k8s限制:对cgroup实现的验证

更多kubernetes文章: k8s专栏目录


//获取存在的pods信息
[root@seahigh001 kubernetes]# kubectl get pods

NAME            READY     STATUS    RESTARTS   AGE
tomcat-cm7mr    1/1       Running   0          1d
tomcat2-p0141   1/1       Running   0          1h

//查看其中一个pods的详细信息
[root@seahigh001 kubernetes]# kubectl describe pod tomcat2-p0141

Name:        tomcat2-p0141
Namespace:    limit-example
Node:        seahigh002/192.168.1.132
Start Time:    Thu, 17 Aug 2017 14:56:34 +0800
Labels:        app=tomcat2
Status:        Running
IP:        172.17.0.4
Controllers:    ReplicationController/tomcat2
Containers:
  tomcat2:
    Container ID:     docker://baaf5f495203e76cd8bc8a58307da9564220ae9c356b055601f40fb9bfada059
    Image:        tomcat:8.0.45-sh0
    Image ID:        docker://sha256:ff18882dd9bf90df4d4ff883841f9337ff6bdac0e8e8ceca02d29712a9dc73a2
    Port:        8080/TCP  
    Limits:
      cpu:    500m
      memory:     128Mi
 ...



//接下来切换到起docker的机器

//查看cgroup挂载的目录
[root@seahigh002 ~]# mount -t cgroup

cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb)
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (rw,nosuid,nodev,noexec,relatime,net_prio,net_cls)
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)
cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu)
cgroup on /sys/fs/cgroup/pids type cgroup (rw,nosuid,nodev,noexec,relatime,pids)
cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event)
cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)


//到cpu目录下查看,其它如memory目录同理
[root@seahigh002 ~]# cd /sys/fs/cgroup/cpu/system.slice/

drwxr-xr-x 2 root root 0 8月  17 14:56 docker-baaf5f495203e76cd8bc8a58307da9564220ae9c356b055601f40fb9bfada059.scope

存在与containerID一致的文件夹。
进入目录 查看 memory.limit_in_bytes文件
# cat memory.limit_in_bytes
134217728

单位换算后得到 128MiB,印证与上面配置一致。



//删除container后该文件夹也一起被删除







你可能感兴趣的:(kubernetes,kubernetes实践)