How to Inspect The containerd Image Hash in a Kubernetes Cluster

in certain circumstances, you might need to compare the containerd image hashes of two images below are the instructions to inspect a containerd image hash of an image in a kubernetes cluster we will be using the envoy pod as an example run the following command to get the pod name of the running envoy proxy container kubectl get pods a run the following command to get the image name and tag of the envoy proxy container kubectl describe pod \<pod name> n \<namespace> | grep "image " //replace \<pod name> with the pod name obtained in the previous step //this command will output the docker image name and tag of the envoy proxy container it should look something like this image envoyproxy/envoy\ v1 15 0 run the following command to get the container image hash of the envoy proxy image ctr n k8s io images ls | awk '/envoyproxy\\/envoy\ v1 15 0/ {print $3}' //this command will output the containerd image hash of the envoy proxy image it should look something like this sha256 3f5f11e23883561f6f064a82dcfd3d2942136a3cd400255fc37af918b6521b02