github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2026-07-25 22:49:59 +00:00
Code Issues Projects Releases Wiki Activity

kata-deploy: warn on guest-pull timeout

Browse Source 
Reuse the kubelet runtimeRequestTimeout validation for guest-pull
configurations.

Guest pull can also keep kubelet waiting during CreateContainer. Warn
when kata-deploy can see that runtimeRequestTimeout is below the same
suggested timeout used for EROFS layer conversion.

Detect both the regular guest-pull mapping and the experimental force
guest-pull configuration so nodes get the warning for either path.

Signed-off-by: Manuel Huber <manuelh@nvidia.com>
Assisted-by: OpenAI <support@openai.com>
This commit is contained in:
Manuel Huber
2026-07-10 22:18:22 +00:00
parent 5b8d089e52
commit 501dae7c68
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
tools/packaging/kata-deploy/binary/src/main.rs
View File

@@ -446,6 +446,10 @@ async fn install_stage_host_check(config: &config::Config, runtime: &str) -> Res
}
}
if config_uses_guest_pull(config) {
validate_kubelet_runtime_request_timeout(config, "guest pull").await?;
}
info!("install (host-check): node prerequisites satisfied");
Ok(())
}
@@ -706,6 +710,28 @@ fn warn_runtime_request_timeout(operation: &str, detail: &str) {
);
}
fn config_uses_guest_pull(config: &config::Config) -> bool {
!config.experimental_force_guest_pull_for_arch.is_empty()
|| mapping_contains_value(config.pull_type_mapping_for_arch.as_deref(), "guest-pull")
|| config
.custom_runtimes
.iter()
.any(|runtime| runtime.crio_pull_type.as_deref() == Some("guest-pull"))
}
fn mapping_contains_value(mapping: Option<&str>, expected_value: &str) -> bool {
mapping.is_some_and(|mapping| {
mapping.split(',').any(|entry| {
let value = entry
.split_once(':')
.map(|(_, value)| value)
.unwrap_or(entry)
.trim();
value == expected_value
})
})
}
/// Install stage 1 (artifacts): place kata artifacts/config on the host and set
/// up any configured snapshotters. This does not touch CRI configuration, but it
/// still needs privileged host access: writing under the host install dir and