Kubelet
cri-containerd
image
service
gRPC
container
Client
CRI
runtime
service
ocicni
container
containerd
shim
containerd
shim
Pod B
container
Sandbox container
A
Pod A Namespaces
CNI
Pod A Cgroups
Explanation
The image illustrates the architecture of cri-containerd. The Kubelet communicates with cri-containerd through CRI. Cri-containerd has image service and runtime service. It communicates with containerd via gRPC. It also uses ocicni and CNI. Pods A and B are created using containerd shim. Container A has sandbox container.