This repository builds a container image containing cni plugins, ready to be mounted on a host system.
The plugins reside in /opt/cni/bin.
Image builds can be found under packages.
Example usage where we use this image to mount CNI plugins to a Kubernetes host:
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: cni-plugins
namespace: kube-system
spec:
selector:
matchLabels:
name: cni-plugins
template:
metadata:
labels:
name: cni-plugins
spec:
tolerations:
- operator: Exists
effect: NoSchedule
containers:
- name: cni-plugins
image: ghcr.io/p3lim/cni-plugins:v1.0.1
resources:
requests:
cpu: "100m"
memory: "50Mi"
limits:
cpu: "100m"
memory: "50Mi"
securityContext:
privileged: true
volumeMounts:
- name: cni-bin
mountPath: /opt/cni/bin
volumes:
- name: cni-bin
hostPath:
path: /opt/cni/binThis is useful for Kubernetes distributions like Talos, which don't supply this themselves, allowing usage of arcane CNIs like Multus.
Steps have been taken to ensure the longevity of this repository and its image:
- A workflow watches for upstream releases of CNI plugins and automatically creates a pull request.
- A workflow watches for changes to the Dockerfile, which builds and pushes the image.
- Dependabot watches for updates to the base image and creates pull requests when there's a new version.
- Permissive license so anyone can take over maintenance should this repository become stale.