Skip to content

Commit ae728ef

Browse files
committed
Address upgrade, resource usage and other related comments
Signed-off-by: Swati Gupta <[email protected]>
1 parent 64302a3 commit ae728ef

File tree

1 file changed

+24
-7
lines changed
  • keps/sig-node/3695-pod-resources-for-dra

1 file changed

+24
-7
lines changed

keps/sig-node/3695-pod-resources-for-dra/README.md

Lines changed: 24 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -348,7 +348,12 @@ Kubelet may fail to start. The new API may report inconsistent data, or may caus
348348

349349
###### Were upgrade and rollback tested? Was the upgrade->downgrade->upgrade path tested?
350350

351-
Not Applicable.
351+
Not Applicable. Because this change:
352+
353+
- Is read-only in the kubelet’s in-memory state.
354+
- Is behind a feature gate, so turning it off simply disables the new endpoints without affecting any existing behavior.
355+
356+
In practice, restart the kubelet with the gate disabled (rollback) or re-enabled (upgrade), and the API behavior reverts or returns without loss of data or consistency. Therefore we don’t need a special upgrade/downgrade test matrix for this KEP.
352357

353358
###### Is the rollout accompanied by any deprecations and/or removals of features, APIs, fields of API types, flags, etc.?
354359

@@ -373,7 +378,9 @@ Call the PodResources API and see the result.
373378

374379
###### What are the reasonable SLOs (Service Level Objectives) for the enhancement?
375380

376-
N/A.
381+
100% in normal operation. The proposed API exposes in read only mode kubelet internal data, critical for functioning of the kubelet.
382+
This data has to be available 100% of the time for the proper functioning of the kubelet, thus is expected to be available 100% of time.
383+
The only possible error source is the API calls being throttled by the rate-limiting introduced with the GA graduation of the parent KEP 606.
377384

378385
###### What are the SLIs (Service Level Indicators) an operator can use to determine the health of the service?
379386

@@ -409,29 +416,35 @@ No.
409416

410417
###### Will enabling / using this feature result in increasing size or count of the existing API objects?
411418

412-
No.
419+
No. Enabling this feature does not change the number of API objects returned. But it may increase the size of each object whenever there are Dynamic Resources to report where each ContainerResources now has an extra dynamic_resources field.
413420

414421
###### Will enabling / using this feature result in increasing time taken by any operations covered by existing SLIs/SLOs?
415422

416423
No. Feature is out of existing any paths in kubelet.
417424

418425
###### Will enabling / using this feature result in non-negligible increase of resource usage (CPU, RAM, disk, IO, ...) in any components?
426+
Negligible amount of CPU and memory. Because the API is purely read-only and piggy-backs on the kubelet’s existing cache and checkpointing machinery, exposing Dynamic Resources incurs only similar minimal serialization and storage as CPUManager and DeviceManager—so any extra CPU, memory, disk, or I/O impact is negligible.
419427

420-
DDOSing the API can lead to resource exhaustion.
428+
###### Can enabling / using this feature result in resource exhaustion of some node resources (PIDs, sockets, inodes, etc.)?
429+
430+
No, because the endpoint queries existing data structures inside the kubelet.
421431

422432
### Troubleshooting
423433

424434
###### How does this feature react if the API server and/or etcd is unavailable?
425435

426-
N/A.
436+
No impact, the feature is node-local.
427437

428438
###### What are other known failure modes?
429439

430-
The API will always return a well-known error. In normal operation, the API is expected to never return an error and always return a valid response, because it utilizes internal kubelet data which is always available. Bugs may cause the API to return unexpected errors, or to return inconsistent data. Consumers of the API should treat unexpected errors as bugs of this API.
440+
feature gate disabled: The API will always return a well-known error. In normal operation, the API is expected to never return an error and always return a valid response, because it utilizes internal kubelet data which is always available.
441+
Bugs may cause the API to return unexpected errors, or to return inconsistent data.
442+
Consumers of the API should treat unexpected errors as bugs of this API.
431443

432444
###### What steps should be taken if SLOs are not being met to determine the problem?
433445

434-
N/A.
446+
Check the error code to learn if the consumer of the API is being throttle by rate limiting introduced in the parent KEP 606.
447+
Check the kubelet logs to learn about resource allocation errors.
435448

436449
## Implementation History
437450

@@ -443,4 +456,8 @@ N/A.
443456

444457
## Drawbacks
445458

459+
N/A
460+
446461
## Alternatives
462+
463+
N/A

0 commit comments

Comments
 (0)