What's New With SIG Windows and Deep Dive...
summary
Project updates announce gMSA v2 using a container credential-guard plugin with admission webhook support in v0.3.0 and an Azure Key Vault reference plugin plus a Helm chart; the pod.OS beta lands API validation (not scheduling) so mismatched OS pods give clear errors; a Sonobuoy-based Windows conformance test suite validates node configuration. Windows container identity is explicit: container administrator vs container user live in a virtualized SAM (passwordless by default, custom accounts require passwords at start). kpng/kube-proxy nextgen is ~70% ported for Windows (kernel-space compile works, endpoints still pending).
AI-written summary · about
chapters (11)
- 0:00Intro
- 0:20Speaker Introductions
- 3:04Pod OS Field
- 4:42Operational Readiness Specification For Windows (i.e. Windows Conformance)
- 5:42Booting Windows Server Containers
- 6:32Container Security Spectrum
- 13:50KPNG windows... kernel and userspace ports
- 15:56KPNG windows : How to test it....
- 17:46What's Next
- 23:45How To Contribute
- 24:33Community Resources
related talks
27mWhat's New With SIG Windows
41mSIG Node Deep Dive
20mKubernetes SIG Node Intro and Deep Dive
37mProject Update and Deep Dive: Containerd
38mSIG-Node: Intro and Deep Dive
30mIntroduction and Deep Dive into containerd
44mAzure and Containers, the tale of the two inseparable friends
22mService Mesh using Envoy on Windows