fix: #1281 kebelet failed when systemReserved was enabled

pull/1292/head
gjmzj 2023-06-10 21:18:19 +08:00
parent 36af7dd7ed
commit 9150e54352
3 changed files with 4 additions and 3 deletions

View File

@ -26,6 +26,7 @@ clusterDomain: {{ CLUSTER_DNS_DOMAIN }}
configMapAndSecretChangeDetectionStrategy: Watch
containerLogMaxFiles: 3
containerLogMaxSize: 10Mi
containerRuntimeEndpoint: "unix:///run/containerd/containerd.sock"
enforceNodeAllocatable:
- pods
{% if KUBE_RESERVED_ENABLED == "yes" %}
@ -56,7 +57,7 @@ kubeReservedCgroup: /podruntime.slice
kubeReserved:
cpu: 200m
memory: 400Mi
pid: 1000
pid: "1000"
{% endif %}
kubeAPIBurst: 100
kubeAPIQPS: 50
@ -82,7 +83,7 @@ systemReservedCgroup: /system.slice
systemReserved:
cpu: 200m
memory: 500Mi
pid: 5000
pid: "5000"
{% endif %}
tlsCertFile: {{ ca_dir }}/kubelet.pem
tlsPrivateKeyFile: {{ ca_dir }}/kubelet-key.pem

View File

@ -25,7 +25,6 @@ ExecStartPre=/bin/mkdir -p /sys/fs/cgroup/hugetlb/system.slice
{% endif %}
ExecStart={{ bin_dir }}/kubelet \
--config=/var/lib/kubelet/config.yaml \
--container-runtime-endpoint=unix:///run/containerd/containerd.sock \
--hostname-override={{ K8S_NODENAME }} \
--kubeconfig=/etc/kubernetes/kubelet.kubeconfig \
--root-dir={{ KUBELET_ROOT_DIR }} \

View File

@ -10,6 +10,7 @@ node=""
nodefaultctx=0
nodefaultns=0
cmd='[ "nsenter", "--target", "1", "--mount", "--uts", "--ipc", "--net", "--pid", "--"'
# If this has a terminal for STDIN
if [ -t 0 ]; then
tty=true
else