kubelet: new kubelet config option for disabling group oom kill

[utam0k]

What type of PR is this?

/kind feature

What this PR does / why we need it:

There is a difference in the OOM behavior between cgroup v1 and v2 by default. It's important to note that in cgroup v1 if one of the processes within a container is killed, the other processes will remain running. Ideally, we might want to align with cgroup v2's behavior, where all processes within a container are killed if an OOM event occurs. However, in reality, we need to maintain the behavior of cgroup v1 for the time being. Therefore, this pull request will introduce the singleProcessOOMKill flag to enable like cgroup v1's behavior in cgroup v2.

• use the cgroup aware OOM killer if available #117793 (comment)
• use the cgroup aware OOM killer if available #117793 (comment)

Appearently, this workaround has already been discussed in a SIG-Node meeting.
#117793 (comment)

Which issue(s) this PR fixes:

Carry: #122813 by @tzneal

Special notes for your reviewer:

Does this PR introduce a user-facing change?

Added `singleProcessOOMKill` flag to the kubelet configuration. Setting that to true enable single process OOM killing in cgroups v2. In this mode, if a single process is OOM killed within a container, the remaining processes will not be OOM killed.

Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.:

[k8s-ci-robot]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[roycaihw]

/lgtm
/approve

Waiting for the test result: #126096 (comment)
(the pull-kubernetes-node-kubelet-serial-containerd job takes 90min to finish...)

[k8s-ci-robot]

LGTM label has been added.

Git tree hash: 02a3d5adf9dd34dc0ccf88bb694342898a14d5b9

[roycaihw]

pull-kubernetes-node-kubelet-serial-containerd passed

/assign @liggitt
for approval

[utam0k]

/test pull-kubernetes-node-kubelet-serial-containerd

I believe it will pass.

[liggitt]

/approve
/hold for a nit on config field godoc to align with the yaml values users will specify, and one fix needed on the build tagging

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dchen1107, liggitt, roycaihw, SergeyKanzhelev, utam0k, yujuhong

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• cmd/kubelet/OWNERS [SergeyKanzhelev,dchen1107,liggitt,yujuhong]
• pkg/generated/openapi/OWNERS [dchen1107,liggitt,roycaihw]
• pkg/kubelet/OWNERS [SergeyKanzhelev,dchen1107,liggitt,yujuhong]
• pkg/kubelet/apis/config/OWNERS [liggitt]
• staging/src/k8s.io/kubelet/config/OWNERS [liggitt]
• test/e2e_node/OWNERS [SergeyKanzhelev,dchen1107,liggitt]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[utam0k]

/test pull-kubernetes-node-kubelet-serial-containerd

[utam0k]

@liggitt Thanks for your review. I've updated following your suggestions.

[liggitt]

/lgtm
/hold cancel

[k8s-ci-robot]

LGTM label has been added.

Git tree hash: 1434b7ecb2606f35843efb840e693f15a8685a68

[utam0k]

/test pull-kubernetes-unit