Create a RuntimeClass named gvisor-rc using the prepared runtime handler named runsc. Create a Pods of image Nginx in the Namespace server to run on the gVisor runtime class

Step 1: Install a RuntimeClass cat <<EOF | kubectl apply -f - apiVersion: node.k8s.io/v1beta1 kind: RuntimeClass metadata: name: gvisor handler: runsc EOF Step 2: Create a pod cat <<EOF | kubectl apply -f - apiVersion: v1 kind: Pod metadata: name: nginx-gvisor spec…

Submitted by chen.hong· May 5, 2026Runtime Security

Question

Create a RuntimeClass named gvisor-rc using the prepared runtime handler named runsc. Create a Pods of image Nginx in the Namespace server to run on the gVisor runtime class

Explanation

Step 1: Install a RuntimeClass

cat <<EOF | kubectl apply -f - apiVersion: node.k8s.io/v1beta1 kind: RuntimeClass metadata: name: gvisor handler: runsc EOF

Step 2: Create a pod

cat <<EOF | kubectl apply -f - apiVersion: v1 kind: Pod metadata: name: nginx-gvisor spec: runtimeClassName: gvisor containers:

name: nginx image: nginx EOF

Step 3: Get the pod

kubectl get pod nginx-gvisor -o wide

Topics

#RuntimeClass#gVisor#Pod deployment#Container sandboxing

Community Discussion

No community discussion yet for this question.

Full CKS Practice