from Scratch