e924577d64
Support to specify ``trusted`` for runtime creation. In Kubernetes orchestrator implementation, it's using ``io.kubernetes.cri-o.TrustedSandbox`` annotation in the pod specification to choose the underlying container runtime. This feature is useful to leverage the security container technology such as Kata containers or gVisor. It also gets rid of the security concerns for running image type function. Story: 2003088 Task: 23172 Change-Id: Ic4fa3e97dcc239c7177448e3cef5d0f02340d302 |
||
|---|---|---|
| .. | ||
| api | ||
| engine | ||
| orchestrator | ||
| services | ||
| storage | ||
| utils | ||
| __init__.py | ||
| base.py | ||