Container Runtime Extensions | Gardener

Demo
Adopters
Documentation
Users Operators Developers All
Blogs
Community

Docs Developers Operators Users
- Getting Started Users
  - Introduction to Gardener Users
  - Architecture Users
  - Gardener Projects Users
  - Gardener Shoots Users
  - Control Plane Components Users
  - Shoot Lifecycle Users
  - Observability Users
    - Components Users
    - Alerts Users
    - Shoot Status Users
  - Features Users
    - Hibernation Users
    - Workerless Shoots Users
    - Credential Rotation Users
    - External DNS Management Users
    - Certificate Management Users
    - Vertical Pod Autoscaler Users
    - Cluster Autoscaler Users
  - Common Pitfalls Users
- Guides Developers
  - Set Up Client Tools Developers
    - Fun with kubectl Aliases Developers
    - Kubeconfig Context as bash Prompt Developers
    - Organizing Access Using kubeconfig Files Developers
  - High Availability Developers
    - Best Practices Developers
    - Chaos Engineering Developers
    - Control Plane Developers
  - Networking Developers
    - Enable IPv4/IPv6 (dual-stack) Ingress on AWS Developers
    - Support for IPv6 on AWS Developers
    - Manage Certificates with Gardener Developers
    - Manage Certificates with Gardener for Default Domain Developers
    - Managing DNS with Gardener Developers
  - Administer Client (Shoot) Clusters Developers
    - Scalability of Gardener Managed Kubernetes Clusters Developers
    - Authenticating with an Identity Provider Developers
    - Backup and Restore of Kubernetes Objects Developers
    - Create / Delete a Shoot Cluster Developers
    - Create a Shoot Cluster Into an Existing AWS VPC Developers
    - Fix Problematic Conversion Webhooks Developers
    - GPU Enabled Cluster Developers
    - Shoot Cluster Maintenance Developers
    - Tailscale Developers
  - Monitor and Troubleshoot Developers
    - Analyzing Node Removal and Failures Developers
    - Get a Shell to a Gardener Shoot Worker Node Developers
    - How to Debug a Pod Developers
    - tail -f /var/log/my-application.log Developers
  - Applications Developers
    - Shoot Pod Autoscaling Best Practices Developers
    - Specifying a Disruption Budget for Kubernetes Controllers Developers
    - Access a Port of a Pod Locally Developers
    - Auditing Kubernetes for Secure Setup Developers
    - Container Image Not Pulled Developers
    - Container Image Not Updating Developers
    - Custom Seccomp Profile Developers
    - Dockerfile Pitfalls Developers
    - Dynamic Volume Provisioning Developers
    - Install Knative in Gardener Clusters Developers
    - Integrity and Immutability Developers
    - Kubernetes Antipatterns Developers
    - Namespace Isolation Developers
    - Orchestration of Container Startup Developers
    - Out-Dated HTML and JS Files Delivered Developers
    - Remove Committed Secrets in Github 💀 Developers
    - Using Prometheus and Grafana to Monitor K8s Developers
- Security and Compliance
- Gardener Operators Developers Users
  - Advanced Users
    - Cleanup of Shoot Clusters in Deletion Users
    - containerd Registry Configuration Users
    - Control Plane Endpoints And Ports Users
    - Custom containerd Configuration Users
    - Necessary Labeling for Custom CSI Components Users
    - Readiness of Shoot Worker Nodes Users
    - Taints and Tolerations for Seeds and Shoots Users
  - API Reference Developers
    - Authentication Developers
    - Core Developers
    - Core V1 Developers
    - Extensions Developers
    - Operations Developers
    - Operator Developers
    - Provider Local Developers
    - Resources Developers
    - Security Developers
    - Seedmanagement Developers
    - Settings Developers
  - Autoscaling Users
    - DNS Autoscaling Users
    - Shoot Autoscaling Users
    - Shoot Pod Autoscaling Best Practices Users
  - Concepts Operators
    - APIServer Admission Plugins Operators
    - Architecture Operators
    - Backup and Restore Operators
    - Cluster API Operators
    - etcd Operators
    - gardenadm Operators
    - Gardener Admission Controller Operators
    - Gardener API Server Operators
    - Gardener Controller Manager Operators
    - Gardener Node Agent Operators
    - Gardener Operator Operators
    - Gardener Resource Manager Operators
    - Gardener Scheduler Operators
    - gardenlet Operators
  - Extensions Developers
    - Access to the Garden Cluster for Extensions Developers
    - CA Rotation Developers
    - Cluster Developers
    - ControlPlane Webhooks Developers
    - Conventions Developers
    - Force Deletion Developers
    - Healthcheck Library Developers
    - Heartbeat Developers
    - Logging And Monitoring Developers
    - Managedresources Developers
    - Migration Developers
    - Project Roles Developers
    - Provider Local Developers
    - Reconcile Trigger Developers
    - Referenced Resources Developers
    - Registering Extension Controllers Developers
    - Resource Admission in the Garden Cluster Developers
    - Resources Developers
      - BackupBucket Developers
      - BackupEntry Developers
      - Bastion Developers
      - ContainerRuntime Developers
      - ControlPlane Developers
      - ControlPlane Exposure Developers
      - DNS Record Developers
      - Extension Developers
      - Infrastructure Developers
      - Network Developers
      - OperatingSystemConfig Developers
      - Worker Developers
    - Shoot Health Status Conditions Developers
    - Shoot Maintenance Developers
    - Shoot Webhooks Developers
  - High Availability Users
    - Implementing High Availability and Tolerating Zone Outages Users
    - Shoot High Availability Users
  - Deployment Operators
    - Authentication Gardener Control Plane Operators
    - Configuring Logging Operators
    - Deploy Gardenlet Operators
    - Deploy Gardenlet Automatically Operators
    - Deploy Gardenlet Manually Operators
    - Deploy Gardenlet Via Operator Operators
    - Feature Gates Operators
    - Getting Started Locally Operators
    - Getting Started Locally With Extensions Operators
    - Getting Started Locally With Gardenadm Operators
    - Image Vector Operators
    - Migration V0 To V1 Operators
    - Scoped API Access for gardenlets and Extensions Operators
    - Secret Binding Provider Controller Operators
    - Setup Gardener Operators
    - Version Skew Policy Operators
  - Networking Users
    - Custom DNS Configuration Users
    - DNS Search Path Optimization Users
    - ExposureClasses Users
    - KUBERNETES_SERVICE_HOST Environment Variable Injection Users
    - NodeLocalDNS Configuration Users
    - Shoot Networking Configurations Users
  - Monitoring Operators
    - Alerting Operators
    - Connectivity Operators
    - Profiling Operators
  - Observability Users
    - Logging Users
  - Project Users
    - NamespacedCloudProfiles Users
    - Projects Users
    - Service Account Manager Users
  - Security Users
    - Admission Configuration for the `PodSecurity` Admission Plugin Users
    - Audit a Kubernetes Cluster Users
    - Default Seccomp Profile Users
    - ETCD Encryption Config Users
    - OpenIDConnect Presets Users
    - Shoot Serviceaccounts Users
  - Shoot Users
    - Access Restrictions Users
    - Accessing Shoot Clusters Users
    - Shoot Cluster Limits Users
    - Shoot Cluster Purposes Users
    - Shoot cluster supported Kubernetes versions and specifics Users
    - Shoot Hibernation Users
    - Shoot Info Configmap Users
    - Shoot Maintenance Users
    - Shoot Scheduling Profiles Users
    - Shoot Status Users
    - Shoot Supported Architectures Users
    - Shoot Worker Nodes Settings Users
    - Workerless `Shoot`s Users
  - Shoot Operations Users
  - Autoscaling Specifics for Components Developers
  - Changing the API Developers
  - Component Checklist Developers
  - Configuration Operators
  - Control Plane Migration Operators
  - Defaulting Developers
  - Dependencies Developers
  - Gardener Info Configmap Users
  - Getting Started Locally Developers
  - High Availability Of Components Developers
  - Ipv6 Developers
  - Istio Operators
  - Kube Apiserver Loadbalancing Operators
  - Kubernetes Clients Developers
  - Local Setup Developers
  - Log Parsers Developers
  - Logging Developers
  - Managed Seed Operators
  - Monitoring Stack Developers
  - Network Policies Operators
  - New Cloud Provider Developers
  - New Kubernetes Version Developers
  - Priority Classes Developers
  - Process Developers
  - Reversed VPN Tunnel Developers
  - Secrets Management Developers
  - Seed Bootstrapping Operators
  - Seed Settings Operators
  - Testing Developers
  - Testmachinery Tests Developers
  - Topology Aware Routing Operators
  - Trusted Tls For Control Planes Operators
  - Trusted Tls For Garden Runtime Operators
- List of Extensions Developers Users Operators
  - Infrastructure Extensions Users Operators Developers
    - Provider Alicloud Users Developers Operators
      - Tutorials Developers
        Create a Kubernetes Cluster on Alibaba Cloud with Gardener Developers
      - Deployment Operators
      - Local Setup Developers
      - Operations Operators
      - Usage Users
    - Provider AWS Users Developers Operators
      - Tutorials Developers
      - Deployment Operators
      - Dual Stack Ingress Users
      - Ipv6 Users
      - Local Setup Developers
      - Operations Operators
      - Usage Users
    - Provider Azure Users Developers Operators
      - Tutorials Developers
        Create a Kubernetes Cluster on Azure with Gardener Developers
      - Azure Permissions Users
      - Deployment Operators
      - Local Setup Developers
      - Operations Operators
      - Usage Users
    - Provider Equinix Metal Users Operators
      - Operations Operators
      - Usage Users
    - Provider GCP Users Developers Operators
      - Tutorials Developers
        Create a Кubernetes Cluster on GCP with Gardener Developers
      - Data Disk Restore From Image
      - Deployment Operators
      - Ipv6 Users
      - Local Setup Developers
      - Operations Operators
      - Usage Users
    - Provider Openstack Users Operators Developers
      - Deployment Operators
      - Local Setup Developers
      - Operations Operators
      - Usage Users
  - Operating System Extensions Users
    - CoreOS/FlatCar OS Users
      - Usage Users
    - Garden Linux OS
    - SUSE CHost OS Users
      - Usage Users
    - Ubuntu OS Users
      - Usage Users
  - Network Extensions Users Operators
    - Calico CNI Users Operators
      - Deployment Operators
      - Operations Operators
      - Shoot Overlay Network Users
      - Usage Users
    - Cilium CNI Users
      - Usage Users
  - Container Runtime Extensions
    - GVisor container runtime
  - Others Developers Users Operators
    - Certificate services Users Operators
    - DNS services Users Operators
      - Configuration Operators
      - Deployment Operators
      - DNS Names Users
      - DNS Providers Users
      - Gateway Api Gateways Users
      - Istio Gateways Users
    - Egress filtering Users Operators
      - Deployment Operators
      - Shoot Networking Filter Users
    - Lakom service Users Operators
      - Deployment Operators
      - Lakom Users
      - Oci Registries
      - Shoot Extension Users
    - Networking problemdetector Users Operators
      - Deployment Operators
      - Shoot Networking Problemdetector Users
    - Node Audit Logging Developers Users
      - Configuration Users
      - Deploying Rsyslog Relp Extension Remotely Developers
      - Getting Started Developers
      - Monitoring Users
      - Shoot Rsyslog Relp Developers
    - OpenID Connect services Users Operators
      - Deployment Operators
      - Openidconnects Users
    - Registry cache Users Developers
      - Configuring the Registry Cache Extension Users
      - Configuring the Registry Mirror Extension Users
      - Deploying Registry Cache Extension in Gardener's Local Setup with Provider Extensions Developers
      - Deploying Registry Cache Extension Locally Developers
      - Developer Docs for Gardener Extension Registry Cache Developers
      - How to provide credentials for upstream registry? Users
      - Observability Users
- Other Components Developers Operators Users
  - Dependency Watchdog Developers Operators
    - Concepts Developers
      - Prober Developers
      - Weeder Developers
    - Deployment Operators
      - Configure Operators
      - Monitor Operators
    - Contribution Developers
    - Dwd Using Local Garden Developers
    - Testing Developers
  - Gardener Discovery Server
    - Api
  - Machine Controller Manager Developers Operators
    - Documents Developers
      - Apis Developers
    - Proposals Developers
      - Excess Reserve Capacity Developers
      - GRPC Based Implementation of Cloud Providers Developers
      - Hotupdate Instances Developers
      - Initialize Machine Developers
    - To-Do Developers
      - Outline Developers
    - FAQ Operators
    - Adding Support for a Cloud Provider Developers
    - Deployment Operators
    - Integration Tests Developers
    - Local Setup Developers
    - Machine Operators
    - Machine Deployment Operators
    - Machine Error Codes Developers
    - Machine Set Operators
    - Prerequisite Operators
    - Testing And Dependencies Developers
  - Network Problem Detector
  - etcd-druid Users Developers
    - API Reference Developers
    - 01 Multi Node Etcd Clusters
    - 02 Snapshot Compaction
    - 03 Scaling Up An Etcd Cluster
    - Add New Etcd Cluster Component Developers
    - Changing Api Developers
    - Configure Etcd Druid
    - Contribution Developers
    - Controllers Developers
    - DEP Title
    - Dependency Management Developers
    - Etcd Cluster Components
    - Etcd Cluster Resource Protection
    - Etcd Druid Api Developers
    - etcd Network Latency
    - EtcdMember Custom Resource
    - Feature Gates in Etcd-Druid
    - Getting Started Locally
    - Getting Started Locally Developers
    - Immutable etcd Cluster Backups
    - Local e2e Tests Developers
    - Manage Azurite Emulator
    - Manage Gcs Emulator
    - Manage S3 Emulator
    - Managing Etcd Clusters Users
    - Metrics
    - operator out-of-band tasks
    - Prepare Dev Environment Developers
    - Prepare Helm Charts
    - Production Setup Recommendations
    - Raising A Pr Developers
    - Recovering Etcd Clusters Users
    - Securing Etcd Clusters Users
    - Testing Developers
    - Updating Documentation Developers
    - Using Druid Client Users
    - Validating Etcd Clusters Users
    - Version Compatibility Matrix
- Dashboard Users Operators Developers
  - Architecture Developers
  - Access Restrictions Operators
  - Automating Project Resource Management Users
  - Connect Kubectl Users
  - Custom Fields Users
  - Customization Operators
  - Local Setup Developers
  - Process Developers
  - Project Operations Users
  - Terminal Shortcuts Users
  - Testing Developers
  - Using Terminal Users
  - Webterminals Operators
  - Working With Projects Users
- Gardenctl V2
- FAQ Developers
  - Can I run privileged containers? Developers
  - Can Kubernetes upgrade automatically? Developers
  - Can you backup your Kubernetes cluster resources? Developers
  - Can you migrate the content of one cluster to another cluster? Developers
  - How can you get the status of a shoot API server? Developers
  - How do you configure Multi-AZ worker pools for different extensions? Developers
  - How do you rotate IaaS keys for a running cluster? Developers
  - How to add K8S feature gates to my shoot cluster? Developers
  - Reconciliation Developers
  - What are the meanings of different DNS configuration options? Developers
- Glossary Users
- Resources Developers
  - Videos Developers
    - The Illustrated Guide to Kubernetes Developers
    - Why Kubernetes Developers
    - High Performance Microservices with Kubernetes, Go, and gRPC Developers
    - Building Small Containers Developers
    - Organizing with Namespaces Developers
    - Readiness != Liveness Developers
    - The Ins and Outs of Networking Developers
- Contribute Developers
  - Contributing Code Developers
    - Contributing Bigger Changes Developers
    - CI/CD Developers
    - Dependencies Developers
    - Security Release Process Developers
  - Contributing Documentation Developers
    - Working with Images Developers
    - Adding Already Existing Documentation Developers
    - Formatting Guide Developers
    - Markdown Developers
    - Organization Developers
    - Pull Request Description Developers
    - Shortcodes Developers
    - Style Guide Developers
      - Concept Topic Structure Developers
      - Reference Topic Structure Developers
      - Task Topic Structure Developers

Docs
List of Extensions
Container Runtime Extensions

less than a minute

GVisor container runtime

Gardener extension controller for the gVisor container runtime sandbox Relevant for:

Contributors to this page

Create documentation issue Print entire section

Blogs
Community
Adopters
Documentation

Slack
GitHub
YouTube
X

Copyright 2019-2025 Gardener project authors. Terms of Use | Privacy Statement | Legal Disclosure