Merge pull request #589 from devimc/topic/design/updateHostCgroups

design: update host-cgroups documentation according to the new changes
This commit is contained in:
Julio Montes 2020-01-24 11:56:59 -06:00 committed by GitHub
commit 003d0d637a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -67,7 +67,7 @@ into account. This will be feasible in the 1.16 Kubernetes release through the `
| | | | kata-shimv2, VMM and threads: | | | | | | | | kata-shimv2, VMM and threads: | | | |
| | | | (VMM, IO-threads, vCPU threads, etc)| | | | | | | | (VMM, IO-threads, vCPU threads, etc)| | | |
| | | | | | | | | | | | | | | |
| | | | kata-sandbox-<id> | | | | | | | | kata_<sandbox-id> | | | |
| | | +--------------------------------------+ | | | | | | +--------------------------------------+ | | |
| | | | | | | | | | | |
| | |Pod 1 | | | | | |Pod 1 | | |
@ -78,8 +78,8 @@ into account. This will be feasible in the 1.16 Kubernetes release through the `
| | | | kata-shimv2, VMM and threads: | | | | | | | | kata-shimv2, VMM and threads: | | | |
| | | | (VMM, IO-threads, vCPU threads, etc)| | | | | | | | (VMM, IO-threads, vCPU threads, etc)| | | |
| | | | | | | | | | | | | | | |
| | | | kata-sandbox-<id> | | | | | | | | kata_<sandbox-id> | | | |
| | | +--------------------------------------+ | | | | | | +--------------------------------------+ | | |
| | |Pod 2 | | | | | |Pod 2 | | |
| | +---------------------------------------------+ | | | | +---------------------------------------------+ | |
| |kubepods | | | |kubepods | |
@ -94,7 +94,7 @@ into account. This will be feasible in the 1.16 Kubernetes release through the `
``` ```
podCgroup=Parent(container.CgroupsPath) podCgroup=Parent(container.CgroupsPath)
KataSandboxCgroup=<podCgroup>/kata-sandbox-<PodSandboxID> KataSandboxCgroup=<podCgroup>/kata_<PodSandboxID>
``` ```
2. Create the cgroup, `KataSandboxCgroup` 2. Create the cgroup, `KataSandboxCgroup`
@ -102,8 +102,8 @@ into account. This will be feasible in the 1.16 Kubernetes release through the `
3. Join the `KataSandboxCgroup` 3. Join the `KataSandboxCgroup`
Any process created by the runtime will be created in `KataSandboxCgroup`. Any process created by the runtime will be created in `KataSandboxCgroup`.
The runtime will not limit the cgroup in the host, but the caller is free The runtime will limit the cgroup in the host only if the sandbox doesn't have a
to set the proper limits for the `podCgroup`. container type annotation, but the caller is free to set the proper limits for the `podCgroup`.
In the example above the pod cgroups are `/kubepods/pod1` and `/kubepods/pod2`. In the example above the pod cgroups are `/kubepods/pod1` and `/kubepods/pod2`.
Kata creates the unrestricted sandbox cgroup under the pod cgroup. Kata creates the unrestricted sandbox cgroup under the pod cgroup.