mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-03 17:30:00 +00:00
Replace log entry by a warning event
Signed-off-by: Itamar Holder <iholder@redhat.com>
This commit is contained in:
parent
29535c0463
commit
74f29880bd
@ -57,6 +57,7 @@ import (
|
|||||||
cmutil "k8s.io/kubernetes/pkg/kubelet/cm/util"
|
cmutil "k8s.io/kubernetes/pkg/kubelet/cm/util"
|
||||||
"k8s.io/kubernetes/pkg/kubelet/config"
|
"k8s.io/kubernetes/pkg/kubelet/config"
|
||||||
kubecontainer "k8s.io/kubernetes/pkg/kubelet/container"
|
kubecontainer "k8s.io/kubernetes/pkg/kubelet/container"
|
||||||
|
"k8s.io/kubernetes/pkg/kubelet/events"
|
||||||
"k8s.io/kubernetes/pkg/kubelet/lifecycle"
|
"k8s.io/kubernetes/pkg/kubelet/lifecycle"
|
||||||
"k8s.io/kubernetes/pkg/kubelet/pluginmanager/cache"
|
"k8s.io/kubernetes/pkg/kubelet/pluginmanager/cache"
|
||||||
"k8s.io/kubernetes/pkg/kubelet/stats/pidlimit"
|
"k8s.io/kubernetes/pkg/kubelet/stats/pidlimit"
|
||||||
@ -214,7 +215,11 @@ func NewContainerManager(mountUtil mount.Interface, cadvisorInterface cadvisor.I
|
|||||||
}
|
}
|
||||||
|
|
||||||
if !swap.IsTmpfsNoswapOptionSupported(mountUtil) {
|
if !swap.IsTmpfsNoswapOptionSupported(mountUtil) {
|
||||||
klog.InfoS("tmpfs noswap option is not supported, hence memory-backed volumes (e.g. secrets, emptyDirs) might be swapped to disk")
|
nodeRef := nodeRefFromNode(string(nodeConfig.NodeName))
|
||||||
|
recorder.Event(nodeRef, v1.EventTypeWarning, events.PossibleMemoryBackedVolumesOnDisk,
|
||||||
|
"The tmpfs noswap option is not supported. Memory-backed volumes (e.g. secrets, emptyDirs, etc.) "+
|
||||||
|
"might be swapped to disk and should no longer be considered secure.",
|
||||||
|
)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -84,12 +84,7 @@ func (cm *containerManagerImpl) enforceNodeAllocatableCgroups() error {
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Using ObjectReference for events as the node maybe not cached; refer to #42701 for detail.
|
// Using ObjectReference for events as the node maybe not cached; refer to #42701 for detail.
|
||||||
nodeRef := &v1.ObjectReference{
|
nodeRef := nodeRefFromNode(cm.nodeInfo.Name)
|
||||||
Kind: "Node",
|
|
||||||
Name: cm.nodeInfo.Name,
|
|
||||||
UID: types.UID(cm.nodeInfo.Name),
|
|
||||||
Namespace: "",
|
|
||||||
}
|
|
||||||
|
|
||||||
// If Node Allocatable is enforced on a node that has not been drained or is updated on an existing node to a lower value,
|
// If Node Allocatable is enforced on a node that has not been drained or is updated on an existing node to a lower value,
|
||||||
// existing memory usage across pods might be higher than current Node Allocatable Memory Limits.
|
// existing memory usage across pods might be higher than current Node Allocatable Memory Limits.
|
||||||
@ -265,3 +260,13 @@ func (cm *containerManagerImpl) validateNodeAllocatable() error {
|
|||||||
}
|
}
|
||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Using ObjectReference for events as the node maybe not cached; refer to #42701 for detail.
|
||||||
|
func nodeRefFromNode(nodeName string) *v1.ObjectReference {
|
||||||
|
return &v1.ObjectReference{
|
||||||
|
Kind: "Node",
|
||||||
|
Name: nodeName,
|
||||||
|
UID: types.UID(nodeName),
|
||||||
|
Namespace: "",
|
||||||
|
}
|
||||||
|
}
|
||||||
|
@ -75,6 +75,7 @@ const (
|
|||||||
FailedStatusPodSandBox = "FailedPodSandBoxStatus"
|
FailedStatusPodSandBox = "FailedPodSandBoxStatus"
|
||||||
FailedMountOnFilesystemMismatch = "FailedMountOnFilesystemMismatch"
|
FailedMountOnFilesystemMismatch = "FailedMountOnFilesystemMismatch"
|
||||||
FailedPrepareDynamicResources = "FailedPrepareDynamicResources"
|
FailedPrepareDynamicResources = "FailedPrepareDynamicResources"
|
||||||
|
PossibleMemoryBackedVolumesOnDisk = "PossibleMemoryBackedVolumesOnDisk"
|
||||||
)
|
)
|
||||||
|
|
||||||
// Image manager event reason list
|
// Image manager event reason list
|
||||||
|
Loading…
Reference in New Issue
Block a user