change per denise

This commit is contained in:
Mark Bishop
2018-09-13 11:18:10 -07:00
parent 880ab2c3c0
commit 97bafe4eb7
2 changed files with 7 additions and 55 deletions
@@ -11,7 +11,7 @@ After projects are created, there are certain aspects that can be changed later.
Following project creation, you can add users as project members so that they can access its resources. Following project creation, you can add users as project members so that they can access its resources.
>**SAML Caveats:** >**Ping, Keycloak, and MS FS Caveats:**
> >
>- IdP does not support search or lookup. When adding users to projects, the exact IDs must be entered correctly. >- IdP does not support search or lookup. When adding users to projects, the exact IDs must be entered correctly.
>- When adding users to a project, group IDs are not supported unless the admin who turned on access control is a member of the group. >- When adding users to a project, group IDs are not supported unless the admin who turned on access control is a member of the group.
@@ -1,20 +1,17 @@
--- ---
title: Project Quotas title: Project Quotas
weight: 5000 weight: 5000
draft: true
--- ---
<<<<<<< HEAD
_Project quotas_ are a Rancher feature that limits the resources available to a project. _Available as of v2.1.0_
=======
When you are creating or editing a project, you can configure a _resource quotas_, which is a Rancher feature that limits the resources available to a project and the namespaces within it. When you are creating or editing a project, you can configure a _resource quotas_, which is a Rancher feature that limits the resources available to a project and the namespaces within it.
>>>>>>> 9cf3cfa... adding more content
In situations where several teams share a cluster, one team may overconsume the resources available. To prevent this overconsumption, you can apply a _project quota_, which creates a pool of resources that the project's namespaces can use, resources being things like data or processing power. In situations where several teams share a cluster, one team may overconsume the resources available. To prevent this overconsumption, you can apply a _project quota_, which creates a pool of resources that the project's namespaces can use, resources being things like data or processing power.
## Project Quotas vs. Resource Quotas ## Project Quotas vs. Resource Quotas
<<<<<<< HEAD
Project quotas, a feature exclusive to Rancher, work similarly to the Kubernetes feature, [Resource Quotas](https://kubernetes.io/docs/concepts/policy/resource-quotas/). The following table explains the key differences between the two quota types.
=======
Resource quotas in Rancher work similarly to how they do in the [native version of Kubernetes](https://kubernetes.io/docs/concepts/policy/resource-quotas/). However, Rancher's version of resource quotas have a few key differences from the Kubernetes version. Resource quotas in Rancher work similarly to how they do in the [native version of Kubernetes](https://kubernetes.io/docs/concepts/policy/resource-quotas/). However, Rancher's version of resource quotas have a few key differences from the Kubernetes version.
In a standard Kubernetes deployment, resource quotas are applied to individual namespaces. However, you cannot apply the quota to multiple namespaces with a single action. Instead, the resource quota must be applied each namespace, which can be tedious. The following diagram depict resource quotas in a native Kubernetes deployment. Notice that: In a standard Kubernetes deployment, resource quotas are applied to individual namespaces. However, you cannot apply the quota to multiple namespaces with a single action. Instead, the resource quota must be applied each namespace, which can be tedious. The following diagram depict resource quotas in a native Kubernetes deployment. Notice that:
@@ -47,63 +44,18 @@ The following diagram depict resource quotas in a native Kubernetes deployment.
![Rancher Resource Quota Implementation]({{< baseurl >}}/img/rancher/rancher-resource-quota.svg) ![Rancher Resource Quota Implementation]({{< baseurl >}}/img/rancher/rancher-resource-quota.svg)
The following table explains the key differences between the two quota types. The following table explains the key differences between the two quota types.
>>>>>>> 9cf3cfa... adding more content
Rancher Resource Quotas | Native Kubernetes Resource Quotas
Project Quotas | Resource Quotas
---------|---------- ---------|----------
Applied to projects. | Applied to namespaces. Applied to projects. | Applied to namespaces.
Creates resource pool for all namespaces in project. | Applies static resource limits to individual namespaces. Applies resource limits to the project and all its namespaces. | Applies resource limits to individual namespaces.
Applies resource quotas to namespaces through inheritance. | Apply only to the assigned namespace. Applies resource quotas to namespaces through inheritance. | Apply only to the assigned namespace.
## Project Quota Resource Pool ## Project Quota Resource Pool
<<<<<<< HEAD
When you create a project quota, you are configuring the pool of resources available to the project. You can set limits on resources like:
- Memory
- CPU
- Storage
- Kubernetes Resources (i.e., Secrets)
>**Note:** In the quota, if you set CPU or Memory limit, all containers you create in the namespace must explicitly satisfy the quota. See the [Kubernetes documentation](https://kubernetes.io/docs/concepts/policy/resource-quotas/#requests-vs-limits) for more details.
=======
When you create a resource quota, you are configuring the pool of resources available to the project. You can set limits for a variety of different resources, for both your project and your namespaces. When you create a resource quota, you are configuring the pool of resources available to the project. You can set limits for a variety of different resources, for both your project and your namespaces.
>>>>>>> 9cf3cfa... adding more content
## Quota Templates
When a project quota is in effect, the project assigns each namespace a _quota template_, which is a profile that describes what resources are available to the namespace.
<<<<<<< HEAD
When you create a project, you have the option of assigning each namespace one of three quota templates:
- **Small:** the namespace can access minimal resources.
- **Medium:** the namespace can access adequate resources.
- **Large:** the namespace can access performance resources.
When a project quota is in effect, each namespace must have a quota template assigned to it. You can assign quota templates one of two ways:
- **Inheritance**: Have Rancher apply a quota template automatically.
- **Direct assignment**: Apply the quota template yourself.
## Quota Inheritance
When setting up your project quota, you'll choose a default quota template for the project. Each namespace inherits this quota unless you assign it one directly, which overrides the default. We recommend assigning most quota templates this way.
>**Note:** When you apply a project quota, any resource quotas already applied to the project namespaces are replaced with the default quota template.
## Advantages of Project Quotas
Setting up project quotas instead of resource quotas has benefits:
- **Fewer Resource Quota Applications:** Instead of applying resource quotas to multiple namespaces, you can apply a single project quota to the entire project.
- **Resource Flexibility:** Quota templates allow you to quickly change the resources available for each namespace rather creating a resource quota from scratch.
- **Quota Template Inheritance:** Resource limits are automatically enforced when the namespace inherits a quote template from the project. Additionally, as new namespaces are created and deleted, the default quota template is automatically applied.
=======
### Namespace Default Limit Overrides ### Namespace Default Limit Overrides
Although each namespace in a project inherits the **Namespace Default Limit**, you can also override this setting for specific namespaces that require additional (or fewer) resources. Although each namespace in a project inherits the **Namespace Default Limit**, you can also override this setting for specific namespaces that require additional (or fewer) resources.
>>>>>>> 9cf3cfa... adding more content