Senthil Kumaran
Senthil Kumaran
@dependabot rebase
@dependabot rebase
> do these within 30s: delete one pod and create two new pod, the last pod will fail by can not assign IP address to pod The default cooldown period...
Thanks for the report and the Pull Request. Have you done any measurements with and without this change? Could you share the differences?
> K8s caches which usesList + watches on startup are extremely expensive calls > Even though the memory consumption isn't very high, its still unnecessary to store all node information...
> I can close to issue for now since I likely don't have time to look into writing a direct watcher instead and I think the memory spike isn't large...
> One option here is to have the SG reconciler rely on an internal cache while the ENI/IP reconciler is responsible for pulling the ENIs from IMDS and determine if...
This is addressed.
@sorjii - Not yet. We are planning to release 1.18.2 with this change and other security fixes which are in pipeline. The change is merged in master.
@dependabot rebase