support memory swap by CRI

cri/annotations/annotations.go

@@ -22,4 +22,10 @@ const (
 
 	// LxcfsEnabled whether to enable lxcfs for a container
 	LxcfsEnabled = "io.kubernetes.lxcfs.enabled"
+
+	// ExtendAnnotationPrefix is the extend annotation prefix
+	ExtendAnnotationPrefix = "io.alibaba.pouch"
+
+	// MemorySwapExtendAnnotation is the extend annotation of memory swap
+	MemorySwapExtendAnnotation = "io.alibaba.pouch.resources.memory_swap"
 )

cri/v1alpha2/cri_utils.go

@@ -838,6 +838,13 @@ func (c *CriManager) updateCreateConfig(createConfig *apitypes.ContainerCreateCo
 		}
 	}
 
+	if len(config.Annotations) > 0 {
+		// Apply container config by annotation
+		if err := applyContainerConfigByAnnotation(config.Annotations, &createConfig.ContainerConfig, createConfig.HostConfig); err != nil {
+			return fmt.Errorf("failed to apply container annotation for container %q: %v", config.Metadata.Name, err)
+		}
+	}
+
 	// Apply cgroupsParent derived from the sandbox config.
 	if lc := sandboxConfig.GetLinux(); lc != nil {
 		// Apply Cgroup options.
@@ -1258,3 +1265,21 @@ func toCNIPortMappings(criPortMappings []*runtime.PortMapping) []ocicni.PortMapp
 	}
 	return portMappings
 }
+
+// applyContainerConfigByAnnotation updates pouch container config according to annotation.
+func applyContainerConfigByAnnotation(annotations map[string]string, config *apitypes.ContainerConfig, hc *apitypes.HostConfig) error {
+	if len(annotations) == 0 {
+		return nil
+	}
+
+	if memorySwap, ok := annotations[anno.MemorySwapExtendAnnotation]; ok {
+		ms, err := strconv.ParseInt(memorySwap, 10, 64)
+		if err != nil {
+			return fmt.Errorf("failed to parse resources.memory_swap: %v", err)
+		}
+
+		hc.MemorySwap = ms
+	}
+
+	return nil
+}

cri/v1alpha2/cri_utils_test.go

@@ -9,6 +9,7 @@ import (
 	"time"
 
 	apitypes "github.com/alibaba/pouch/apis/types"
+	anno "github.com/alibaba/pouch/cri/annotations"
 	runtime "github.com/alibaba/pouch/cri/apis/v1alpha2"
 	"github.com/alibaba/pouch/daemon/mgr"
 	"github.com/alibaba/pouch/pkg/utils"
@@ -1854,3 +1855,58 @@ func Test_toCNIPortMappings(t *testing.T) {
 		})
 	}
 }
+
+// CRI test: apply container config by annotation
+func Test_applyContainerConfigByAnnotation(t *testing.T) {
+	tests := []struct {
+		name       string
+		annotation map[string]string
+		checkFn    func(config *apitypes.ContainerConfig, hc *apitypes.HostConfig) bool
+		errMsg     string
+	}{
+		{
+			name: "normalMemorySwapTest",
+			annotation: map[string]string{
+				anno.MemorySwapExtendAnnotation: "200000000",
+			},
+			checkFn: func(config *apitypes.ContainerConfig, hc *apitypes.HostConfig) bool {
+				if hc.MemorySwap == 200000000 {
+					return true
+				}
+
+				return false
+			},
+			errMsg: "",
+		},
+		{
+			name: "errorMemorySwapTest",
+			annotation: map[string]string{
+				anno.MemorySwapExtendAnnotation: "1g",
+			},
+			checkFn: func(config *apitypes.ContainerConfig, hc *apitypes.HostConfig) bool {
+				return false
+			},
+			errMsg: "failed to parse resources.memory_swap",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			config := &apitypes.ContainerConfig{}
+			hc := &apitypes.HostConfig{}
+
+			err := applyContainerConfigByAnnotation(tt.annotation, config, hc)
+			if tt.errMsg != "" {
+				assert.NotNil(t, err, "error should be %v", tt.errMsg)
+				if err != nil {
+					assert.Contains(t, err.Error(), tt.errMsg)
+				}
+			}
+
+			if tt.errMsg == "" {
+				assert.Nil(t, err)
+				assert.True(t, tt.checkFn(config, hc))
+			}
+		})
+	}
+}