...
The 'Multitenant Secure Cloud Native Platform' uses Kata Containers to launch non-infrastructure pods. To be able tu In order to use Kata Containers, we also use Containerd runtime interface Containerd is used in Kubernetes instead of the default docker-shim.
To launch Kata Containers pods in a Kubernetes cluster, we make use of a mutating admission controller that annotates Pods with the Kata RuntimeClass. Kubernetes and Containerd are previously configured with this RuntimeClass.
Testing
CI Testing:
Bashate:
...