Add LimitNPROC, LimitNOFILE and LimitCORE for containerd and

cri-containerd.

Signed-off-by: Lantao Liu <lantaol@google.com>

test/e2e/node.yaml

@@ -54,6 +54,11 @@ write_files:
       RestartSec=5
       Delegate=yes
       KillMode=process
+      LimitNOFILE=1048576
+      # Having non-zero Limit*s causes performance problems due to accounting overhead
+      # in the kernel. We recommend using cgroups to do container-local accounting.
+      LimitNPROC=infinity
+      LimitCORE=infinity
       ExecStartPre=/sbin/modprobe overlay
       ExecStart=/home/cri-containerd/usr/local/bin/containerd --log-level debug
 
@@ -73,6 +78,11 @@ write_files:
       [Service]
       Restart=always
       RestartSec=5
+      LimitNOFILE=1048576
+      # Having non-zero Limit*s causes performance problems due to accounting overhead
+      # in the kernel. We recommend using cgroups to do container-local accounting.
+      LimitNPROC=infinity
+      LimitCORE=infinity
       # Point to /home/kubernetes/bin where calico setup cni binary in kube-up.sh.
       # Point to /etc/cni/net.d where calico put cni config in kube-up.sh.
       ExecStart=/home/cri-containerd/usr/local/bin/cri-containerd \