Page MenuHomePhabricator

Reserve resources for system daemons on kubernetes nodes
Open, MediumPublic

Description

Currently we allow pods to allocate 100% the resources of a node, which is a bad idea.

We should reserve some CPU, memory maybe storage and PIDs for kubelet (--kube-reserved) as well as for the system itself (--system-reserved). We should also add eviction thresholds.

https://v1-16.docs.kubernetes.io/docs/tasks/administer-cluster/reserve-compute-resources/

Event Timeline

JMeybohm triaged this task as Medium priority.Mar 19 2021, 3:37 PM
JMeybohm created this task.

Change 524186 had a related patch set uploaded (by Alexandros Kosiaris; author: Alexandros Kosiaris):
[operations/puppet@production] kubernetes: Switch to using systemd cgroupdriver

https://gerrit.wikimedia.org/r/524186