CRI-O: The Runtime Control Room

on YouTube ↗31m

" summary

CRI-O implements the Kubernetes CRI using OCI images/runtimes and focuses on secure, admin-facing knobs: dynamic reload (SIGHUP) with drop-in files and a regex log level filter, shared config files (registries.conf, policy.json, storage.conf), CNI directories and bootstrap via DaemonSet, runtime classes plus pod annotations (example: io.kubernetes.crio.userns.mode creates a 65k userns mapping), prestart/prestop hooks to disable CPU load balancing per-pod, a seccomp_default_when_empty option that enables seccomp by default, cgroups v2 and a path toward Rust components; current release 1.19.

AI-written summary · about

" chapters (9)

1. 0:00Start
2. 1:43Overview
3. 2:52Dynamic aspects of CRIO's configuration
4. 9:16Networking configuration
5. 10:10Runtime Classes/Handlers
6. 12:05Pod Annotations
7. 13:03Summary
8. 29:36Currently at CRI-O 1.19
9. 30:22Website

" related talks

• 38mIntroduction to CRI-OMrunal Patel, Peter Hunt · KubeCon + CloudNativeCon North America 2019
• 29mCRI-O: All the Runtime Kubernetes Needs, and Nothing MoreMrunal Patel · KubeCon + CloudNativeCon North America 2017
• 46mCRI-O: All the Runtime Kubernetes needAntonio Mudarca · QCon São Paulo 2018
• 33mCRI-O Still Loves KubernetesMrunal Patel, Peter Hunt, Urvashi Mohnani, Sasha Grunert · KubeCon + CloudNativeCon Europe 2021
• 37mCRI-O: Under the HoodSascha Grunert, Mrunal Patel · KubeCon + CloudNativeCon North America 2019
• 26mWhat's New in CRI-O?Sascha Grunert, Mrunal Patel, Peter Hunt, Urvashi Mohnani · KubeCon + CloudNativeCon North America 2021
• 21mCRI-O: Secure, Performant, and Boring...Sascha Grunert, Mrunal Patel, Peter Hunt, Urvashi Mohnani · KubeCon + CloudNativeCon Europe 2022
• 19mCRI-O development: behind the scenesAntonio Murdaca · DevConf.CZ 2019