You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -272,7 +272,7 @@ loaded for the user's shell environment.
272
272
`cri` is a native plugin of containerd. Since containerd 1.1, the cri plugin is built into the release binaries and enabled by default.
273
273
274
274
> **Note:** As of containerd 1.5, the `cri` plugin is merged into the containerd/containerd repo. For example, the source code previously stored under [`containerd/cri/pkg`](https://github.com/containerd/cri/tree/release/1.4/pkg)
275
-
was moved to [`containerd/containerd/pkg/cri` package](https://github.com/containerd/containerd/tree/master/pkg/cri).
275
+
was moved to [`containerd/containerd/pkg/cri` package](https://github.com/containerd/containerd/tree/main/pkg/cri).
276
276
277
277
The `cri` plugin has reached GA status, representing that it is:
278
278
* Feature complete
@@ -292,7 +292,7 @@ A Kubernetes incubator project, [cri-tools](https://github.com/kubernetes-sigs/c
Copy file name to clipboardExpand all lines: docs/cri/config.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ This document provides the description of the CRI plugin configuration.
3
3
The CRI plugin config is part of the containerd config (default
4
4
path: `/etc/containerd/config.toml`).
5
5
6
-
See [here](https://github.com/containerd/containerd/blob/master/docs/ops.md)
6
+
See [here](https://github.com/containerd/containerd/blob/main/docs/ops.md)
7
7
for more information about containerd config.
8
8
9
9
The explanation and default value of each configuration item are as follows:
@@ -102,7 +102,7 @@ version = 2
102
102
# default unset profile will map to `unconfined`)
103
103
# Note: The default unset seccomp profile should not be confused with the seccomp profile
104
104
# used in CRI when the runtime default seccomp profile is requested. In the later case, the
105
-
# default is set by the following code (https://github.com/containerd/containerd/blob/master/contrib/seccomp/seccomp_default.go).
105
+
# default is set by the following code (https://github.com/containerd/containerd/blob/main/contrib/seccomp/seccomp_default.go).
106
106
# To summarize, there are two different seccomp defaults, the unset default used when the CRI request is
107
107
# set to nil or `unconfined`, and the default used when the runtime default seccomp profile is requested.
# key_model defines the name of the key model used for how the cri obtains
246
246
# keys used for decryption of encrypted container images.
247
-
# The [decryption document](https://github.com/containerd/cri/blob/master/docs/decryption.md)
247
+
# The [decryption document](https://github.com/containerd/containerd/blob/main/docs/cri/decryption.md)
248
248
# contains additional information about the key models available.
249
249
#
250
250
# Set of available string options: {"", "node"}
251
251
# Omission of this field defaults to the empty string "", which indicates no key model,
252
252
# disabling image decryption.
253
253
#
254
254
# In order to use the decryption feature, additional configurations must be made.
255
-
# The [decryption document](https://github.com/containerd/cri/blob/master/docs/decryption.md)
255
+
# The [decryption document](https://github.com/containerd/containerd/blob/main/docs/cri/decryption.md)
256
256
# provides information of how to set up stream processors and the containerd imgcrypt decoder
Copy file name to clipboardExpand all lines: docs/cri/decryption.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -40,6 +40,6 @@ version = 2
40
40
```
41
41
42
42
In this example, container image decryption is set to use the "node" key model.
43
-
In addition, the decryption [`stream_processors`](https://github.com/containerd/containerd/blob/master/docs/stream_processors.md) are configured as specified in [containerd/imgcrypt project](https://github.com/containerd/imgcrypt), with the additional field `--decryption-keys-path` configured to specify where decryption keys are located locally in the node.
43
+
In addition, the decryption [`stream_processors`](https://github.com/containerd/containerd/blob/main/docs/stream_processors.md) are configured as specified in [containerd/imgcrypt project](https://github.com/containerd/imgcrypt), with the additional field `--decryption-keys-path` configured to specify where decryption keys are located locally in the node.
44
44
45
45
The `$OCICRYPT_KEYPROVIDER_CONFIG` environment variable is used for [ocicrypt keyprovider protocol](https://github.com/containers/ocicrypt/blob/main/docs/keyprovider.md).
Copy file name to clipboardExpand all lines: docs/cri/proposal.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,7 +23,7 @@ Containerd is one potential alternative to Docker as the runtime for Kubernetes
23
23
### Cons
24
24
***User Adoption**:
25
25
* Ideally, Kubernetes users don't interact with the underlying container runtime directly. However, for the lack of debug toolkits, sometimes users still need to login the node to debug with Docker CLI directly.
26
-
* Containerd provides barebone CLIs [ctr](https://github.com/containerd/containerd/tree/master/cmd/ctr) and [dist](https://github.com/containerd/containerd/tree/master/cmd/dist) for development and debugging purpose, but they may not be sufficient and necessary. Additionally, presuming these are sufficient and necessary tools, a plan and time would be needed to sufficiently document these CLIs and educate users in their use.
26
+
* Containerd provides barebone CLIs [ctr](https://github.com/containerd/containerd/tree/main/cmd/ctr) and [dist](https://github.com/containerd/containerd/tree/main/cmd/dist) for development and debugging purpose, but they may not be sufficient and necessary. Additionally, presuming these are sufficient and necessary tools, a plan and time would be needed to sufficiently document these CLIs and educate users in their use.
27
27
***Maturity**: The rescoped containerd is pretty new, and it's still under heavy development.
28
28
## Goals
29
29
* Make sure containerd meets the requirement of Kubernetes, now and into the foreseeable future.
@@ -64,7 +64,7 @@ CRI-containerd should:
64
64
* Call [network plugin](https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/network/plugins.go) to update the options of the network namespace;
65
65
* Let the user containers in the same sandbox share the network namespace.
66
66
### Container Metrics
67
-
Containerd provides [container cgroup metrics](https://github.com/containerd/containerd/blob/master/reports/2017-03-17.md#metrics), and plans to provide [container writable layer disk usage](https://github.com/containerd/containerd/issues/678).
67
+
Containerd provides [container cgroup metrics](https://github.com/containerd/containerd/blob/main/reports/2017-03-17.md#metrics), and plans to provide [container writable layer disk usage](https://github.com/containerd/containerd/issues/678).
68
68
69
69
CRI container metrics api needs to be defined ([#27097](https://github.com/kubernetes/kubernetes/issues/27097)). After that, CRI-containerd should translate containerd container metrics into CRI container metrics.
70
70
### Image Management
@@ -77,7 +77,7 @@ CRI image filesystem metrics needs to be defined ([#33048](https://github.com/ku
77
77
### Out of Scope
78
78
Following items are out of the scope of this design, we may address them in future version as enhancement or optimization.
79
79
***Debuggability**: One of the biggest concern of CRI-containerd is debuggability. We should provide equivalent debuggability with Docker CLI through `kubectl`, [`cri-tools`](https://github.com/kubernetes-sigs/cri-tools) or containerd CLI.
80
-
***Built-in CRI support**: The [plugin model](https://github.com/containerd/containerd/blob/master/design/plugins.md) provided by containerd makes it possible to directly build CRI support into containerd as a plugin, which will eliminate one more hop from the stack. But because of the [limitation of golang plugin](https://github.com/containerd/containerd/issues/563), we have to either maintain our own branch or push CRI plugin upstream.
80
+
***Built-in CRI support**: The [plugin model](https://github.com/containerd/containerd/blob/main/design/plugins.md) provided by containerd makes it possible to directly build CRI support into containerd as a plugin, which will eliminate one more hop from the stack. But because of the [limitation of golang plugin](https://github.com/containerd/containerd/issues/563), we have to either maintain our own branch or push CRI plugin upstream.
81
81
***Seccomp**: ([#36997](https://github.com/kubernetes/kubernetes/issues/36997)) Seccomp is supported in OCI runtime spec. However, current seccomp implementation in Kubernetes is experimental and docker specific, the api needs to be defined in CRI first before CRI-containerd implements it.
82
82
***Streaming server authentication**: ([#36666](https://github.com/kubernetes/kubernetes/issues/36666)) CRI-containerd will be out-of-process with Kubelet, so it could not reuse Kubelet authentication. Its streaming server should implement its own authentication mechanism.
83
83
***Move container facilities into pod cgroup**: Container facilities including container image puller, container streaming handler, log handler and containerd-shim serve a specific container. They should be moved to the corresponding pod cgroup, and the overhead introduced by them should be charged to the pod.
Copy file name to clipboardExpand all lines: releases/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@
9
9
When moving from rc to final, the rc file may just be renamed and updated.
10
10
See [release-tool](https://github.com/containerd/release-tool)
11
11
12
-
2. Update the version file at `https://github.com/containerd/containerd/blob/master/version/version.go`
12
+
2. Update the version file at `https://github.com/containerd/containerd/blob/main/version/version.go`
13
13
14
14
3. Update RELEASES.md to refer to the new release and dates.
- Rich API Client ([getting started](https://github.com/containerd/containerd/blob/master/docs/getting-started.md) and [godoc](https://godoc.org/github.com/containerd/containerd)).
- Rich API Client ([getting started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) and [godoc](https://godoc.org/github.com/containerd/containerd)).
29
29
30
30
You can read about the full details of the project in the [README](https://github.com/containerd/containerd/blob/v1.0.0/README.md).
31
31
@@ -41,7 +41,7 @@ candidate full of stability fixes, hardening, and API improvements. If you run
The [_support horizon_](https://github.com/containerd/containerd/blob/master/RELEASES.md#support-horizon)
44
+
The [_support horizon_](https://github.com/containerd/containerd/blob/main/RELEASES.md#support-horizon)
45
45
for containerd has been updated to include the 1.0 release. With this release,
46
46
the 0.2 release line is now moved to the "End of Life" state. No new releases
47
47
on that branch will be made. The 1.0 release train will be considered an active
Copy file name to clipboardExpand all lines: releases/v1.1.0.toml
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -130,7 +130,7 @@ To set up containerd with Kubernetes...
130
130
131
131
## Support
132
132
133
-
The [_support horizon_](https://github.com/containerd/containerd/blob/master/RELEASES.md#support-horizon)
133
+
The [_support horizon_](https://github.com/containerd/containerd/blob/main/RELEASES.md#support-horizon)
134
134
for containerd has been updated to include the 1.1 release. With the addition of
135
135
the CRI plugin, we are expanding the support horizon for 1.1 to include the
136
136
entire lifespan of Kubernetes 1.10. The containerd 1.1 release train will be
0 commit comments