ContainerD / Docker
This check will try to pull a Docker image from specified registry using containerd and then verify its checksum and size.
Root Privileges Required
The containerd and docker health checks require access to a working socket that is mounted at runtime
Pulling images
apiVersion: canaries.flanksource.com/v1
kind: Canary
metadata:
name: containerd-pull-check
spec:
interval: 30
containerd: # use docker if running outside kubernetes / docker
- image: docker.io/library/busybox:1.31.1
expectedDigest: sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209
expectedSize: 764556
Field | Description | Scheme | Required |
---|---|---|---|
auth | Username and password value, configMapKeyRef or SecretKeyRef for registry | Authentication | |
expectedDigest | Expected digest of the pulled image | string | Yes |
expectedSize | Expected size of the pulled image | int64 | Yes |
image | Full path to image, including registry | string | Yes |
name | Name of the check, must be unique within the canary | string | Yes |
description | Description for the check | string | |
icon | Icon for overwriting default icon on the dashboard | string | |
labels | Labels for check | map[string]string | |
test | Evaluate whether a check is healthy | Expression | |
display | Expression to change the formatting of the display | Expression | |
transform | Transform data from a check into multiple individual checks | Expression | |
metrics | Metrics to export from | []Metrics |
Pushing images
This check will try to push a Docker image to a specified registry using containerd.
apiVersion: canaries.flanksource.com/v1
kind: Canary
metadata:
name: containerd-push-check
spec:
interval: 30
containerdPush: # use dockerPush if running outside kubernetes / docker
- name: ContainerdPush Check
image: docker.io/library/busybox:1.31.1
username: <insert-username>
password: <insert-password>
Field | Description | Scheme | Required |
---|---|---|---|
image | Full path to image, including registry | string | Yes |
password | Password to access Containerd | string | Yes |
username | Username to access Containerd | string | Yes |
name | Name of the check, must be unique within the canary | string | Yes |
description | Description for the check | string | |
icon | Icon for overwriting default icon on the dashboard | string | |
labels | Labels for check | map[string]string | |
test | Evaluate whether a check is healthy | Expression | |
display | Expression to change the formatting of the display | Expression | |
transform | Transform data from a check into multiple individual checks | Expression | |
metrics | Metrics to export from | []Metrics |