-
Bug
-
Resolution: Done
-
Normal
-
None
-
4.12.z
-
Quality / Stability / Reliability
-
False
-
-
2
-
None
-
No
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
Query with CRI-O pids_limit and how are the pods with multiple containers treated. Are the pods share same cgroup or they have individual same cgroup.
Version-Release number of selected component (if applicable):
4.12.z+
How reproducible:
Steps to Reproduce:
1. ssh to any worker node.
sh-5.1# cat /etc/kubernetes/kubelet.conf | grep -i pids
"podPidsLimit": 4096,
sh-5.1# crio-status config | grep -i pids
pids_limit = 0
sh-5.1# for f in /sys/fs/cgroup/kubepods.slice/kubepods-*/*/pids.max; do echo $f.; cat $f; done
/sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-poddd38844b_7456_4729_91da_5becb42851f7.slice/pids.max.
4096
/sys/fs/cgroup/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod04430ca7_78eb_4c82_acc6_b6650a478d8e.slice/pids.max.
4096
2. sh-5.1# cd /sys/fs/cgroup/kubepods.slice/
sh-5.1# ls -lrth
total 0
drwxr-xr-x. 36 root root 0 Apr 26 10:00 kubepods-burstable.slice <<<<<<<<<<
3. ssh to any master node
sh-5.1# crictl inspect 2296541f8f7b9 | grep -i cgroup <<<< etcd container
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "cgroup",
"cgroupsPath": "kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice:crio:2296541f8f7b96f32cc51d9dc33df171a1504cc7b62be6d0dbc378c47090488b",
sh-5.1# crictl inspect 532d39f24b02a | grep -i cgroup <<<< etcd-readyz container
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "cgroup",
"cgroupsPath": "kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice:crio:532d39f24b02aa199de149d1692161a25aae4eb2059cba69900fe4764b884627",
sh-5.1# crictl inspect 532d39f24b02a | grep pid
"pid": 29593,
"pids": {
"type": "pid"
sh-5.1# crictl inspect 2296541f8f7b9 | grep pid
"pid": 29496,
"pids": {
"type": "pid"
sh-5.1# cat /proc/29593/cgroup
0::/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice/crio-532d39f24b02aa199de149d1692161a25aae4eb2059cba69900fe4764b884627.scope
sh-5.1# cat /proc/29496/cgroup
0::/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice/crio-2296541f8f7b96f32cc51d9dc33df171a1504cc7b62be6d0dbc378c47090488b.scope
Actual results:
Expected results:
Additional info:
https://redhat-internal.slack.com/archives/CK1AE4ZCK/p1714129748495879