Merge pull request #790 from MBishop17/quotas

Quotas

content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/editing-projects/_index.md

@@ -11,7 +11,7 @@ After projects are created, there are certain aspects that can be changed later.
 
 Following project creation, you can add users as project members so that they can access its resources.
 
->**Ping and MS FS Caveats:**
+>**Ping, Keycloak, and MS FS Caveats:**
 >
 >- IdP does not support search or lookup. When adding users to projects, the exact IDs must be entered correctly.
 >- When adding users to a project, group IDs are not supported unless the admin who turned on access control is a member of the group.

content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/project-quotas/_index.md

@@ -0,0 +1,61 @@
+---
+title: Project Quotas
+weight: 5000
+draft: true
+---
+
+_Available as of v2.1.0_
+
+When you are creating or editing a project, you can configure a _resource quotas_, which is a Rancher feature that limits the resources available to a project and the namespaces within it.
+
+In situations where several teams share a cluster, one team may overconsume the resources available. To prevent this overconsumption, you can apply a _project quota_, which creates a pool of resources that the project's namespaces can use, resources being things like data or processing power.
+
+## Project Quotas vs. Resource Quotas
+
+Resource quotas in Rancher work similarly to how they do in the [native version of Kubernetes](https://kubernetes.io/docs/concepts/policy/resource-quotas/). However, Rancher's version of resource quotas have a few key differences from the Kubernetes version. 
+
+In a standard Kubernetes deployment, resource quotas are applied to individual namespaces. However, you cannot apply the quota to multiple namespaces with a single action. Instead, the resource quota must be applied each namespace, which can be tedious. The following diagram depict resource quotas in a native Kubernetes deployment. Notice that:
+
+- Resource quotas apply only to namespaces they are directly assigned to.
+- Quotas are applied to individual namespaces, rather than collectively.
+
+<sup>Native Kubernetes Resource Quota Implementation Example</sup>
+![Native Kubernetes Resource Quota Implementation]({{< baseurl >}}/img/rancher/kubernetes-resource-quota.svg)
+
+In Rancher's implementation of resource quotas, the quota is applied to a [project]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#projects) instead. The resource quota includes two limits:
+
+- **Project Limits:**
+
+    This set of values is the overall limit for the project. When the overall limit for the project is exceeded, Kubernetes uses logic to determine which namespaces to stop to get back under the quota.
+
+- **Namespace Default Limits:**
+
+    This value is the default resource limit that an individual namespace inherits from the project. If an individual namespace exceeds its namespace limit, Kubernetes stops anything objects in the namespace from operating.
+
+    Each namespace inherits this default limit unless you [override it](#namespace-default-limit-overrides).
+
+The following diagram depict resource quotas in a native Kubernetes deployment. Notice that:
+
+- The resource quota is applied to the entire project.
+- The project limit sets what resources are available for the entire project.
+- Each namespace in the project inherits namespace default limit, which sets the cap for resources available for each individual namespace. You don't have to apply it to each namespace.
+
+<sup>Rancher Resource Quota Implementation Example</sup>
+![Rancher Resource Quota Implementation]({{< baseurl >}}/img/rancher/rancher-resource-quota.svg)
+    
+The following table explains the key differences between the two quota types.
+
+Rancher Resource Quotas | Native Kubernetes Resource Quotas 
+---------|----------
+ Applied to projects. | Applied to namespaces. 
+ Applies resource limits to the project and all its namespaces. | Applies resource limits to individual namespaces. 
+ Applies resource quotas to namespaces through inheritance. | Apply only to the assigned namespace.
+
+## Project Quota Resource Pool
+
+When you create a resource quota, you are configuring the pool of resources available to the project. You can set limits for a variety of different resources, for both your project and your namespaces.
+
+
+### Namespace Default Limit Overrides
+
+Although each namespace in a project inherits the **Namespace Default Limit**, you can also override this setting for specific namespaces that require additional (or fewer) resources.

src/diagrams/kubernetes-resource-quota.xml

@@ -0,0 +1 @@
+<mxfile userAgent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" version="9.1.3" editor="www.draw.io" type="device"><diagram id="e390a0ea-10c4-4c32-dbd2-2c5d3ea7f96f" name="Page-1">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</diagram></mxfile>

src/diagrams/rancher-resource-quota.xml

@@ -0,0 +1 @@
+<mxfile userAgent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" version="9.1.3" editor="www.draw.io" type="device"><diagram id="e390a0ea-10c4-4c32-dbd2-2c5d3ea7f96f" name="Page-1">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</diagram></mxfile>