-
Bug
-
Resolution: Done
-
Normal
-
None
-
4.10.z
-
None
-
?
-
None
-
2
-
CMP Sprint 56, CMP Sprint 57, CMP Sprint 58
-
3
-
False
-
-
-
Bug Fix
Description of problem: While setting systemReserved/memory option using KubeletConfig object, and this option didn’t present in the generated kubelet machine config object.
The KubeletConfig they are using is:
~~~
[kni@sai-provisioner-cp-2 ~]$ oc get kubeletconfig -o yaml
apiVersion: v1
items:
- apiVersion: machineconfiguration.openshift.io/v1
kind: KubeletConfig
metadata:
creationTimestamp: "2022-11-18T12:23:15Z"
finalizers: - 99-worker-generated-kubelet
- 99-master-generated-kubelet
generation: 1
name: custom-kubeletconfig
resourceVersion: "563342"
uid: 3a08ed33-79b3-4198-87ff-a835af75da07
spec:
kubeletConfig:
cpuManagerPolicy: static
cpuManagerReconcilePeriod: 5s
systemReserved:
memory: 2Gi
machineConfigPoolSelector:
matchLabels:
machineconfiguration.openshift.io/mco-built-in: ""
and then machine config is
~~~
{
"kind": "KubeletConfiguration",
"apiVersion": "kubelet.config.k8s.io/v1beta1",
"staticPodPath": "/etc/kubernetes/manifests",
"syncFrequency": "0s",
"fileCheckFrequency": "0s",
"httpCheckFrequency": "0s",
"tlsCipherSuites": [
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
],
"tlsMinVersion": "VersionTLS12",
"rotateCertificates": true,
"serverTLSBootstrap": true,
"authentication": {
"x509":
,
"webhook":
,
"anonymous":
},
"authorization": {
"webhook":
},
"clusterDomain": "cluster.local",
"clusterDNS": [
"172.30.0.10"
],
"streamingConnectionIdleTimeout": "0s",
"nodeStatusUpdateFrequency": "0s",
"nodeStatusReportFrequency": "0s",
"imageMinimumGCAge": "0s",
"volumeStatsAggPeriod": "0s",
"systemCgroups": "/system.slice",
"cgroupRoot": "/",
"cgroupDriver": "systemd",
"cpuManagerPolicy": "static",
"cpuManagerReconcilePeriod": "5s",
"runtimeRequestTimeout": "0s",
"maxPods": 250,
"kubeAPIQPS": 50,
"kubeAPIBurst": 100,
"serializeImagePulls": false,
"evictionPressureTransitionPeriod": "0s",
"featureGates":
,
"memorySwap": {},
"containerLogMaxSize": "50Mi",
"systemReserved":
,
"logging": {
"flushFrequency": 0,
"verbosity": 0,
"options": {
"json":
}
},
"shutdownGracePeriod": "0s",
"shutdownGracePeriodCriticalPods": "0s"
}
~~~
due to this all machine config pool are paused.
Compliance operator scan logs :
~~~
{"level":"info","ts":"2022-11-24T09:03:44.400Z","logger":"suitectrl","msg":"KubeletConfig render diff:","Request.Namespace":"openshift-compliance","Request.Name":"idirect-worker-rhcos4-auto-apply-scan","MachineConfigPool.Name":"worker","
, diff: [[Path: /systemReserved/memory Expected: 2Gi Got: NOT FOUND]]"}
~~~