-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Labels
chall-managerRelated to chall-managerRelated to chall-managerenhancementNew feature or requestNew feature or requestgoPull requests that update Go codePull requests that update Go code
Description
Echoes #976
The new cache directory for storing OCI artifacts is now out of the replicated volume (at least we hope it is). This means that if the hosting node is out of memory, we can end up with OOM that will further propagate to the adjacent systems, leading to partial DoS of the overall system.
This would be very inconvenient 😬
For this reason, a limit to the size of the ephemeral volume created by the deploy/
directory would be a good thing !
Moreover, testing what happens to the API operations if this happens during one --especially ensuring consistency-- is now to check, manually first then with automated functional tests.
Metadata
Metadata
Assignees
Labels
chall-managerRelated to chall-managerRelated to chall-managerenhancementNew feature or requestNew feature or requestgoPull requests that update Go codePull requests that update Go code