-
-
Notifications
You must be signed in to change notification settings - Fork 2.4k
Description
Describe what you are trying to accomplish and why in non technical terms
When running in Kubernetes on rockchip hardware there is a requirement to run in privileged mode to allow access to the /proc/device-tree/compatible
file. In privileged mode Kubernetes doesn't pass the memory limits through to the container meaning /sys/fs/cgroup/memory.max
isn't available, this makes the memory usage statistics wrong but also impacts other processes that use this data to track available system memory
Describe the solution you'd like
Ability to pass the value of /proc/device-tree/compatible
via some other means, maybe in config or an env varialbe
Describe alternatives you've considered
Looked at using
securityContext:
procMount: Unmasked
but that requires hostUsers: false
which requires enabling a feature gate and configuring support in containerd