From 339e323491d16deb0ad06c15855a7b1986589767 Mon Sep 17 00:00:00 2001 From: Dalton Hubble Date: Thu, 18 Jul 2019 23:57:53 -0700 Subject: [PATCH] Temporarily turn off QoS cgroups on Fedora CoreOS controllers * Kubelets can hit the ContainerManager Delegation issue and fail to start (noted in 72c94f1c6). Its unclear why this occurs only to some Kubelets (possibly an ordering concern) * QoS cgroups remain a goal * When a controller node is affected, bootstrapping fails, which makes other development harder. Temporarily disable QoS on controllers only. This should safeguard bring-up and hopefully still allow the issue to occur on some workers for debugging --- aws/fedora-coreos/kubernetes/fcc/controller.yaml | 4 ++-- bare-metal/fedora-coreos/kubernetes/fcc/controller.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/aws/fedora-coreos/kubernetes/fcc/controller.yaml b/aws/fedora-coreos/kubernetes/fcc/controller.yaml index 7130c304..a688390a 100644 --- a/aws/fedora-coreos/kubernetes/fcc/controller.yaml +++ b/aws/fedora-coreos/kubernetes/fcc/controller.yaml @@ -85,8 +85,8 @@ systemd: --authentication-token-webhook \ --authorization-mode=Webhook \ --cgroup-driver=systemd \ - --cgroups-per-qos=true \ - --enforce-node-allocatable=pods \ + --cgroups-per-qos=false \ + --enforce-node-allocatable="" \ --client-ca-file=/etc/kubernetes/ca.crt \ --cluster_dns=${cluster_dns_service_ip} \ --cluster_domain=${cluster_domain_suffix} \ diff --git a/bare-metal/fedora-coreos/kubernetes/fcc/controller.yaml b/bare-metal/fedora-coreos/kubernetes/fcc/controller.yaml index bd7b4b7a..9c946c4e 100644 --- a/bare-metal/fedora-coreos/kubernetes/fcc/controller.yaml +++ b/bare-metal/fedora-coreos/kubernetes/fcc/controller.yaml @@ -86,8 +86,8 @@ systemd: --authentication-token-webhook \ --authorization-mode=Webhook \ --cgroup-driver=systemd \ - --cgroups-per-qos=true \ - --enforce-node-allocatable=pods \ + --cgroups-per-qos=false \ + --enforce-node-allocatable="" \ --client-ca-file=/etc/kubernetes/ca.crt \ --cluster_dns=${cluster_dns_service_ip} \ --cluster_domain=${cluster_domain_suffix} \