kubernetes/pkg/kubelet/cm/container_manager_linux.go

type systemContainer …

func newSystemCgroups(containerName string) (*systemContainer, error) { … }

type containerManagerImpl …

type features …

var _ …

// checks if the required cgroups subsystems are mounted.
// As of now, only 'cpu' and 'memory' are required.
// cpu quota is a soft requirement.
func validateSystemRequirements(mountUtil mount.Interface) (features, error) { … }

// TODO(vmarmol): Add limits to the system containers.
// Takes the absolute name of the specified containers.
// Empty container name disables use of the specified container.
func NewContainerManager(mountUtil mount.Interface, cadvisorInterface cadvisor.Interface, nodeConfig NodeConfig, failSwapOn bool, recorder record.EventRecorder, kubeClient clientset.Interface) (ContainerManager, error) { … }

// NewPodContainerManager is a factory method returns a PodContainerManager object
// If qosCgroups are enabled then it returns the general pod container manager
// otherwise it returns a no-op manager which essentially does nothing
func (cm *containerManagerImpl) NewPodContainerManager() PodContainerManager { … }

func (cm *containerManagerImpl) InternalContainerLifecycle() InternalContainerLifecycle { … }

// Create a cgroup container manager.
func createManager(containerName string) (cgroups.Manager, error) { … }

type KernelTunableBehavior …

const KernelTunableWarn …

const KernelTunableError …

const KernelTunableModify …

// setupKernelTunables validates kernel tunable flags are set as expected
// depending upon the specified option, it will either warn, error, or modify the kernel tunable flags
func setupKernelTunables(option KernelTunableBehavior) error { … }

func (cm *containerManagerImpl) setupNode(activePods ActivePodsFunc) error { … }

func (cm *containerManagerImpl) GetNodeConfig() NodeConfig { … }

// GetPodCgroupRoot returns the literal cgroupfs value for the cgroup containing all pods.
func (cm *containerManagerImpl) GetPodCgroupRoot() string { … }

func (cm *containerManagerImpl) GetMountedSubsystems() *CgroupSubsystems { … }

func (cm *containerManagerImpl) GetQOSContainersInfo() QOSContainersInfo { … }

func (cm *containerManagerImpl) UpdateQOSCgroups() error { … }

func (cm *containerManagerImpl) Status() Status { … }

func (cm *containerManagerImpl) Start(ctx context.Context, node *v1.Node,
	activePods ActivePodsFunc,
	getNode GetNodeFunc,
	sourcesReady config.SourcesReady,
	podStatusProvider status.PodStatusProvider,
	runtimeService internalapi.RuntimeService,
	localStorageCapacityIsolation bool) error { … }

func (cm *containerManagerImpl) GetPluginRegistrationHandlers() map[string]cache.PluginHandler { … }

// TODO: move the GetResources logic to PodContainerManager.
func (cm *containerManagerImpl) GetResources(ctx context.Context, pod *v1.Pod, container *v1.Container) (*kubecontainer.RunContainerOptions, error) { … }

func (cm *containerManagerImpl) UpdatePluginResources(node *schedulerframework.NodeInfo, attrs *lifecycle.PodAdmitAttributes) error { … }

func (cm *containerManagerImpl) GetAllocateResourcesPodAdmitHandler() lifecycle.PodAdmitHandler { … }

func (cm *containerManagerImpl) SystemCgroupsLimit() v1.ResourceList { … }

func isProcessRunningInHost(pid int) (bool, error) { … }

func ensureProcessInContainerWithOOMScore(pid int, oomScoreAdj int, manager cgroups.Manager) error { … }

// getContainer returns the cgroup associated with the specified pid.
// It enforces a unified hierarchy for memory and cpu cgroups.
// On systemd environments, it uses the name=systemd cgroup for the specified pid.
func getContainer(pid int) (string, error) { … }

// Ensures the system container is created and all non-kernel threads and process 1
// without a container are moved to it.
//
// The reason of leaving kernel threads at root cgroup is that we don't want to tie the
// execution of these threads with to-be defined /system quota and create priority inversions.
func ensureSystemCgroups(rootCgroupPath string, manager cgroups.Manager) error { … }

// Determines whether the specified PID is a kernel PID.
func isKernelPid(pid int) bool { … }

// GetCapacity returns node capacity data for "cpu", "memory", "ephemeral-storage", and "huge-pages*"
// At present this method is only invoked when introspecting ephemeral storage
func (cm *containerManagerImpl) GetCapacity(localStorageCapacityIsolation bool) v1.ResourceList { … }

func (cm *containerManagerImpl) GetDevicePluginResourceCapacity() (v1.ResourceList, v1.ResourceList, []string) { … }

func (cm *containerManagerImpl) GetDevices(podUID, containerName string) []*podresourcesapi.ContainerDevices { … }

func (cm *containerManagerImpl) GetAllocatableDevices() []*podresourcesapi.ContainerDevices { … }

func (cm *containerManagerImpl) GetCPUs(podUID, containerName string) []int64 { … }

func (cm *containerManagerImpl) GetAllocatableCPUs() []int64 { … }

func (cm *containerManagerImpl) GetMemory(podUID, containerName string) []*podresourcesapi.ContainerMemory { … }

func (cm *containerManagerImpl) GetAllocatableMemory() []*podresourcesapi.ContainerMemory { … }

func (cm *containerManagerImpl) GetDynamicResources(pod *v1.Pod, container *v1.Container) []*podresourcesapi.DynamicResource { … }

func (cm *containerManagerImpl) ShouldResetExtendedResourceCapacity() bool { … }

func (cm *containerManagerImpl) UpdateAllocatedDevices() { … }

func containerMemoryFromBlock(blocks []memorymanagerstate.Block) []*podresourcesapi.ContainerMemory { … }

func (cm *containerManagerImpl) PrepareDynamicResources(ctx context.Context, pod *v1.Pod) error { … }

func (cm *containerManagerImpl) UnprepareDynamicResources(ctx context.Context, pod *v1.Pod) error { … }

func (cm *containerManagerImpl) PodMightNeedToUnprepareResources(UID types.UID) bool { … }

func (cm *containerManagerImpl) UpdateAllocatedResourcesStatus(pod *v1.Pod, status *v1.PodStatus) { … }

func (cm *containerManagerImpl) Updates() <-chan resourceupdates.Update { … }