CRI-O - Secure, Performant, and Boring as Ever

Explore a comprehensive conference talk on CRI-O, the OCI-compliant implementation of the Kubernetes Container Runtime Interface (CRI). Discover how CRI-O aims to be secure, performant, and "boring" by focusing solely on Kubernetes' needs. Learn about recent improvements highlighting these key aspects, including the smooth transition between CRI versions, optimizations in container exec probes with conmon-rs, and security enhancements such as SELinux relabelling for container volumes and default seccomp implementation. Gain insights into what CRI-O offers as a container manager specifically designed for Kubernetes, whether you're an experienced end-user or a new community member.

CRI-O: Secure, Performant, and Boring... Peter Hunt, Urvashi Mohnani, Mrunal Patel & Sascha Grunert