Configuring the container runtime

To optimize resource usage by agents on cluster nodes, Kaspersky Container Security updates container state information when pod lifecycle events occur (Evented Pod Lifecycle Event Generator (Evented PLEG)). In contrast to periodically polling all pods in the container to get their status, this approach involves updating information only about the events of active pods.

The solution supports the following container runtimes (CRIs):

• Containerd 1.7 or later
• CRI-O 1.26 or later

To use CRI-O, you must first configure the environment variables in the values.yaml configuration file.

To configure CRI-O,

do one of the following:

• Start the CRI-O service process with --enable-pod-events=true flag.
• Add the following section to the configuration file:

  [crio.runtime]

  enable_pod_events: true

To check if the CRI-O environment variables are configured in the solution configuration,

make the following request: crio config | grep enable_pod_events

If the CRI-O environment variables are configured in the solution configuration, you will get the following response: enable_pod_events=true

Page top