Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-33047

Query with CRI-O pids_limit and how are the pods with multiple containers treated.

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • 2
    • None
    • No
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      Query with CRI-O pids_limit and how are the pods with multiple containers treated. Are the pods share same cgroup or they have individual same cgroup. 

      Version-Release number of selected component (if applicable):

          4.12.z+

      How reproducible:

          

      Steps to Reproduce:

          1. ssh to any worker node.
      
      sh-5.1# cat /etc/kubernetes/kubelet.conf | grep -i pids
        "podPidsLimit": 4096,
      
      sh-5.1# crio-status config | grep -i pids
          pids_limit = 0
      
      sh-5.1# for f in /sys/fs/cgroup/kubepods.slice/kubepods-*/*/pids.max; do echo $f.; cat $f; done
      /sys/fs/cgroup/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-poddd38844b_7456_4729_91da_5becb42851f7.slice/pids.max.
      4096
      /sys/fs/cgroup/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod04430ca7_78eb_4c82_acc6_b6650a478d8e.slice/pids.max.
      4096
      
           2. sh-5.1# cd /sys/fs/cgroup/kubepods.slice/
      sh-5.1# ls -lrth 
      total 0
      drwxr-xr-x. 36 root root 0 Apr 26 10:00 kubepods-burstable.slice        <<<<<<<<<<
      
           3. ssh to any master node 
      
      sh-5.1# crictl inspect 2296541f8f7b9 | grep -i cgroup    <<<< etcd container
                "destination": "/sys/fs/cgroup",
                "type": "cgroup",
                "source": "cgroup",
              "cgroupsPath": "kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice:crio:2296541f8f7b96f32cc51d9dc33df171a1504cc7b62be6d0dbc378c47090488b",
      
      sh-5.1# crictl inspect 532d39f24b02a | grep -i cgroup   <<<< etcd-readyz container
                "destination": "/sys/fs/cgroup",
                "type": "cgroup",
                "source": "cgroup",
              "cgroupsPath": "kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice:crio:532d39f24b02aa199de149d1692161a25aae4eb2059cba69900fe4764b884627",
      
      sh-5.1# crictl inspect 532d39f24b02a | grep pid                                                                          
          "pid": 29593,
                "pids": {
                  "type": "pid"
      sh-5.1# crictl inspect 2296541f8f7b9 | grep pid
          "pid": 29496,
                "pids": {
                  "type": "pid"
      
      sh-5.1# cat /proc/29593/cgroup 
      0::/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice/crio-532d39f24b02aa199de149d1692161a25aae4eb2059cba69900fe4764b884627.scope
      sh-5.1# cat /proc/29496/cgroup                                                                                                                                                                                  
      0::/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc021dc4b59737f5ba22f11478deda42e.slice/crio-2296541f8f7b96f32cc51d9dc33df171a1504cc7b62be6d0dbc378c47090488b.scope     

      Actual results:

          

      Expected results:

          

      Additional info:

          https://redhat-internal.slack.com/archives/CK1AE4ZCK/p1714129748495879 

              mburke@redhat.com Michael Burke
              rhn-support-zekhan Zeba Khan
              None
              None
              Min Li Min Li
              None
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: