MENU
Context
This cluster uses containerd as CRI runtime.
Containerd's default runtime handler is runc. Containerd has been prepared to support an additional runtime handler, runsc (gVisor).
Task
Create a RuntimeClass named sandboxed using the prepared runtime handler named runsc.
Update all Pods in the namespace server to run on gVisor.
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
17 comments · newest first
RE
Ressie
11 months ago
runc has been solid, why change it up?
PE
Pearlie
11 months ago
Wait, are we really switching all Pods to gVisor? Sounds risky.
BO
Bok
12 months ago
Just created a RuntimeClass named sandboxed. Easy peasy!
PO
Pok
12 months ago
Not sure if it's worth the performance hit, though.
RU
Rueben
1 year ago
gVisor is great for added security!
AL
Alfreda
1 year ago
I vaguely remember something about annotations in the RuntimeClass definition. Do we need to include those for gVisor?
IE
Iesha
1 year ago
I feel a bit uncertain about updating all Pods in the namespace. Did we cover how to do that with a command or a YAML file?
YU
Yuriko
1 year ago
This seems similar to a practice question we did on setting up different runtime handlers. I hope I can recall the steps correctly.
JA
Jacqueline
1 year ago
I think I remember how to create a RuntimeClass, but I'm not entirely sure about the exact syntax for using runsc.
LI
Lilli
1 year ago
This seems pretty straightforward. I'll create the RuntimeClass, then update the Pods in the server namespace to use the new RuntimeClass. Shouldn't be too difficult as long as I follow the steps carefully.
JA
Jacqueline
1 year ago
I'm a little confused by the context here. Does the cluster already have the runsc runtime handler configured, or do I need to set that up first? I'll need to double-check the requirements before proceeding.
GA
Galen
1 year ago
Okay, I think I've got this. First, I'll create the RuntimeClass resource with the runsc runtime handler. Then I'll update the Pod spec for the Pods in the server namespace to use that RuntimeClass.
NA
Nadine
1 year ago
Hmm, I'm a bit unsure about the steps here. I'll need to review the containerd documentation on how to set up and configure the additional runtime handler.
VA
Vallie
1 year ago
This looks straightforward. I'll start by creating the RuntimeClass for the runsc runtime handler, then update the Pods in the server namespace to use that RuntimeClass.
KR
Kristofer
1 year ago
Okay, let's see. The label of the object could have been changed, so that's definitely a possibility. And if it's a custom object, Data Loader may not be the best tool to use.
LU
Lucille
1 year ago
I'm a bit confused on this one. I'm not sure if the deficits should be reported as organization costs or capitalized and amortized. I'll have to review my notes.
IZ
Izetta
1 year ago
I think I saw a question like this in our study materials. My gut says it's true, because minimizing software does help with security.