From 1fa12cf5a2c427ee2d88d3a350433665af510849 Mon Sep 17 00:00:00 2001 From: Julio Montes Date: Fri, 24 Jan 2020 15:09:55 +0000 Subject: [PATCH] design: update host-cgroups documentation according to the new changes update host-cgroups documentation according to the new changes in the runtime fixes #588 Signed-off-by: Julio Montes --- design/host-cgroups.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/design/host-cgroups.md b/design/host-cgroups.md index 11b4849c5..524d38ee3 100644 --- a/design/host-cgroups.md +++ b/design/host-cgroups.md @@ -67,7 +67,7 @@ into account. This will be feasible in the 1.16 Kubernetes release through the ` | | | | kata-shimv2, VMM and threads: | | | | | | | | (VMM, IO-threads, vCPU threads, etc)| | | | | | | | | | | | -| | | | kata-sandbox- | | | | +| | | | kata_ | | | | | | | +--------------------------------------+ | | | | | | | | | | | |Pod 1 | | | @@ -78,8 +78,8 @@ into account. This will be feasible in the 1.16 Kubernetes release through the ` | | | | kata-shimv2, VMM and threads: | | | | | | | | (VMM, IO-threads, vCPU threads, etc)| | | | | | | | | | | | -| | | | kata-sandbox- | | | | -| | | +--------------------------------------+ | | | +| | | | kata_ | | | | +| | | +--------------------------------------+ | | | | | |Pod 2 | | | | | +---------------------------------------------+ | | | |kubepods | | @@ -94,7 +94,7 @@ into account. This will be feasible in the 1.16 Kubernetes release through the ` ``` podCgroup=Parent(container.CgroupsPath) - KataSandboxCgroup=/kata-sandbox- + KataSandboxCgroup=/kata_ ``` 2. Create the cgroup, `KataSandboxCgroup` @@ -102,8 +102,8 @@ into account. This will be feasible in the 1.16 Kubernetes release through the ` 3. Join the `KataSandboxCgroup` Any process created by the runtime will be created in `KataSandboxCgroup`. -The runtime will not limit the cgroup in the host, but the caller is free -to set the proper limits for the `podCgroup`. +The runtime will limit the cgroup in the host only if the sandbox doesn't have a +container type annotation, but the caller is free to set the proper limits for the `podCgroup`. In the example above the pod cgroups are `/kubepods/pod1` and `/kubepods/pod2`. Kata creates the unrestricted sandbox cgroup under the pod cgroup.