Conference:  KubeCon + CloudNativeCon Europe 2023

Authors: Urvashi Mohnani, Peter Hunt

2023-04-21

The CNCF landscape is full of options and admins often have trouble choosing projects for different parts of the stack. In the world of Container Runtime Interface (CRI) implementations, CRI-O is an excellent option, mixing a combination of new features with dependable stability. In this talk, join us while we walk through what CRI-O is, what it does, and how to install it, as well as some fun new features that've been added recently: like FreeBSD support, NRI support, and seccomp notify support. Audience members joining this session will learn many of the benefits CRI-O has to offer!

Conference:  KubeCon + CloudNativeCon North America 2022

Authors: Krisztian Litkey, Mike Brown

2022-10-28

The presentation discusses the use of NRI plugins in container and cryo configuration to simplify manual steps and reduce the chances of failure. The plugins provide a mechanism for unsolicited customizations and real-world examples of plugins are provided.

• NRI plugins can simplify manual steps and reduce the chances of failure in container and cryo configuration
• Plugins provide a mechanism for unsolicited customizations
• Real-world examples of plugins are provided, including annotation-based device injection, CDI device injection, and OCI hook injection

Conference:  KubeCon + CloudNativeCon North America 2022

Authors: Urvashi Mohnani, Peter Hunt, Mrunal Patel

2022-10-27

As CRI-O approaches CNCF graduation, it continues in its mission to provide a stable and secure OCI implementation of the Kubernetes CRI. Join the CRI-O team as they give an overview of CRI-O as well as talk about some new work, such as the progress on the new container monitor conmon-rs, rewritten completely in Rust. The team will also talk about the integration with sigstore to secure CRI-O’s supply chain as well as some of the interesting work being done in CRI-O to stay in-line with upstream Kubernetes. These include the stats collection rework as well as the work to support evented PLEG. Audience members will leave with an understanding of what CRI-O is, and where it is going.

Conference:  KubeCon + CloudNativeCon Europe 2022

Authors: Urvashi Mohnani, Peter Hunt, Mrunal Patel

2022-05-18

Anyone who has followed CRI-O, the OCI compliant implementation of the Kubernetes Container Runtime Interface (CRI), knows that it aims to be secure, performant, and over-all boring. Implemented as exactly the CRI implementation Kubernetes needs, and nothing more, allows it to be optimized, secured, and version-locked for Kubernetes. In this talk, Sascha Grunert, Mrunal Patel, Urvashi Mohnani, and Peter Hunt will give an overview of CRI-O, as well as discuss some recent improvements that highlight these three key aspects of CRI-O. The talk will cover the ease with which it transitioned between CRI versions, optimizations in container exec probes with conmon-rs, security improvements regarding SELinux relabelling for container volumes, and general security enhancements by running seccomp by default. People who join us, whether seasoned end-users or budding community members, should learn what CRI-O has to offer as the container manager that loves Kubernetes the most.Click here to view captioning/translation in the MeetingPlay platform!

Conference:  KubeCon + CloudNativeCon North America 2021

Authors: Peter Hunt, Antti Kervinen

2021-10-15

The presentation discusses the implementation of QoS (Quality of Service) in Kubernetes using block I/O classes and CPU manager policies to prioritize critical workloads.

• QoS can be implemented in Kubernetes using block I/O classes and CPU manager policies
• Block I/O classes can be used to prioritize workloads based on their importance
• CPU manager policies can be used to assign specific CPU affinity to critical processes
• Throttling can be used to limit resource contention and prioritize critical workloads
• An anecdote is provided to illustrate the importance of prioritizing critical workloads

Conference:  KubeCon + CloudNativeCon North America 2021

Authors: Urvashi Mohnani, Peter Hunt, Mrunal Patel, Sascha Grunert

2021-10-14

CRI-O is a lightweight container runtime written exclusively for Kubernetes. In addition to being a standard component for deploying secure and stable Kubernetes clusters, CRI-O has the unique advantage of being able to tailor its behavior to the needs of the Kubernetes ecosystem. In this talk, Mrunal Patel, Urvashi Mohnani, Sascha Grunert and Peter Hunt, the maintainers of CRI-O, will provide an update about the latest feature developments, as well as live demonstrating typical real world use cases around them. In addition to a review of the basics of setting up and using CRI-O with Kubernetes, the talk will cover improvements around the handling of CNI resources, the ability to tailor container resources with workload types, and updates to the collection and broadcasting of stats and metrics. Join the CRI-O maintainers to learn more about how CRI-O works in action and why it’s the perfect choice for your Kubernetes cluster!