Operator to remove image duplicates before scheduling a scan job #2268
Labels
kind/feature
Categorizes issue or PR as related to a new feature.
lifecycle/stale
Denotes an issue or PR has remained open with no activity and will be auto-closed.
Current behavior of operator is to read target pod specs and for each container inside the pod a new container is created to scan target container image.
Consider the following situation:
This behavior, combined with #2267 might explode resources required to scan a pod, e.g. by setting requests 200M and limits 2G (to include all possibilities of images in a cluster) you'll schedule a pod with 2G request and 20G limit which might OOM the whole node.
The text was updated successfully, but these errors were encountered: