kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add podPidsLimit / --pod-max-pids support

This commit is contained in:
Oleg Atamanenko 2021-06-30 17:06:25 -07:00
parent 9864281630
commit 7d013d5dc6
8 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/cluster_spec.md
View File

@ -686,6 +686,18 @@ spec:
housekeepingInterval: 30s
```
### Pod PIDs Limit
{{ kops_feature_table(kops_added_default='1.22', k8s_min='1.20') }}
`podPidsLimit` allows to configure the maximum number of pids (process ids) in any pod.
[Read more](https://kubernetes.io/docs/concepts/policy/pid-limiting/) in Kubernetes documentation.
```yaml
spec:
kubelet:
podPidsLimit: 1024
```
### Event QPS
{{ kops_feature_table(kops_added_default='1.19') }}

10
k8s/crds/kops.k8s.io_clusters.yaml
View File

@ -2572,6 +2572,11 @@ spec:
description: config is the path to the config file or directory
of files
type: string
podPidsLimit:
description: PodPidsLimit is the maximum number of pids in any
pod.
format: int64
type: integer
protectKernelDefaults:
description: 'Default kubelet behaviour for kernel tuning. If
set, kubelet errors if any of kernel tunables is different than
@ -2982,6 +2987,11 @@ spec:
description: config is the path to the config file or directory
of files
type: string
podPidsLimit:
description: PodPidsLimit is the maximum number of pids in any
pod.
format: int64
type: integer
protectKernelDefaults:
description: 'Default kubelet behaviour for kernel tuning. If
set, kubelet errors if any of kernel tunables is different than

5
k8s/crds/kops.k8s.io_instancegroups.yaml
View File

@ -526,6 +526,11 @@ spec:
description: config is the path to the config file or directory
of files
type: string
podPidsLimit:
description: PodPidsLimit is the maximum number of pids in any
pod.
format: int64
type: integer
protectKernelDefaults:
description: 'Default kubelet behaviour for kernel tuning. If
set, kubelet errors if any of kernel tunables is different than

2
pkg/apis/kops/componentconfig.go
View File

@ -221,6 +221,8 @@ type KubeletConfigSpec struct {
ContainerLogMaxFiles *int32 `json:"containerLogMaxFiles,omitempty" flag:"container-log-max-files"`
// EnableCadvisorJsonEndpoints enables cAdvisor json `/spec` and `/stats/*` endpoints. Defaults to False.
EnableCadvisorJsonEndpoints *bool `json:"enableCadvisorJsonEndpoints,omitempty" flag:"enable-cadvisor-json-endpoints"`
// PodPidsLimit is the maximum number of pids in any pod.
PodPidsLimit *int64 `json:"podPidsLimit,omitempty" flag:"pod-max-pids"`
}
// KubeProxyConfig defines the configuration for a proxy

2
pkg/apis/kops/v1alpha2/componentconfig.go
View File

@ -221,6 +221,8 @@ type KubeletConfigSpec struct {
ContainerLogMaxFiles *int32 `json:"containerLogMaxFiles,omitempty" flag:"container-log-max-files"`
// EnableCadvisorJsonEndpoints enables cAdvisor json `/spec` and `/stats/*` endpoints. Defaults to False.
EnableCadvisorJsonEndpoints *bool `json:"enableCadvisorJsonEndpoints,omitempty" flag:"enable-cadvisor-json-endpoints"`
// PodPidsLimit is the maximum number of pids in any pod.
PodPidsLimit *int64 `json:"podPidsLimit,omitempty" flag:"pod-max-pids"`
}
// KubeProxyConfig defines the configuration for a proxy

2
pkg/apis/kops/v1alpha2/zz_generated.conversion.go generated
View File

@ -5217,6 +5217,7 @@ func autoConvert_v1alpha2_KubeletConfigSpec_To_kops_KubeletConfigSpec(in *Kubele
out.ContainerLogMaxSize = in.ContainerLogMaxSize
out.ContainerLogMaxFiles = in.ContainerLogMaxFiles
out.EnableCadvisorJsonEndpoints = in.EnableCadvisorJsonEndpoints
out.PodPidsLimit = in.PodPidsLimit
return nil
}
@ -5312,6 +5313,7 @@ func autoConvert_kops_KubeletConfigSpec_To_v1alpha2_KubeletConfigSpec(in *kops.K
out.ContainerLogMaxSize = in.ContainerLogMaxSize
out.ContainerLogMaxFiles = in.ContainerLogMaxFiles
out.EnableCadvisorJsonEndpoints = in.EnableCadvisorJsonEndpoints
out.PodPidsLimit = in.PodPidsLimit
return nil
}

5
pkg/apis/kops/v1alpha2/zz_generated.deepcopy.go generated
View File

@ -3467,6 +3467,11 @@ func (in *KubeletConfigSpec) DeepCopyInto(out *KubeletConfigSpec) {
*out = new(bool)
**out = **in
}
if in.PodPidsLimit != nil {
in, out := &in.PodPidsLimit, &out.PodPidsLimit
*out = new(int64)
**out = **in
}
return
}

5
pkg/apis/kops/zz_generated.deepcopy.go generated
View File

@ -3633,6 +3633,11 @@ func (in *KubeletConfigSpec) DeepCopyInto(out *KubeletConfigSpec) {
*out = new(bool)
**out = **in
}
if in.PodPidsLimit != nil {
in, out := &in.PodPidsLimit, &out.PodPidsLimit
*out = new(int64)
**out = **in
}
return
}