ContainerD / Docker

This check will try to pull a Docker image from specified registry using containerd and then verify its checksum and size.

!!! danger "Root Privileges Required" The containerd and docker health checks require access to a working socket that is mounted at runtime

Pulling images

apiVersion: canaries.flanksource.com/v1
kind: Canary
metadata:
  name: containerd-pull-check
spec:
  interval: 30
  containerd: # use docker if running outside kubernetes / docker
    - image: docker.io/library/busybox:1.31.1
      expectedDigest: sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209
      expectedSize: 764556

Field	Description	Scheme	Required
auth	Username and password value, configMapKeyRef or SecretKeyRef for registry	Authentication
expectedDigest	Expected digest of the pulled image	string	Yes
expectedSize	Expected size of the pulled image	int64	Yes
image	Full path to image, including registry	string	Yes
*	All other commons field	Common

---

Pushing images

This check will try to push a Docker image to a specified registry using containerd.

apiVersion: canaries.flanksource.com/v1
kind: Canary
metadata:
  name: containerd-push-check
spec:
  interval: 30
  containerdPush:  # use dockerPush if running outside kubernetes / docker
    - name: ContainerdPush Check
      image: docker.io/library/busybox:1.31.1
      username: <insert-username>
      password: <insert-password>

Field	Description	Scheme	Required
image	Full path to image, including registry	string	Yes
password	Password to access Containerd	string	Yes
username	Username to access Containerd	string	Yes
*	All other commons field	Common