mode: 0644
path: "/etc/crio/crio.conf.d/00-default"
contents:
  inline: |
    [crio.api]
    stream_address = ""
    stream_port = "10010"

    [crio.runtime]
    conmon = "/usr/libexec/crio/conmon"
    conmon_cgroup = "pod"
    default_env = [
        "NSS_SDB_USE_CACHE=no",
    ]
    log_level = "info"
    cgroup_manager = "systemd"
    default_sysctls = [
        "net.ipv4.ping_group_range=0 2147483647",
    ]
    hooks_dir = [
        "/etc/containers/oci/hooks.d",
        "/run/containers/oci/hooks.d",
    ]
    manage_ns_lifecycle = true

    [crio.image]
    global_auth_file = "/var/lib/kubelet/config.json"
    pause_image = "{{.Images.infraImageKey}}"
    pause_image_auth_file = "/var/lib/kubelet/config.json"
    pause_command = "/usr/bin/pod"

    [crio.network]
    network_dir = "/etc/kubernetes/cni/net.d/"
    plugin_dirs = [
        "/var/lib/cni/bin",
        "/usr/libexec/cni",
    ]

    [crio.metrics]
    enable_metrics = true
    metrics_port = 9537
