From 69da3353a1245f4add4ff14a389be99f98421a1a Mon Sep 17 00:00:00 2001
From: gjmzj <jmgaozz@hotmail.com>
Date: Sat, 24 Jun 2023 12:10:43 +0800
Subject: [PATCH] fix: kubelet failed when enabling kubeReserved or
 systemReserved

---
 roles/kube-node/templates/kubelet-config.yaml.j2 | 8 ++++----
 roles/kube-node/templates/kubelet.service.j2     | 2 ++
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/roles/kube-node/templates/kubelet-config.yaml.j2 b/roles/kube-node/templates/kubelet-config.yaml.j2
index 6f5bd45..fa6206a 100644
--- a/roles/kube-node/templates/kubelet-config.yaml.j2
+++ b/roles/kube-node/templates/kubelet-config.yaml.j2
@@ -54,8 +54,8 @@ imageMinimumGCAge: 2m0s
 {% if KUBE_RESERVED_ENABLED == "yes" %}
 kubeReservedCgroup: /podruntime.slice
 kubeReserved:
-  cpu: 200m
-  memory: 400Mi
+  cpu: 500m
+  memory: 1000Mi
   pid: "1000"
 {% endif %}
 kubeAPIBurst: 100
@@ -80,8 +80,8 @@ syncFrequency: 1m0s
 {% if SYS_RESERVED_ENABLED == "yes" %}
 systemReservedCgroup: /system.slice
 systemReserved:
-  cpu: 200m
-  memory: 500Mi
+  cpu: 500m
+  memory: 1000Mi
   pid: "5000"
 {% endif %}
 tlsCertFile: {{ ca_dir }}/kubelet.pem
diff --git a/roles/kube-node/templates/kubelet.service.j2 b/roles/kube-node/templates/kubelet.service.j2
index 2c84dd8..2caed31 100644
--- a/roles/kube-node/templates/kubelet.service.j2
+++ b/roles/kube-node/templates/kubelet.service.j2
@@ -22,6 +22,8 @@ ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/systemd/system.slice
 
 ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/hugetlb/podruntime.slice
 ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/hugetlb/system.slice
+
+ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/podruntime.slice
 {% endif %}
 ExecStart={{ bin_dir }}/kubelet \
   --config=/var/lib/kubelet/config.yaml \