Ace Eldeib

> fundamentally log spam shouldn't be able to cause a denial of service agreed :) > I'd suggest following the Kubelet pattern of providing a log max size and a...

take a look at https://github.com/Azure/AgentBaker/pull/2381, that will likely merge and take a few weeks to roll out in AKS (consumable via a new node image, likely 2022.11.07 ish) feel free...

spot nodes have a default taint and require a toleration. have you added that? check out https://docs.microsoft.com/en-us/azure/aks/spot-node-pool#verify-the-spot-node-pool (scroll down a bit)

> does not support setting the CRI [registry credentials](https://github.com/containerd/containerd/blob/main/docs/cri/registry.md#configure-registry-credentials). have you seen https://github.com/containerd/containerd/blob/main/docs/hosts.md#client-field? or similarly https://github.com/containerd/containerd/blob/main/docs/hosts.md#support-for-dockers-certificate-file-pattern ? > This seems to require a daemon reload. that is unfortunately necessary right...

hmm interesting point. does the mirror config + imagePullSecrets at k8s layer work for your use case? at a glance, it seems like the CRI config still works but is...

hmmm. you're not missing something. what's the exact configuration when you run the test? are you writing into the pod root overlayfs, host mounting the disk, emptyDir, etc?

the ssd thing is an implementation detail, the backing image is Standard HDD pulled to local disk this is on my to-do list to repro but dealing with cgroupv2 issues...

specifically > We use emptyDir for our workload this is surprising(ly bad performance for empty dir)

This sounds right up my alley, and I'm an associate looking for places to jump in! 🎉 I also have some *very* outstanding test-infra PRs to add kubebuilder/controller-runtime to Prow...

Following those tips^ (thanks @BenTheElder), I found - [example prow postsubmit](https://github.com/kubernetes/test-infra/blob/ee2568423b32bc86fffcb965a5fa9b76defc025c/config/jobs/GoogleCloudPlatform/k8s-multicluster-ingress/k8s-multicluster-ingress-config.yaml#L37) to for building an image - [invocation of image-builder](https://github.com/kubernetes/test-infra/blob/70015225876afea36de3ce98f36fe1592e8c2e53/images/kubemci/Makefile#L19) - [config for the tags](https://github.com/kubernetes/test-infra/blob/ee2568423b32bc86fffcb965a5fa9b76defc025c/images/kubemci/cloudbuild.yaml#L12) So the postsubmit is basically...