This is exactly the reason for the default 10% buffer between what we tell seastar it can have, and what we request for the cgroup with K8s. In one case we saw

This is exactly the reason for the default 10% buffer between what we tell seastar it can have, and what we request for the cgroup with K8s. In one case we saw that the kernel was unable to allocate a TCP buffer, so it decided to OOMKill Redpanda.