// allocateContainerResources attempts to allocate all of required device // plugin resources for the input container, issues an Allocate rpc request // for each new device resource requirement, processes their AllocateResponses, // and updates the cached containerDevices on success. func (m *Manag...
dockerEndpoint ="unix:///var/run/docker.sock"}return&config.ContainerRuntimeOptions{// 1.21.13版本默认使用docker容器运行时(--container-runtime),k8s1.25版本脱离dockerContainerRuntime: kubetypes.DockerContainerRuntime,// 定义了docker socket路径(unix:///var/run/docker.sock)用于与docker间通信DockerEnd...
kl.podWorkers.IsPodTerminationRequested(pod.UID) {// We failed pods that we rejected, so activePods include all admitted// pods that are alive.activePods := kl.filterOutInactivePods(existingPods)// Check if we can admit the pod; if not, reject it.ifok, reason, message := kl.canAdmitP...
nodestatus.MachineInfo(string(kl.nodeName), kl.maxPods, kl.podsPerCore, kl.GetCachedMachineInfo, kl.containerManager.GetCapacity, kl.containerManager.GetDevicePluginResourceCapacity, kl.containerManager.GetNodeAllocatableReservation, kl.recordEvent), 1. 2. kl.maxPods代表node上最多可以运行多少个pod ...
Create sandbox if necessary.// 5. Create ephemeral containers.// 6. Create init containers.// 7. Create normal containers.func(m*kubeGenericRuntimeManager)SyncPod(pod*v1.Pod,podStatus*kubecontainer.PodStatus,pullSecrets[]v1.Secret,backOff*flowcontrol.Backoff)(result kubecontainer.PodSyncResult)...
Aug 01 00:50:30 [nodename] kubelet-wrapper[20169]: E0801 00:50:30.626256 20169 manager.go:1031] Failed to create existing container: /docker/1f3994fd716cc132015b6059d47e84425370ce39d0d05016ba5c7f321c3b4f18: failed to identify the read-write layer ID for container "1f3994fd716cc132015...
= nil { klog.ErrorS(err, "Failed to traverse plugin socket path", "path", w.path) } // 启动协程,for循环监听plugins_registry目录(遍历目录中的现有子级)下产生的fsnotify.create和fsnotify.delete的事件,并调用w.handleCreateEvent方法 go func(fsWatcher *fsnotify.Watcher) { for { select { case ...
if err := m.osInterface.Symlink(containerLog, legacySymlink); err != nil { glog.Errorf("Failed to create legacy symbolic link %q to container %q log %q: %v", legacySymlink, containerID, containerLog, err) } } // 4、执行 post start hook ...
containerReferenceManager evictionManager nvidiaGpuManager imageGCManager kuberuntimeManager hostportManager podManager proberManager secretManager statusManager volumeManager tokenManager 本文主要看入口方法和pod的新建逻辑。 cmd入口 cmd 文件夹是kubelet启动的入口,包括了启动参数的解析等,代码目录结构如下: ...
hyperkube[1554]: F0814 05:07:21.438534 1554 server.go:262] failed to run Kubelet: cannot create certificate signing request: Unauthorized 原因 kubelet 所使用的客户机证书已到期。 Kubelet 无法更新证书。 您需要生成新引导程序令牌以再次加入并获取新证书。