This is a helm release for Project Eirini. In a nutshell Eirini is a Kubernetes backend for
Cloud Foundry, made in the effort to decouple Cloud Foundry from Diego, the only current option of a scheduler. . It deploys CF apps
to a kube backend, using OCI images and Kube deployments.
The following CFAR (Cloud Foundry Application Runtime) distributions deploy CF on top of Kubernetes and bundle Eirini with it:
- cf-for-k8s
- KubeCF
- Deprecated: Install via SCF. Warning: this installation type is no longer officially supported and will be soon discontinued.
Of an overview of how secure Eirini is compared to other popular container runtimes please look at this table
To learn about how you can use Kubernetes security primitives to make your deployment more secure, please take a look at our Security Guidelines.
We are working hard towards feature parity with Diego, but still there are some differences in behaviour
It is not possible to set environment variables containing : to your apps containers because of Kubernetes restrictions.
By default Eirini does not allow docker images running with the root user. Diego allows this because the application runs in a separate user namespace, which is not supported in Kubernetes as of now. However, you can configure Eirini to allow such docker images - see Security Guidelines for more information.
If all the CF apps are running, it is safe to delete all files in /var/vcap/store/shared/cc-droplets/sh/a2/ directory on the blobstore-0 pod.
To do so, you can run this command:
kubectl exec -n <scf-namespace> blobstore-0 -c blobstore -- \
/bin/sh -c 'rm -rf /var/vcap/store/shared/cc-droplets/sh/a2/sha256:*'