title: How does Kubernetes enforce the memory limit for a container?
body: <p>How does it enforce the limit? Is it via cgroups? Or is there an actual process watching container processes and terminating them?</p>
  
  <p>I seem to have a container process that gets a SIGKILL, but the pod does not get restarted (but the process dies because SIGKILL). So I'm unsure what the cause of it is.</p>