mirror of
https://github.com/outbackdingo/kubernetes.git
synced 2026-02-14 06:50:40 +00:00
Automatic merge from submit-queue fix leaking memory backed volumes of terminated pods Currently, we allow volumes to remain mounted on the node, even though the pod is terminated. This creates a vector for a malicious user to exhaust memory on the node by creating memory backed volumes containing large files. This PR removes memory backed volumes (emptyDir w/ medium Memory, secrets, configmaps) of terminated pods from the node. @saad-ali @derekwaynecarr