From c3d204af8ad6b796c0e6c212f9d11b93a8c90fe8 Mon Sep 17 00:00:00 2001 From: Jonas Mai Date: Tue, 1 Dec 2020 20:27:42 +0100 Subject: [PATCH] changes the pod requests and limits example policy, indicating that configuring memory limits is recommended --- samples/RequirePodRequestsLimits.md | 2 +- samples/best_practices/require_pod_requests_limits.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/samples/RequirePodRequestsLimits.md b/samples/RequirePodRequestsLimits.md index 0912ec065903..a5e3019d4b95 100644 --- a/samples/RequirePodRequestsLimits.md +++ b/samples/RequirePodRequestsLimits.md @@ -1,6 +1,6 @@ # Require pod resource requests and limits -Application workloads share cluster resources. Hence, it is important to manage resources assigned to each pod. It is recommended that `resources.requests` and `resources.limits` are configured per pod and include CPU and memory resources. Other resources such as GPUs may also be specified as needed. +Application workloads share cluster resources. Hence, it is important to manage resources assigned to each pod. It is recommended that `resources.requests.cpu`, `resources.requests.memory` and `resources.limits.memory` are configured per pod. Other resources such as GPUs may also be specified as needed. If a namespace level request or limit is specified, defaults will automatically be applied to each pod based on the `LimitRange` configuration. diff --git a/samples/best_practices/require_pod_requests_limits.yaml b/samples/best_practices/require_pod_requests_limits.yaml index 721a1960fea1..0940f454b2e2 100644 --- a/samples/best_practices/require_pod_requests_limits.yaml +++ b/samples/best_practices/require_pod_requests_limits.yaml @@ -6,7 +6,7 @@ metadata: policies.kyverno.io/category: Workload Management policies.kyverno.io/description: As application workloads share cluster resources, it is important to limit resources requested and consumed by each pod. It is recommended to require - 'resources.requests' and 'resources.limits' per pod. If a namespace level request or limit is + 'resources.requests' and 'resources.limits.memory' per pod. If a namespace level request or limit is specified, defaults will automatically be applied to each pod based on the 'LimitRange' configuration. spec: validationFailureAction: audit