sandboxed-container-controller

更新时间:
复制 MD 格式

This document describes the features of the sandboxed-container-controller component and provides its release notes.

Introduction

The sandboxed-container-controller is a dedicated controller for the Sandboxed-Container runtime. It enhances the basic features of Sandboxed-Container and provides the following capabilities:
  • Custom kernel parameter configuration for Sandboxed-Container pods.
  • Automatic calculation and configuration of the VM specification for Sandboxed-Container.
  • Direct passthrough of cloud disks and NAS to Sandboxed-Container.

Usage

The sandboxed-container-controller component is installed by default and requires no additional configuration.

Release notes

May 2022

Version Image address Release date Description Impact
v1.2.0-0c6b9ba-aliyun registry.cn-hangzhou.aliyuncs.com/acs/sandboxed-container-controller:v1.2.0-0c6b9ba-aliyun 2022-05-12
  • Adds compatibility with Kubernetes 1.22.
  • Adds automatic management for admission webhook certificates and configurations.
This update has no impact on running services.

December 2020

Version Image address Release date Description Impact
v1.1.1-55d545f-aliyun registry.cn-hangzhou.aliyuncs.com/acs/sandboxed-container-controller:v1.1.1-55d545f-aliyun 2020-12-22 Forcibly overwrites the securecontainer.alibabacloud.com/cpus and securecontainer.alibabacloud.com/memory annotations if they are manually set on a pod. This update has no impact on running services.

November 2020

Version Image address Release date Description Impact
v1.1.0-3b3d499-aliyun registry.cn-hangzhou.aliyuncs.com/acs/sandboxed-container-controller:v1.1.0-3b3d499-aliyun 2020-11-26 Adds support for custom kernel parameter configuration in runV pod sandboxes. This update has no impact on running services.
v1.0.2-8ac82bf-aliyun registry.cn-hangzhou.aliyuncs.com/acs/sandboxed-container-controller:v1.0.2-8ac82bf-aliyun 2020-11-12 Adds the PodEraseRuntimeclassRunc admission controller. Because Docker does not support the RuntimeClass feature, this controller resets the pod.spec.runtimeClassName field to an empty string if it is set to runc. This update has no impact on running services.

August 2020

Version Image address Release date Description Impact
v1.0.1-8484958-aliyun registry.cn-hangzhou.aliyuncs.com/acs/sandboxed-container-controller:v1.0.1-8484958-aliyun 2020-08-26 Adds support for Sandboxed-Container 2.0. Adds the PodQuota admission controller for sandboxed containers. This controller sets the pod sandbox specification based on the total CPU and memory resources of all containers in the pod. This update has no impact on running services.

June 2020

Version Image address Release date Description Impact
v1.0.0-e408663-aliyun registry.cn-beijing.aliyuncs.com/acs/sandboxed-container-controller:v1.0.0-e408663-aliyun 2020-06-10 Changes the NAS init container image address from public to private. This update has no impact on running services.

March 2020

Version Image address Release date Description Impact
v1.0.0-a8b276f-aliyun registry.cn-hangzhou.aliyuncs.com/acs/sandboxed-container-controller:v1.0.0-a8b276f-aliyun 2020-03-26 Adds support for direct passthrough of NAS and cloud disk volumes. This feature delivers storage performance equivalent to host-mounted volumes, preventing the severe performance loss caused by 9PFS. This update has no impact on running services.