Comments (5)
The containerd socket is mounted inside the agent's container to allow for slot reconciliation, the need for this socket is specified in the documentation as well : https://docs.akri.sh/user-guide/cluster-setup#configure-crictl
In a nutshell, as the DevicePlugin system doesn't call the agent when de-allocating the resource, we have to get the information about really used resources from the CRI endpoint.
There are future developments that will close this gap, namely the DRA (Dynamic Resource Allocation) mode that is currently planned will replace the DevicePlugin system with DRA that do notify the driver on de-allocation of resources.
Please note that DRA will not be on by default until it is out of alpha stage on all supported kubernetes versions.
from akri.
This may point out that Akri cannot achieve 1.0 until it has moved to DRA due to this security concern.
from akri.
@diconico07 is investigating a new approach in #684 which does not mount the containerd.socket
from akri.
Issue has been automatically marked as stale due to inactivity for 90 days. Update the issue to remove label, otherwise it will be automatically closed.
from akri.
Not stale, still an issue.
from akri.
Related Issues (20)
- Remove dependency on outdated cross images HOT 6
- Akri discovery handler unable to detect ip camera HOT 5
- Controller pod restarts when instance watcher restarts HOT 1
- Transport error when Agent calls gRPC discover() to some Discovery Handlers
- Use rust-based coverage tools rather than tarpaulin HOT 1
- LoRaWAN Support HOT 7
- OPC-UA Instance ID: ApplicationName is not the best choice ? HOT 1
- Pods with unready Containers exist on this node, we can't clean the slots yet HOT 5
- agent-registration.sock and udev.sock socket files world readable HOT 2
- Multiple configuration doesnt work -- helm install fails on rbac.enabled=false HOT 1
- RUSTSEC-2024-0003: Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS) HOT 1
- Put Akri on Adoption List of Related Projects HOT 3
- Switch from Prometheus to Open Telemetry for metric HOT 2
- Need to restart Configuration validating webhook when certificates are rotated HOT 2
- Discovery Handlers should generate universal device ID HOT 2
- Use cert-manager to manage webhook certs HOT 1
- RUSTSEC-2024-0320: yaml-rust is unmaintained. HOT 6
- (Define and) use Akri-specific Secret types HOT 3
- Akri installation via Glasskube HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from akri.