Akihiro Suda
|
ecb881e5e6
|
add imgcrypt stream processors to the default config
Enable the following config by default:
```toml
version = 2
[plugins."io.containerd.grpc.v1.cri".image_decryption]
key_model = "node"
[stream_processors]
[stream_processors."io.containerd.ocicrypt.decoder.v1.tar.gzip"]
accepts = ["application/vnd.oci.image.layer.v1.tar+gzip+encrypted"]
returns = "application/vnd.oci.image.layer.v1.tar+gzip"
path = "ctd-decoder"
args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]
env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]
[stream_processors."io.containerd.ocicrypt.decoder.v1.tar"]
accepts = ["application/vnd.oci.image.layer.v1.tar+encrypted"]
returns = "application/vnd.oci.image.layer.v1.tar"
path = "ctd-decoder"
args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]
env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]
```
Fix issue 5128
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
|
2021-03-15 13:27:16 +09:00 |
|
Iceber Gu
|
f37ae8fc35
|
move to v3.4.1 for the pause image
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
|
2021-03-07 15:21:20 +08:00 |
|
Michael Crosby
|
41e3057cc6
|
Merge pull request #5025 from jeremyje/win20h2
Add references to Windows 20H2 test images.
|
2021-02-12 11:58:49 -05:00 |
|
Lorenz Brun
|
36d0bc1f2b
|
Allow moving netns directory into StateDir
Signed-off-by: Lorenz Brun <lorenz@nexantic.com>
|
2021-02-10 18:33:14 +01:00 |
|
Jeremy Edwards
|
1c81071d39
|
Add references to Windows 20H2 test images.
Signed-off-by: Jeremy Edwards <1312331+jeremyje@users.noreply.github.com>
|
2021-02-09 16:25:36 +00:00 |
|
Lantao Liu
|
b5bf1fd5d8
|
Fix deprecated registry auth conversion.
Signed-off-by: Lantao Liu <lantaol@google.com>
|
2021-02-03 19:22:26 -08:00 |
|
Gaurav Singh
|
071a185506
|
cri/config: fix range iterator issue in ValidatePluginConfig
Go uses the same address variable while iterating in a range,
so use a copy when using its address.
Signed-off-by: Gaurav Singh <gaurav1086@gmail.com>
|
2020-12-04 17:37:09 -05:00 |
|
Derek McGowan
|
b2642458f9
|
Update make snapshot annotations disabled by default
This experimental feature should not be enabled by default as
it is not used by any default snapshotters.
Signed-off-by: Derek McGowan <derek@mcg.dev>
|
2020-10-27 21:32:25 -07:00 |
|
Maksym Pavlenko
|
3508ddd3dd
|
Refactor CRI packages
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
|
2020-10-07 14:45:57 -07:00 |
|
Derek McGowan
|
b22b627300
|
Move cri server packages under pkg/cri
Organizes the cri related server packages under pkg/cri
Signed-off-by: Derek McGowan <derek@mcg.dev>
|
2020-10-07 13:09:37 -07:00 |
|