Skip to content
This repository has been archived by the owner on Jul 1, 2023. It is now read-only.

Implement workaround to clean up leaking cgroups #570

Merged
merged 4 commits into from
Mar 13, 2020
Merged

Implement workaround to clean up leaking cgroups #570

merged 4 commits into from
Mar 13, 2020

Commits on Mar 11, 2020

  1. Implement workaround to clean up leaking cgroups 

    This change implements a cleaner, that scans for cgroups created by
systemd-run --scope that do not have any pids assigned, indicating
that the cgroup is unused and should be cleaned up. On some systems
either due to systemd or the kernel, the scope is not being cleaned
up when the pids within the scope have completed execution, leading
to an eventual memory leak.

Kubernetes uses systemd-run --scope when creating mount points,
that may require drivers to be loaded/running in a separate context
from kubelet, which allows the above leak to occur.

kubernetes/kubernetes#70324
kubernetes/kubernetes#64137
gravitational/gravity#1219
    Kevin Nisbet committed Mar 11, 2020
    Configuration menu
    Copy the full SHA
    fa7c841 View commit details
    Browse the repository at this point in the history

  2. change logging level for cgroup cleanup

    Kevin Nisbet committed Mar 11, 2020
    Configuration menu
    Copy the full SHA
    7694b97 View commit details
    Browse the repository at this point in the history

  3. address review feedback

    Kevin Nisbet committed Mar 11, 2020
    Configuration menu
    Copy the full SHA
    9a00c92 View commit details
    Browse the repository at this point in the history

  4. address review feedback

    Kevin Nisbet committed Mar 11, 2020
    Configuration menu
    Copy the full SHA
    2dec327 View commit details
    Browse the repository at this point in the history