-
Epic
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
Builds in Sandboxed Containers
-
False
-
-
False
-
Not Selected
-
In Progress
-
0% To Do, 0% In Progress, 100% Done
Epic Goal
Ensure builds can run in Kata, aka "sandboxed" containers.
Why is this important?
- Kata containers provide hypervisor isolation on top of regular container isolation (provided by Kubernetes runtimes).
Kata containers also allow builds to connect to remote virtual machines with different CPU architectures. This is needed to enable builds on CPU architectures that are not supported by OpenShift, or are not universally supported by public cloud providers (ex: s390x, RISC-V)
Scenarios
- Build containers with Kata as the container runtime class
- Build containers with another container runtime class provider
Acceptance Criteria (Mandatory)
- CI - MUST be running successfully with tests automated
- Release Technical Enablement - Provide necessary release enablement details and documents.
- ...
Dependencies (internal and external)
- ...
Previous Work (Optional):
- …
Open questions::
- …
Done Checklist
- Acceptance criteria are met
- Non-functional properties of the Feature have been validated (such as performance, resource, UX, security or privacy aspects)
- User Journey automation is delivered
- Support and SRE teams are provided with enough skills to support the feature in production environment