360aff4a57
* rename ansible groups to use _ instead of -
k8s-cluster -> k8s_cluster
k8s-node -> k8s_node
calico-rr -> calico_rr
no-floating -> no_floating
Note: kube-node,k8s-cluster groups in upgrade CI
need clean-up after v2.16 is tagged
* ensure old groups are mapped to the new ones
68 lines
2 KiB
Markdown
68 lines
2 KiB
Markdown
# Kata Containers
|
|
|
|
[Kata Containers](https://katacontainers.io) is a secure container runtime with lightweight virtual machines that supports multiple hypervisor solutions.
|
|
|
|
## Hypervisors
|
|
|
|
_Qemu_ is the only hypervisor supported by Kubespray.
|
|
|
|
## Installation
|
|
|
|
To use Kata Containers, set the following variables:
|
|
|
|
**k8s_cluster.yml**:
|
|
|
|
```yaml
|
|
container_manager: containerd
|
|
kata_containers_enabled: true
|
|
```
|
|
|
|
**etcd.yml**:
|
|
|
|
```yaml
|
|
etcd_deployment_type: host
|
|
```
|
|
|
|
## Configuration
|
|
|
|
### Recommended : Pod Overhead
|
|
|
|
[Pod Overhead](https://kubernetes.io/docs/concepts/configuration/pod-overhead/) is a feature for accounting for the resources consumed by the Runtime Class used by the Pod.
|
|
|
|
When this feature is enabled, Kubernetes will count the fixed amount of CPU and memory set in the configuration as used by the virtual machine and not by the containers running in the Pod.
|
|
|
|
Pod Overhead is mandatory if you run Pods with Kata Containers that use [resources limits](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits).
|
|
|
|
**Set cgroup driver**:
|
|
|
|
To enable Pod Overhead feature you have to configure Kubelet with the appropriate cgroup driver, using the following configuration:
|
|
|
|
```yaml
|
|
kubelet_cgroup_driver: cgroupfs
|
|
```
|
|
|
|
**Qemu hypervisor configuration**:
|
|
|
|
The configuration for the Qemu hypervisor uses the following values:
|
|
|
|
```yaml
|
|
kata_containers_qemu_overhead: true
|
|
kata_containers_qemu_overhead_fixed_cpu: 10m
|
|
kata_containers_qemu_overhead_fixed_memory: 290Mi
|
|
```
|
|
|
|
### Optional : Select Kata Containers version
|
|
|
|
Optionally you can select the Kata Containers release version to be installed. The available releases are published in [GitHub](https://github.com/kata-containers/runtime/releases).
|
|
|
|
```yaml
|
|
kata_containers_version: 1.11.1
|
|
```
|
|
|
|
### Optional : Debug
|
|
|
|
Debug is disabled by default for all the components of Kata Containers. You can change this behaviour with the following configuration:
|
|
|
|
```yaml
|
|
kata_containers_qemu_debug: 'false'
|
|
```
|