Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-29196

Assess impact of cgroup v2 migration in AppSRE

    • Icon: Task Task
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • Fleet Management
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • False

      We need to check if (and how) ACS CS components in AppSRE are affected by SDE-4882

      EMail announcement was sent as follows

       

      This email is to inform you about an upcoming change to our OpenShift cluster's resource management.
      We will be migrating from cgroup v1 to cgroup v2.
      This migration is necessary as required by OpenShift 4.19 [1].

      In most cases, your workloads should continue to function without any changes.
      However, some applications that directly interact with the cgroup file system
      or rely on specific cgroup v1 behaviors may require updates.
      Specifically, please check the following [2]:

      • Some third-party monitoring and security agents may depend on the cgroup filesystem.
          Update these agents to versions that support cgroup v2.
      • If you run cAdvisor as a stand-alone DaemonSet for monitoring pods and containers, update it to v0.43.0 or later.
      • If you deploy Java applications, prefer to use versions which fully support cgroup v2:
          * OpenJDK / HotSpot: jdk8u372, 11.0.16, 15 and later
          * IBM Semeru Runtimes: 8.0.382.0, 11.0.20.0, 17.0.8.0, and later
          * IBM Java: 8.0.8.6 and later
      • If you are using the uber-go/automaxprocs package, make sure the version you use is v1.5.1 or higher.

      We are planning to begin the cgroup v2 migration on 1st June 2025.
      Please review your applications and update affected parts.
      If you have any questions or concerns about this migration,
      or if you need assistance in testing or updating your applications,
      please reach out to us at #sd-app-sre,
      We will be happy to help.

      Best regards,
      AppSRE

      [1] https://issues.redhat.com/browse/SDE-4882
      [2] https://kubernetes.io/docs/concepts/architecture/cgroups/#migrating-cgroupv2

              ykovalev@redhat.com Yury Kovalev
              rh-ee-mhess Michael Hess
              ACS Cloud Service
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: