Superpowers for Windows Containers
Talkat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 15:20· Room 7AB - San Diego Convention Center, Upper Level·
summary
Windows nodes gain a small host binary that runs as admin and exposes specific host operations over named pipes so containerized CSI node plugins can do disk discovery, partitioning, formatting and SMB mount operations they cannot do natively. The project implements an API-group/version model (like Kubernetes), publishes a CSI proxy that served a demo where a container called partition demo uses the v1alpha1 disk API to initialize and partition a VHD successfully. Deploying the proxy is an admin responsibility and multiple proxy versions can run side‑by‑side.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:59Agenda
- 1:46Introduction to Windows Containers
- 2:24Windows Containers in Kubernetes o
- 3:16Privileged Operations with Windows Containers
- 4:40Workarounds for Privileged Operations
- 6:44Privileged Proxy for Windows Containers
- 8:09Privileged Proxy Architecture
- 9:05Privileged Proxy: Considerations
- 9:36Privileged Proxy: Access Control with PSP 0
- 10:29Privileged Proxy: Benefits
- 11:40Privileged Proxy Use-Case: Storage
- 14:21Privileged Storage Operations
- 16:06Proxy API Versioning
- 19:55Proxy versions: deployment
- 20:44CSI-Proxy Demo
- 24:08Other Privileged Proxy Use Cases
- 24:52Get Involved!
related talks
48mLinux Container in Windows 10 or Windows 2016 Deep Dive
58mDeploying Docker Containers on Windows Server 2016
48mWindows Subsystem for Linux Your enterprise ready multitool
49mThe Windows Subsystem for Linux WSL Latest updates and future improvements
48mUnderstanding Container Engines by Demo™
41mDeveloping for Linux on Windows with WSL
33mLinux Container Internals
01h 32mContainers – A Look Under the Hood