https://cybertoolchain.io/tools/cri-tools New releases and features in cri-tools, tracked by The Cyber Toolchain. en Tue, 01 Sep 2026 08:33:28 GMT https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.37.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.37.0 Tue, 01 Sep 2026 08:33:28 GMT crictl gains `--max-retries` for connection retry with exponential backoff, plus OpenTelemetry root spans and `CRICTL_CREDS`/`CRICTL_AUTH` support on `create`/`run`. • Adds `--max-retries` flag to `crictl` to control connection retry attempts with exponential backoff (default: 3). • Adds `CRICTL_CREDS` and `CRICTL_AUTH` environment variables and `-u` alias for `--username` to the `crictl create` and `crictl run` commands, aligning them with `crictl pull`. • OpenTelemetry tracing now emits a root span per `crictl` execution that groups all gRPC calls made to the runtime during that invocation. • New `critest` conformance tests for image volumes, NRI callbacks during container and pod sandbox lifecycle events, and NRI plugin failure scenarios in `CreateContainer` and `RunPodSandbox`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.36.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.36.0 Fri, 24 Apr 2026 15:49:58 GMT cri-tools v1.36.0 adds critest coverage for CRI API image ID/ref consistency and warns on multi-tag image removal • Adds critest cases to validate CRI API image ID and image ref consistency across operations. • Adds critest cases to validate image operation consistency end-to-end. • Adds a warning to `crictl rmi` when removing a multi-tagged image, since the CRI API removes all tags, not just the specified one. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.34.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.34.0 Thu, 21 Aug 2025 07:50:05 GMT cri-tools v1.34.0 adds a `metricdescs` subcommand, WebSocket streaming test flags, and automatic pod UUID generation. • Adds `metricdescs` subcommand to `crictl` for querying the ListMetricDescriptors API. • Adds `critest` flags `--websocket-attach`, `--websocket-exec`, and `--websocket-portforward` to run streaming tests over WebSockets. • Automatically generates a pod UUID when none is provided in the pod config JSON. • Emits a warning when the `cgroup_parent` field is left empty in pod config.json. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.33.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.33.0 Tue, 22 Apr 2025 07:42:33 GMT crictl v1.33.0 adds metric descriptors, OOM score tuning, runtime features info, and per-stream log filtering. • New `crictl metricdescs` subcommand exposes the ListMetricDescriptors API for querying available metric descriptors from the runtime. • New `--oom-score-adj` flag on `crictl update` lets operators tune the OOM score of a running container. • Adds `crictl info` now surfaces a `RuntimeFeatures` object under the `.features` field (KEP-3619), showing which capabilities the runtime supports. • New `--stream` flag on `crictl logs` allows fetching a specific log stream (stdout/stderr) from a container. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.32.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.32.0 Mon, 09 Dec 2024 09:08:01 GMT crictl v1.32.0 adds TLS for exec/attach, parallel container/image removal, multi-container exec, namespace filtering, and CPU/mem profiling flags. • Adds TLS support for `crictl exec`, `portforward`, and `attach` via `--tls-ca`, `--tls-cert`, `--tls-key`, and `--tls-server-name` flags. • Adds `--profile-cpu` and `--profile-mem` flags to `crictl` for on-demand CPU and memory profiling. • Enables `crictl exec` to run a single command across multiple containers simultaneously using new `--image`, `--label`, `--last`, `--latest`, `--name`, `--pod`, or `--state` filter flags. • Adds `--quiet`/`-q`, `--ignore-error`/`-e`, and `--parallel`/`-x` flags to `crictl exec` for quieter, fault-tolerant, parallel execution. • Adds `--namespace` flag to `crictl ps` and `crictl inspect` for filtering by pod namespace. • Outputs container namespace in `crictl ps` table and verbose output. • Enables parallel container removal via `crictl rm`. • Enables parallel image removal via `crictl rmi`. • Adds swap usage to `crictl stats` default output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.31.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.31.0 Thu, 08 Aug 2024 07:40:52 GMT crictl v1.31.0 adds pull timeouts, JSON schema introspection, runtime config updates, and Ctrl-C interruptibility across commands. • Adds `--pull-timeout` flag to `crictl create`, `run`, and `pull` commands to cap image pull duration. • Adds `crictl [create,runp,run,pull] jsonschema` subcommands to display the pod and/or container config JSON schema. • Adds `crictl logs --reopen`/`-r` flag to reopen container log files. • Adds `crictl update-runtime-config` subcommand to update the runtime configuration. • Adds filtering flags to `crictl inspect`, `inspectp`, and `inspecti`; with no filter, commands now inspect all containers, pods, or images. • Supports pulling OCI object mounts on container creation when `crictl create` or `crictl run` is invoked with `--with-pull`. • Makes container, sandbox, and image commands interruptible via Ctrl-C. • Supports Fine-grained SupplementalGroups control (KEP-3619). • Outputs JSON, YAML, and go-template slices correctly for `crictl inspect`, `inspectp`, and `images`. Breaking changes: • The `--timeout`/`-t` flag for `crictl run` is renamed to `--cancel-timeout`/`-T`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.30.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.30.0 Thu, 18 Apr 2024 08:20:32 GMT crictl v1.30 adds `--transport` flags, OTEL tracing CLI options, and `--filter` for images • Adds `--transport / -r` flag to `crictl exec`, `attach`, `port-forward` to select between "spdy" (default) and "websocket" transport. • Adds OTEL tracing via CLI flags `--enable-tracing`, `--tracing-endpoint`, and `--tracing-sampling-rate-per-million`. • Changes default behavior in `crictl rm` to delete container logs; adds `--keeplogs, -k` option to preserve them. • Implements `--filter` flag for `crictl images` with support for `dangling`, `reference`, `before`, and `since` filters. • Adds user namespace tests to `critest` that try a working runtime handler and skip automatically if missing. Breaking changes: • The default behavior of `crictl rm` now deletes the container's log file; use `--keeplogs` or `-k` to preserve them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.29.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.29.0 Tue, 12 Dec 2023 08:09:06 GMT cri-tools v1.29.0 adds `crictl events` command for container event streaming • Added `crictl events` command to fetch and print container events • Added support for container runtime use systemd cgroups • Allow for `imagefsinfo` to report container_filesystem and image_filesystem Breaking changes: • Removed support for `linux/arm` from the release binaries Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.28.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.28.0 Mon, 14 Aug 2023 07:08:21 GMT cri-tools v1.28.0 adds `crictl metricsp` and `crictl runtime-config` subcommands • `crictl metricsp` command to display pod metrics from the CRI • `crictl runtime-config` command added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.27.1 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.27.1 Tue, 11 Jul 2023 07:23:30 GMT crictl imagefsinfo -o table now outputs InodesUsed and UsedBytes fields • `crictl imagefsinfo -o table` output adds `InodesUsed` and `UsedBytes` (human-readable size) columns Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.27.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.27.0 Mon, 17 Apr 2023 15:53:18 GMT cri-tools v1.27.0 adds Windows pod stats display, crictl config list flag, and NAME row to stats output • `crictl config` gains a `list` flag to display the current configuration values • `crictl stats` adds a `NAME` column to its output table • `crictl` can now display Windows pod statistics Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.26.1 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.26.1 Wed, 15 Mar 2023 13:50:06 GMT Adds `--list` flag to crictl circt config and NAME column to stats output • Adds `--list` flag to `crictl circt config` to list available Circt configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.26.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.26.0 Wed, 14 Dec 2022 07:21:20 GMT crictl pull now accepts --username for registry authentication • `crictl pull` now supports a `--username` flag to pass the registry username on the command line Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.25.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.25.0 Fri, 26 Aug 2022 07:14:13 GMT cri-tools v1.25 adds --benchmarking-params-file and --benchmarking-output-dir flags for custom benchmark control • Adds `--benchmarking-params-file` CLI flag to specify a YAML file with custom benchmark parameters controlling total and parallel execution counts • Adds `--benchmarking-output-dir` CLI flag to specify a pre-existing directory where benchmark results are saved Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.2 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.2 Fri, 27 May 2022 06:36:37 GMT Critest gains `--benchmarking-params-file` and `--benchmarking-output-dir` flags for custom benchmark control • Adds optional `--benchmarking-params-file` CLI flag to critest for specifying a YAML file with custom benchmark parameters. • Adds optional `--benchmarking-output-dir` CLI flag to critest for saving benchmark results to a pre-existing directory. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.1 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.1 Thu, 12 May 2022 16:27:32 GMT cri-tools v1.24.1 adds optional --benchmarking-params-file and --benchmarking-output-dir flags to critest. • `critest` now accepts `--benchmarking-params-file` to specify a YAML file defining custom benchmark parameters controlling total and parallel execution counts • `critest` now accepts `--benchmarking-output-dir` to save benchmark results into a pre-existing directory Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.24.0 Thu, 05 May 2022 08:13:59 GMT cri-tools v1.24.0 adds crictl statsp command, CRICTL_AUTH/CREDS env vars, and pod info to ps output • Adds the `crictl statsp` subcommand to retrieve pod sandbox statistics • Supports authentication via the `CRICTL_AUTH` environment variable for registry credentials • Supports credential file paths via the `CRICTL_CREDS` environment variable • `crictl pull` accepts the `--annotation` flag for passing image annotations • `crictl ps` now displays a `POD` column showing the container's pod name • Adds `-r` / `--resolve-image-path` boolean flag to `crictl ps` to resolve and display image paths instead of IDs • Switches default CRI API to v1, requiring Kubernetes v1.23.0+ with a v1 runtime Breaking changes: • The default CRI API version is switched to v1, which requires a Kubernetes cluster running at least v1.23.0 with a v1 runtime configured. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.23.0 https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.23.0 Mon, 17 Jan 2022 13:45:13 GMT cri-tools v1.23.0 adds --test-images-file flag for custom test images and auto-detection of cri-dockerd socket • Adds `--test-images-file` CLI flag to `critest` for providing a YAML file with custom container image overrides like `defaultTestContainerImage` and `webServerTestImage`. (new) • Adds automatic detection of the `cri-dockerd` socket after dockershim removal. (new) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cri-tools