KEP-5758keps/sig-node/5758-per-container-ulimits-configuration

Per-container ulimits configuration

implementablealphasig-nodelatest v1.38

KEP on GitHub kep.yaml Ask about this KEP

This KEP proposes adding a ulimits field to the Container SecurityContext in the Pod API. This allows users to configure POSIX resource limits (rlimits) such as nofile (open files), nproc (process count), and memlock on a per-container basis.

Facts

Authors: @hirazawaui
Approvers: @mrunalp
Reviewers: @haircommander @sergeykanzhelev
PRR approvers: @kannon92alpha
Tracking issue: #5758(opens GitHub in a new tab) openmilestone v1.38sig/nodestage/alphatracked/yeslead-opted-in
Milestones: alpha v1.38
Participating SIGs: none
Feature gates: ContainerUlimits
Created / last updated: 2025-12-28 / none

Who decided each state, with the evidence.
Decided	Decision	Deciders	Evidence
2025-12-30 16:16 UTC	prr_approval kannon92 gave the production readiness approval for KEP-5758 at alpha on 2025-12-30.	@kannon92 prr_approver	Document 5758.yaml(opens GitHub in a new tab)
2026-02-12 07:18 UTC	stage_graduation KEP-5758 set milestone.alpha to v1.36 in PR #5762, approved by mrunalp, sergeykanzhelev, kannon92; merged by automation (k8s-ci-robot) on 2026-02-12.	@kannon92 approve_command @mrunalp approver @haircommander lgtm @sergeykanzhelev approver @sergeykanzhelev lgtm @hirazawaui author @mikebrow lgtm @k8s-ci-robot merger	Commit kubernetes/enhancements@56941c894d36505b598b1fa75d121c777e6afeb8(opens GitHub in a new tab) StatusChange milestone.alpha ∅ → v1.36 (2025-12-30)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#5762 KEP-5758: Per-container ulimits configuration(opens GitHub in a new tab) Review kubernetes/enhancements/pulls/reviews/3789065715(opens GitHub in a new tab) Review kubernetes/enhancements/pulls/reviews/3788731521(opens GitHub in a new tab) Review kubernetes/enhancements/pulls/reviews/3786490441(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/3885672864
2026-02-12 07:18 UTC	stage_graduation KEP-5758 graduated to alpha in PR #5762, approved by mrunalp, sergeykanzhelev, kannon92; merged by automation (k8s-ci-robot) on 2026-02-12.	@kannon92 approve_command @mrunalp approver @haircommander lgtm @sergeykanzhelev approver @sergeykanzhelev lgtm @hirazawaui author @mikebrow lgtm @k8s-ci-robot merger	Commit kubernetes/enhancements@56941c894d36505b598b1fa75d121c777e6afeb8(opens GitHub in a new tab) StatusChange stage ∅ → alpha (2025-12-30)(opens GitHub in a new tab)
2026-02-12 07:18 UTC	status_transition KEP-5758 status set to implementable in PR #5762, approved by mrunalp, sergeykanzhelev, kannon92; merged by automation (k8s-ci-robot) on 2026-02-12.	@kannon92 approve_command @mrunalp approver @haircommander lgtm @sergeykanzhelev approver @sergeykanzhelev lgtm @hirazawaui author @mikebrow lgtm @k8s-ci-robot merger	Commit kubernetes/enhancements@56941c894d36505b598b1fa75d121c777e6afeb8(opens GitHub in a new tab) StatusChange status ∅ → implementable (2025-12-30)(opens GitHub in a new tab)
2026-06-11 20:28 UTC	milestone_retarget KEP-5758 latest-milestone moved from v1.36 to v1.37 in PR #6157, approved by mrunalp; merged by automation (k8s-ci-robot) on 2026-06-11.	@mrunalp approver @mrunalp lgtm @sergeykanzhelev lgtm @hirazawaui author @k8s-ci-robot merger	Commit kubernetes/enhancements@db64840d3853508e318edf2658c09d05a915cf71(opens GitHub in a new tab) StatusChange latest_milestone v1.36 → v1.37 (2026-06-04)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#6157 KEP-5758: bump to the latest release(opens GitHub in a new tab) Review kubernetes/enhancements/pulls/reviews/4480291169
2026-06-11 20:28 UTC	milestone_retarget KEP-5758 milestone.alpha moved from v1.36 to v1.37 in PR #6157, approved by mrunalp; merged by automation (k8s-ci-robot) on 2026-06-11.	@mrunalp approver @mrunalp lgtm @sergeykanzhelev lgtm @hirazawaui author @k8s-ci-robot merger	Commit kubernetes/enhancements@db64840d3853508e318edf2658c09d05a915cf71(opens GitHub in a new tab) StatusChange milestone.alpha v1.36 → v1.37 (2026-06-04)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#6157 KEP-5758: bump to the latest release(opens GitHub in a new tab) Review kubernetes/enhancements/pulls/reviews/4480291169
2026-09-25 20:48 UTC	milestone_retarget KEP-5758 latest-milestone moved from v1.37 to v1.38 in PR #6425, approved by dchen1107; merged by automation (kubernetes-prow) on 2026-09-25.	@dchen1107 approve_command @dchen1107 lgtm @hirazawaui author @kubernetes-prow merger	Commit kubernetes/enhancements@dfb5083c9192f27c974c1731fd7a305d3879b601(opens GitHub in a new tab) StatusChange latest_milestone v1.37 → v1.38 (2026-09-23)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#6425 KEP-5758: bump alpha milestone to v1.38(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/5839310990
2026-09-25 20:48 UTC	milestone_retarget KEP-5758 milestone.alpha moved from v1.37 to v1.38 in PR #6425, approved by dchen1107; merged by automation (kubernetes-prow) on 2026-09-25.	@dchen1107 approve_command @dchen1107 lgtm @hirazawaui author @kubernetes-prow merger	Commit kubernetes/enhancements@dfb5083c9192f27c974c1731fd7a305d3879b601(opens GitHub in a new tab) StatusChange milestone.alpha v1.37 → v1.38 (2026-09-23)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#6425 KEP-5758: bump alpha milestone to v1.38(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/5839310990

Metadata, label and milestone changes, oldest first.Showing 1–10 of 45Rows

Status history
At	Kind	Field	Change	Actor	Evidence
2025-12-27 14:36 UTC	label	needs-sig added	none → needs-sig	@k8s-ci-robot	source(opens GitHub in a new tab)
2025-12-27 14:36 UTC	label	sig/node added	none → sig/node	@k8s-ci-robot	source

Relationships as stored, Person → KEP, from kep.yaml(opens GitHub in a new tab)
Person	Relationship
@hirazawaui GitHub(opens GitHub in a new tab)	—AUTHORED→
@haircommander GitHub(opens GitHub in a new tab)	—REVIEWS→
@sergeykanzhelev GitHub(opens GitHub in a new tab)	—REVIEWS→
@mrunalp

How they connect

Shortest paths in the graph between this KEP and its SIG or one of its people, up to four hops.

Impact of change

Rows returned by the tool
Kep	Depth	Reached	By hop	Open pull requests	Hop	Feature gates	Sigs	People	Open issues
{ "label": "KEP", "key": "keps/sig-node/5758-per-container-ulimits-configuration", "title": "Per-container ulimits configuration", "url": "https://github.com/kubernetes/enhancements/tree/5b503a75369bdfdd494a2c2c72107a41bf6dd1a8/keps/sig-node/5758-per-container-ulimits-configuration", "evidence_id": "j74fesmmlshb", "number": 5758, "owning_sig": "sig-node", "status": "implementable", "stage": "alpha", "latest_milestone": "v1.38", "milestone_alpha": "v1.38", "creation_date": "2025-12-28", "metadata_invalid": false }	2	5	{ "1": { "feature_gates": 1, "sigs": 1, "people": 2, "open_issues": 1 } }	not in graph (merged pull requests only)	none	none	none	none	none
none	none	none	none	none	1	[ { "label": "FeatureGate", "key": "ContainerUlimits", "title": "ContainerUlimits", "url": "https://github.com/kubernetes/enhancements/blob/5b503a75369bdfdd494a2c2c72107a41bf6dd1a8/keps/sig-node/5758-per-container-ulimits-configuration/kep.yaml", "evidence_id": "dca42uujmsb3", "name": "ContainerUlimits" } ]	[ { "label": "SIG", "key": "sig-node", "title": "Node", "url": "https://github.com/kubernetes/community/tree/440e496d3a172234d81728df1bfe43849b589adf/sig-node", "evidence_id": "nrsuxu2xcxa7", "display_name": "Node", "sig_label": "node", "in_scope": true } ]	[ { "label": "Person", "key": "hirazawaui", "title": "hirazawaui", "url": "https://github.com/hirazawaui", "evidence_id": "b4bu2kmctnqp", "login": "hirazawaui", "is_bot": false }, { "label": "Person", "key": "mrunalp", "title": "mrunalp", "url": "https://github.com/mrunalp", "evidence_id": "oysq4hgp6yuk", "login": "mrunalp", "is_bot": false } ]	[ { "label": "Issue", "key": "kubernetes/enhancements#5758", "title": "Per-container ulimits configuration", "url": "https://github.com/kubernetes/enhancements/issues/5758", "evidence_id": "z3bbnwjgr3ma", "number": 5758, "state": "open", "created_at_iso": "2025-12-27T14:36:09Z", "labels_current": [ "sig/node", "stage/alpha", "tracked/yes", "lead-opted-in" ], "milestone_current": "v1.38", "is_tracking_issue": true } ]

Rows returned by the tool
Kep	Depth	Reached	By hop	Open pull requests	Hop	Feature gates	Sigs	People	Open issues
{ "label": "KEP", "key": "keps/sig-node/5758-per-container-ulimits-configuration", "title": "Per-container ulimits configuration", "url": "https://github.com/kubernetes/enhancements/tree/5b503a75369bdfdd494a2c2c72107a41bf6dd1a8/keps/sig-node/5758-per-container-ulimits-configuration", "evidence_id": "j74fesmmlshb", "number": 5758, "owning_sig": "sig-node", "status": "implementable", "stage": "alpha", "latest_milestone": "v1.38", "milestone_alpha": "v1.38", "creation_date": "2025-12-28", "metadata_invalid": false }	2	5	{ "1": { "feature_gates": 1, "sigs": 1, "people": 2, "open_issues": 1 } }	not in graph (merged pull requests only)	none	none	none	none	none
none	none	none	none	none	1	[ { "label": "FeatureGate", "key": "ContainerUlimits", "title": "ContainerUlimits", "url": "https://github.com/kubernetes/enhancements/blob/5b503a75369bdfdd494a2c2c72107a41bf6dd1a8/keps/sig-node/5758-per-container-ulimits-configuration/kep.yaml", "evidence_id": "dca42uujmsb3", "name": "ContainerUlimits" } ]	[ { "label": "SIG", "key": "sig-node", "title": "Node", "url": "https://github.com/kubernetes/community/tree/440e496d3a172234d81728df1bfe43849b589adf/sig-node", "evidence_id": "nrsuxu2xcxa7", "display_name": "Node", "sig_label": "node", "in_scope": true } ]	[ { "label": "Person", "key": "hirazawaui", "title": "hirazawaui", "url": "https://github.com/hirazawaui", "evidence_id": "b4bu2kmctnqp", "login": "hirazawaui", "is_bot": false }, { "label": "Person", "key": "mrunalp", "title": "mrunalp", "url": "https://github.com/mrunalp", "evidence_id": "oysq4hgp6yuk", "login": "mrunalp", "is_bot": false } ]	[ { "label": "Issue", "key": "kubernetes/enhancements#5758", "title": "Per-container ulimits configuration", "url": "https://github.com/kubernetes/enhancements/issues/5758", "evidence_id": "z3bbnwjgr3ma", "number": 5758, "state": "open", "created_at_iso": "2025-12-27T14:36:09Z", "labels_current": [ "sig/node", "stage/alpha", "tracked/yes", "lead-opted-in" ], "milestone_current": "v1.38", "is_tracking_issue": true } ]

Kep

Depth

Reached

By hop

Open pull requests

Hop

Feature gates

Sigs

People

Open issues

{
  "label": "KEP",
  "key": "keps/sig-node/5758-per-container-ulimits-configuration",
  "title": "Per-container ulimits configuration",
  "url": "https://github.com/kubernetes/enhancements/tree/5b503a75369bdfdd494a2c2c72107a41bf6dd1a8/keps/sig-node/5758-per-container-ulimits-configuration",
  "evidence_id": "j74fesmmlshb",
  "number": 5758,
  "owning_sig": "sig-node",
  "status": "implementable",
  "stage": "alpha",
  "latest_milestone": "v1.38",
  "milestone_alpha": "v1.38",
  "creation_date": "2025-12-28",
  "metadata_invalid": false
}

{
  "1": {
    "feature_gates": 1,
    "sigs": 1,
    "people": 2,
    "open_issues": 1
  }
}

not in graph (merged pull requests only)

[
  {
    "label": "FeatureGate",
    "key": "ContainerUlimits",
    "title": "ContainerUlimits",
    "url": "https://github.com/kubernetes/enhancements/blob/5b503a75369bdfdd494a2c2c72107a41bf6dd1a8/keps/sig-node/5758-per-container-ulimits-configuration/kep.yaml",
    "evidence_id": "dca42uujmsb3",
    "name": "ContainerUlimits"
  }
]

[
  {
    "label": "SIG",
    "key": "sig-node",
    "title": "Node",
    "url": "https://github.com/kubernetes/community/tree/440e496d3a172234d81728df1bfe43849b589adf/sig-node",
    "evidence_id": "nrsuxu2xcxa7",
    "display_name": "Node",
    "sig_label": "node",
    "in_scope": true
  }
]

[
  {
    "label": "Person",
    "key": "hirazawaui",
    "title": "hirazawaui",
    "url": "https://github.com/hirazawaui",
    "evidence_id": "b4bu2kmctnqp",
    "login": "hirazawaui",
    "is_bot": false
  },
  {
    "label": "Person",
    "key": "mrunalp",
    "title": "mrunalp",
    "url": "https://github.com/mrunalp",
    "evidence_id": "oysq4hgp6yuk",
    "login": "mrunalp",
    "is_bot": false
  }
]

[
  {
    "label": "Issue",
    "key": "kubernetes/enhancements#5758",
    "title": "Per-container ulimits configuration",
    "url": "https://github.com/kubernetes/enhancements/issues/5758",
    "evidence_id": "z3bbnwjgr3ma",
    "number": 5758,
    "state": "open",
    "created_at_iso": "2025-12-27T14:36:09Z",
    "labels_current": [
      "sig/node",
      "stage/alpha",
      "tracked/yes",
      "lead-opted-in"
    ],
    "milestone_current": "v1.38",
    "is_tracking_issue": true
  }
]

MATCH (k:KEP {key: $key}) RETURN k LIMIT 1 ; MATCH (k:KEP {key: $key}) MATCH path = (k)-[:REPLACES|SUPERSEDED_BY|SEE_ALSO|GATED_BY*1..2]-(n) WHERE n <> k AND (n:KEP OR n:FeatureGate) AND all(x IN nodes(path)[1..-1] WHERE x <> k AND (x:KEP OR (x:FeatureGate AND NOT x.key IN $placeholders))) WITH n, path ORDER BY length(path), [x IN nodes(path) | x.key] WITH n, collect(path)[0] AS path RETURN n AS node, length(path) AS hop, path ORDER BY hop, n.key LIMIT 150 ; UNWIND $keys AS kk MATCH (k:KEP {key: kk}) RETURN k.key AS kep, [(k)-[r_0:OWNED_BY]->(s_0:SIG) WHERE coalesce(r_0.valid_to, $open) = $open | s_0] AS sigs, [(p_1:Person)-[r_1:AUTHORED]->(k) WHERE coalesce(r_1.valid_to, $open) = $open AND coalesce(p_1.is_bot, false) = false | p_1] AS authors, [(p_2:Person)-[r_2:APPROVES]->(k) WHERE coalesce(r_2.valid_to, $open) = $open AND coalesce(p_2.is_bot, false) = false | p_2] AS approvers, [(k)-[r_3:TRACKED_BY]->(i_3:Issue) WHERE coalesce(r_3.valid_to, $open) = $open AND i_3.state = 'open' | i_3] AS open_issues LIMIT 200

Per-container ulimits configuration

Facts

How they connect

Impact of change

Keyboard shortcuts

Everywhere

Go to a page

Ask

Search lists

KEP page

Findings table

How they connect

Impact of change

Hop 1

Impact of change

Impact of change

Hop 1