pomerium / pomerium / 9276241306

52%

Build Type

push

github

Committed by web-flow

Commit Message

Envoy resource monitoring & overload manager configuration (#5106)

* Initial envoy cgroup resource monitor implementation

* Add cgroupv1 support; add metrics instrumentation

* Slight refactor for more efficient memory limit detection

Instead of reading memory.max/limit_in_bytes on every tick, we
read it once, then again only when it is modified.

To support this change, logic for computing the saturation was moved out
of the cgroup driver and into the resource monitor, and the driver
interface now has separate methods for reading memory usage and limit.

* Code cleanup/lint fixes

* Add platform build tags

* Add unit tests

* Fix lint issues

* Add runtime flag to allow disabling resource monitor

* Clamp saturation values to the range [0.0, 1.0]

* Switch to x/sys/unix; handle inotify IN_IGNORED events

Coverage Stats

403 of 538 new or added lines in 3 files covered. (74.91%)

6 existing lines in 2 files now uncovered.

17477 of 30822 relevant lines covered (56.7%)

99.85 hits per line