diff --git a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/_index.md b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/_index.md index fd379c81c4b..8b9a98b27e2 100644 --- a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/_index.md +++ b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/_index.md @@ -89,7 +89,7 @@ Rancher extends Kubernetes to allow the application of [Pod Security Policies](h 1. **Recommended:** Add project members. - Use the **Members** accordion to provide other users with project access and roles. + Use the **Members** section to provide other users with project access and roles. By default, your user is added as the project `Owner`. @@ -106,6 +106,24 @@ Rancher extends Kubernetes to allow the application of [Pod Security Policies](h >**Tip:** Choose Custom to create a custom role on the fly: [Custom Project Roles]({{< baseurl >}}/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/#custom-project-roles). 1. To add more members, repeat substeps a—c. + +1. **Optional:** Add **Resource Quotas**, which limit the resources that a project (and its namespaces) can consume. For more information, see [Resource Quotas]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas). + + >**Note:** This option is only available in v2.1.0 and later. + + 1. Click **Add Quota**. + + 1. Select a [Resource Type]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/#resource-quota-types). + + 1. Enter values for the **Project Limit** and the **Namespace Default Limit**. + + | Field | Description | + | ----------------------- | -------------------------------------------------------------------------------------------------------- | + | Project Limit | The overall resource limit for the project. | + | Namespace Default Limit | The default resource limit available for each namespace. This limit is propagated to each namespace in the project. The combined limit of all project namespaces shouldn't exceed the project limit. | + + 1. **Optional:** Repeat these substeps to add more quotas. + 1. Click **Create**. @@ -153,6 +171,8 @@ Create a new namespace to isolate apps and resources in a project. 1. From the main menu, select **Namespace**. The click **Add Namespace**. +1. **Optional:** If your project has [Resource Quotas]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas) in effect, you can override the default resource **Limits** (which places a cap on the resources that the namespace can consume). + 1. Enter a **Name** and then click **Create**. **Result:** Your namespace is added to the project. You can begin assigning cluster resources to the namespace. @@ -167,8 +187,33 @@ Cluster admins and members may occasionally need to move a namespace to another 1. Select the namespace(s) that you want to move to a different project. Then click **Move**. You can move multiple namespaces at one. - >**Note:** Don't move the namespaces in the `System` project. Moving these namespaces can adversely affect cluster networking. + >**Notes:** + > + >- Don't move the namespaces in the `System` project. Moving these namespaces can adversely affect cluster networking. + >- You cannot move a namespace into a project that already has a [resource quota]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/) configured. + >- If you move a namespace from a project that has a quota set to a project with no quota set, the quota is removed from the namespace. 1. Choose a new project for the new namespace and then click **Move**. Alternatively, you can remove the namespace from all projects by selecting **None**. -**Result:** Your namespace is moved to a different project (or is unattached from all projects). If any project resources are attached to the namespace, the namespace releases them and then attached resources from the new project. +**Result:** Your namespace is moved to a different project (or is unattached from all projects). If any project resources are attached to the namespace, the namespace releases them and then attached resources from the new project. + +### Editing Namespace Resource Quotas + +If there is a [resource quota]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas) configured for a project, you can override the namespace default limit to provide a specific namespace with access to more (or less) project resources. + +1. From the **Global** view, open the cluster that contains the namespace for which you want to edit the resource quota. + +1. From the main menu, select **Projects/Namespaces**. + +1. Find the namespace for which you want to edit the resource quota. Select **Ellipsis (...) > Edit**. + +1. Edit the Resource Quota **Limits**. These limits determine the resources available to the namespace. The limits must be set within the configured [project limits]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/#project-limits). + + For more information about each **Resource Type**, see [Resource Quota Types]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/#resource-quota-types). + + >**Note:** + > + >- If a resource quota is not configured for the project, these options will not be available. + >- If you enter limits that exceed the configured project limits, Rancher will not let you save your edits. + +**Result:** The namespace's default resource quota is overwritten with your override. diff --git a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/editing-projects/_index.md b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/editing-projects/_index.md index 7050abbbf7b..80528c29e41 100644 --- a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/editing-projects/_index.md +++ b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/editing-projects/_index.md @@ -69,13 +69,40 @@ You can always assign a PSP to an existing project if you didn't assign one duri - Apply the PSP to the project. - Apply the PSP to any namespaces you add to the project later. - >**Prerequisites:** - > - > - Create a Pod Security Policy within Rancher. Before you can assign a default PSP to a new project, you must have a PSP available for assignment. For instruction, see [Creating Pod Security Policies]({{< baseurl >}}/rancher/v2.x/en/admin-settings/pod-security-policies/). - > - Assign a default Pod Security Policy to the project's cluster. You can't assign a PSP to a project until one is already applied to the cluster. - 5. Click **Save**. **Result:** The PSP is applied to the project and any namespaces added to the project. >**Note:** Any workloads that are already running in a cluster or project before a PSP is assigned will not be checked if it complies with the PSP. Workloads would need to be cloned or upgraded to see if they pass the PSP. + +## Editing Resource Quotas + +_Available as of v2.0.1_ + +Edit [resource quotas]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas) when: + +- You want to limit the resources that a project and its namespaces can use. +- You want to scale the resources available to a project up or down when a research quota is already in effect. + +1. From the **Global** view, open the cluster containing the project to which you want to apply a resource quota. + +1. From the main menu, select **Projects/Namespaces**. + +1. Find the project that you want to add a resource quota to. From that project, select **Ellipsis (...) > Edit**. + +1. Expand **Resource Quotas** and click **Add Quota**. Alternatively, you can edit existing quotas. + +1. Select a [Resource Type]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/#resource-quota-types). + +1. Enter values for the **Project Limit** and the **Namespace Default Limit**. + + | Field | Description | + | ----------------------- | -------------------------------------------------------------------------------------------------------- | + | Project Limit | The overall resource limit for the project. | + | Namespace Default Limit | The default resource limit available for each namespace. This limit is propagated to each namespace in the project. The combined limit of all project namespaces shouldn't exceed the project limit. | + +1. **Optional:** Add more quotas. + +1. Click **Create**. + +**Result:** The resource quota is applied to your project and namespaces. When you add more namespaces in the future, Rancher validates that the project can accommodate the namespace. If the project can't allocate the resources, Rancher won't let you save your changes. \ No newline at end of file diff --git a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/project-quotas/_index.md b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/project-quotas/_index.md deleted file mode 100644 index f15455ffad9..00000000000 --- a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/project-quotas/_index.md +++ /dev/null @@ -1,62 +0,0 @@ ---- -title: Project Quotas -weight: 5000 -draft: true ---- - -_Available as of v2.1.0_ - -When you are creating or editing a project, you can configure a _resource quotas_, which is a Rancher feature that limits the resources available to a project and the namespaces within it. - -In situations where several teams share a cluster, one team may overconsume the resources available. To prevent this overconsumption, you can apply a _project quota_, which creates a pool of resources that the project's namespaces can use, resources being things like data or processing power. - -## Rancher Resource Quotas vs. Native Kubernetes Resource Quotas - -Resource quotas in Rancher work similarly to how they do in the [native version of Kubernetes](https://kubernetes.io/docs/concepts/policy/resource-quotas/). However, Rancher's version of resource quotas have a few key differences from the Kubernetes version. - -In a standard Kubernetes deployment, resource quotas are applied to individual namespaces. However, you cannot apply the quota to multiple namespaces with a single action. Instead, the resource quota must be applied each namespace, which can be tedious. The following diagram depict resource quotas in a native Kubernetes deployment. Notice that: - -- Resource quotas apply only to namespaces they are directly assigned to. -- Quotas are applied to individual namespaces, rather than collectively. Even though each quota sets the same limits, a unique quota is applied to each namespace. - -![Native Kubernetes Resource Quota Implementation]({{< baseurl >}}/img/rancher/kubernetes-resource-quota.svg) -Native Kubernetes Resource Quota Implementation Example - - -In Rancher's implementation of resource quotas, the quota is applied to a [project]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#projects) instead. The resource quota includes two limits: - -- **Project Limits:** - - This set of values is the overall limit for the project. When the overall limit for the project is exceeded, Kubernetes uses logic to determine which namespaces to stop to get back under the quota. - -- **Namespace Default Limits:** - - This value is the default resource limit that an individual namespace inherits from the project. If an individual namespace exceeds its namespace limit, Kubernetes stops anything objects in the namespace from operating. - - Each namespace inherits this default limit unless you [override it](#namespace-default-limit-overrides). - -The following diagram depict resource quotas in a native Kubernetes deployment. Notice that: - -- The resource quota is applied to the entire project. -- The project limit sets what resources are available for the entire project. -- Each namespace in the project inherits the namespace default limit, which sets the cap for resources available for each individual namespace. The same namespace default limit is automatically applied to each namespace. - -![Rancher Resource Quota Implementation]({{< baseurl >}}/img/rancher/rancher-resource-quota.svg) -Rancher Resource Quota Implementation Example - - -The following table explains the key differences between the two quota types. - -Rancher Resource Quotas | Native Kubernetes Resource Quotas ----------|---------- - Applied to projects. | Applied to namespaces. - Applies resource limits to the project and all its namespaces. | Applies resource limits to individual namespaces. - Applies resource quotas to namespaces through inheritance. | Apply only to the assigned namespace. - -## Resource Quota Types - -When you create a resource quota, you are configuring the pool of resources available to the project. You can set limits for a variety of different resources, for both your project and your namespaces. - -### Namespace Default Limit Overrides - -Although each namespace in a project inherits the **Namespace Default Limit**, you can also override this setting for specific namespaces that require additional (or fewer) resources. diff --git a/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/_index.md b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/_index.md new file mode 100644 index 00000000000..e52816e8a94 --- /dev/null +++ b/content/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/resource-quotas/_index.md @@ -0,0 +1,89 @@ +--- +title: Resource Quotas +weight: 5000 +draft: true +--- + +_Available as of v2.1.0_ + +In situations where several teams share a cluster, one team may overconsume the resources available: CPU, memory, storage, services, Kubernetes objects like pods or secrets, and so on. To prevent this overconsumption, you can apply a _resource quota_, which is a Rancher feature that limits the resources available to a project or namespace. + +## Resource Quotas in Rancher + +Resource quotas in Rancher include the same functionality as the [native version of Kubernetes](https://kubernetes.io/docs/concepts/policy/resource-quotas/). However, in Rancher, resource quotas have been extended so that you can apply them to [projects]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#projects). + +In a standard Kubernetes deployment, resource quotas are applied to individual namespaces. However, you cannot apply the quota to your namespaces simultaneously with a single action. Instead, the resource quota must be applied multiple times. + +In the following diagram, a Kubernetes admin is trying to enforce a resource quota without Rancher. The admin wants to apply a resource quota that sets the same CPU and memory limit to every namespace in his cluster (`Namespace 1-4`) . However, in the base version of Kubernetes, each namespace requires a unique resource quota. The admin has to create four different resource quotas that have the same specs configured (`Resource Quota 1-4`) and apply them individually. + +Base Kubernetes: Unique Resource Quotas Being Applied to Each Namespace +![Native Kubernetes Resource Quota Implementation]({{< baseurl >}}/img/rancher/kubernetes-resource-quota.svg) + +Resource quotas are a little different in Rancher. In Rancher, you apply a resource quota to the [project]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#projects), and then the quota propagates to each namespace, whereafter Kubernetes enforces you limits using the native version of resource quotas. If you want to change the quota for a specific namespace, you can [override it](#namespace-default-limit-overrides). + +The resource quota includes two limits, which you set while creating or editing a project: + + +- **Project Limits:** + + This set of values configures an overall resource limit for the project. If you try to add a new namespace to the project, Rancher uses the limits you've set to validate that the project has enough resources to accommodate the namespace. In other words, if you try to add a namespace to a project near its resource quota, Rancher blocks you from adding the namespace. + +- **Namespace Default Limits:** + + This value is the default resource limit available for each namespace. The project propagates the limit to each namespace. Each namespace is bound to this default limit unless you [override it](#namespace-default-limit-overrides). + + +In the following diagram, a Rancher admin wants to apply a resource quota that sets the same CPU and memory limit for every namespace in their project (`Namespace 1-4`). However, in Rancher, the admin can set a resource quota for the project (`Project Resource Quota`) rather than individual namespaces. This quota includes resource limits for both the entire project (`Project Limit`) and individual namespaces (`Namespace Default Limit`). Rancher then propagates this quota to each namespace (`Namespace Resource Quota`). + +Rancher: Resource Quotas Propagating to Each Namespace +![Rancher Resource Quota Implementation]({{< baseurl >}}/img/rancher/rancher-resource-quota.svg) + +The following table explains the key differences between the two quota types. + +| Rancher Resource Quotas | Kubernetes Resource Quotas | +| ---------------------------------------------------------- | -------------------------------------------------------- | +| Applies to projects and namespace. | Applies to namespaces only. | +| Creates resource pool for all namespaces in project. | Applies static resource limits to individual namespaces. | +| Applies resource quotas to namespaces through propagation. | Applies only to the assigned namespace. + + +## Creating Resource Quotas + +You can create resource quotas in the following contexts: + +- [While creating projects]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#creating-projects) +- [While editing projects]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/editing-projects/#editing-resource-quotas) + +## Resource Quota Types + +When you create a resource quota, you are configuring the pool of resources available to the project. You can set the following resource limits for the following resource types. + +| Resource Type | Description | +| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| CPU Limit | The maximum amount of CPU (in [millicores](https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#meaning-of-cpu)) allocated to the project/namespace.1 | +| CPU Reservation | The minimum amount of CPU (in millicores) guaranteed to the project/namespace.1 | +| Memory Limit | The maximum amount of memory (in bytes) allocated to the project/namespace.1 | +| Memory Reservation | The minimum amount of memory (in bytes) guaranteed to the project/namespace.1 | +| Storage Reservation | The minimum amount of storage (in gigabytes) guaranteed to the project/namespace. | +| Services Load Balancers | The maximum number of load balancers services that can exist in the project/namespace. | +| Services Node Ports | The maximum number of node port services that can exist in the project/namespace. | +| Pods | The maximum number of pods that can exist in the project/namespace in a non-terminal state (i.e., pods with a state of `.status.phase in (Failed, Succeeded)` equal to true). | +| Services | The maximum number of services that can exist in the project/namespace. | +| ConfigMaps | The maximum number of ConfigMaps that can exist in the project/namespace. | +| Persistent Volume Claims | The maximum number of persistent volume claims that can exist in the project/namespace. | +| Replications Controllers | The maximum number of replication controllers that can exist in the project/namespace. | +| Secrets | The maximum number of secrets that can exist in the project/namespace. | + +>**1** In the quota, if you set CPU or Memory limits, all containers you create in the project / namespace must explicitly satisfy the quota. See the [Kubernetes documentation](https://kubernetes.io/docs/concepts/policy/resource-quotas/#requests-vs-limits) for more details. + + +### Overriding the Default Limit for a Namespace + +Although the **Namespace Default Limit** propagates from the project to each namespace, in some cases, you may need to increase (or decrease) the performance for a specific namespace. In this situation, you can override the default limits by editing the namespace. + +In the diagram below, the Rancher admin has a resource quota in effect for their project. However, the admin wants to override the namespace limits for `Namespace 3` so that it performs better. Therefore, the admin [raises the namespace limits]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#editing-namespace-resource-quotas) for `Namespace 3` so that the namespace can access more resources. + +Namespace Default Limit Override +![Namespace Default Limit Override]({{< baseurl >}}/img/rancher/rancher-resource-quota-override.svg) + +How to: [Editing Namespace Resource Quotas]({{< baseurl >}}/rancher/v2.x/en/k8s-in-rancher/projects-and-namespaces/#editing-namespace-resource-quotas) \ No newline at end of file diff --git a/src/diagrams/kubernetes-resource-quota.xml b/src/diagrams/kubernetes-resource-quota.xml index 74e8832e14d..239a955bf3c 100644 --- a/src/diagrams/kubernetes-resource-quota.xml +++ b/src/diagrams/kubernetes-resource-quota.xml @@ -1 +1 @@ -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 \ No newline at end of file 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 \ No newline at end of file diff --git a/src/diagrams/rancher-resource-quota-override.xml b/src/diagrams/rancher-resource-quota-override.xml new file mode 100644 index 00000000000..695b82cd296 --- /dev/null +++ b/src/diagrams/rancher-resource-quota-override.xml @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/src/diagrams/rancher-resource-quota.xml b/src/diagrams/rancher-resource-quota.xml index daf6dc25e97..0a563a179e1 100644 --- a/src/diagrams/rancher-resource-quota.xml +++ b/src/diagrams/rancher-resource-quota.xml @@ -1 +1 @@ -7Zvdd6I4FMD/Gh9nDiSg8FhtO/Mw3dOdnjk78xglamYCYTFWu3/9JhDAQFBU/Oip7UPh5ovc/O5NbpL24Chcf0lQPH9iAaY9YAXrHrzvAWD3nYH4IyVvhQRmkllCAiUrBS/kP6yElpIuSYAXWkbOGOUk1oUTFkV4wjUZShK20rNNGdVbjdEM1wQvE0Tr0n9IwOeZ1HOtUv4Vk9k8b9m2VMoYTf7MEraMVHs9AKfpT5YcorwulX8xRwFbbYjgQw+OEsZ49hSuR5hK5eZqy8o9NqQW353giLcpALICr4gucf7FfSqKDgPyKr+Pvymd9P9dyo8acrzmnxAls6gH7+QQiJZwIh5EWqrqiH9apAMqU20vXpdlxdNM/U3bkJnTUaQs0RoRaoOB/K2X/Y6iyTxtcESXi7TprDLRyaw+vQ0hTruSS4HWK5COFZbasEXyak44fonRRKauBNxCNuchVcnFaMmXCQvJRDzLji94wv7gUdEPOPBG/uixSMkhArLThNKNnJY1cO88IVc6vVcKhcNXnHAimLxTCZzFSmePKCRU2lbM4phEAvYhRWNMhwV9eQMRi0RXhkx0iXBZAlqFFjYpUeDIJvF6Q6So+YJZiHnyJrKsSntwfUXxfMMW3BxtpGxwVpQtORQPCkUzlvAdY/mcsN/SJ92wPCeWKhW6WQk18eQOexNaYIDWgR1Aaw8M1FbGVaohbt/PYoZD47wGa3v/844oBYj+1jRge6CuAdtyj9eA32i2JhPYZmZ4MrWmdt3M/kIhXqSGACyww8TGicHo9Ixbre7EFgYdx3cfqqaTsDHjTEk3c9vy12SPswQFBJeZlW0ZIBs0UFanKafHAI9jMB+vC+txD4CnDkV98O/xFC2pJO0bCckuv3wsNBdw1cpW2oKUY1cD6ShiVKpfJ8YbGBYJXQDjXZ+7LeKAs7hbkwJO527tm7vdz916DZRdh7vt39zt1bnb9sSc393my+ZGYAxBWTXqAqao6ztesGWS0vS3SEFp3g/GgjmmapylanNZIyB9T5uffNswPRk8DOgkHmoOB/aN4psideGGolbk2SbyikhduSoNvKzq7UF7t50x+sIj2qN4yhs3QIwK0dVqXD4cqOrR8w9NzRaw5FLJEhZDidzLe/6x2L1j0v2YXJOOnnDIUtvV1OQIC7aeSPP8uJd2PqIDPWpDKZ9O8wU+NCzwT7VGK762XYTTOpzZZwKpRjjQBZ/PuaW05YTiFEEOvAU5O4OcHQuSKwpytpwj3IKcMwY5BxJzgSDHubzHHVzY4R6yD3u4w3VuDvdoh+tcj8O97Sq9C4fbQMwFNvFbLHGFumP5OKV4fScv9+ijUVGk7yOIvC22h9eE/1Rl5fMvOXjCxYq3SHz9TzWW6UuZpo158xipq0w22JOG9rvKSj3Zllk2YWQijpIZVrnUzgsOtGtO2y9zmO5yKFmCKeLkFWufYBp21cIzI+mssM6XYXoQBQZ9vYqsN6pUCU+tIuhUjlu8yoSX6aBWUUph0e12YJq2O29gHgumd11gOo4OZr/i0tqCCfxKRXalou7ABC1umXx4MCt8HUJqptaLkekCDSjh+T5XfF1rp+nqd6Jg36lW1SGdLQ7lL0Bn+forX6q9czrdS9JpV+Zh4B/qN/N74aoixwGnItPkNrvYte+mlv2in/Kgqh7p1CX7nYW0Oe+onea42w5z2p/aNIRz3XegctQiRsWSMVHlnOVUx03HHgB+mGD2XKc6xb7FCfZIxGv57xyZ3yr/aQY+/A8= \ No newline at end of file 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 \ No newline at end of file diff --git a/src/img/rancher/kubernetes-resource-quota.svg b/src/img/rancher/kubernetes-resource-quota.svg index de8b3b67ede..c390ecb3e61 100644 --- a/src/img/rancher/kubernetes-resource-quota.svg +++ b/src/img/rancher/kubernetes-resource-quota.svg @@ -1,2 +1,2 @@ -
Native Kubernetes Cluster
[Not supported by viewer]
Namespace 1
[Not supported by viewer]
Resource Quota 1:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Namespace 2
[Not supported by viewer]
Resource Quota 2:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Namespace 4
[Not supported by viewer]
Resource Quota 4:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Namespace 3
[Not supported by viewer]
Resource Quota 3:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
\ No newline at end of file +
Native Kubernetes Cluster
[Not supported by viewer]
Namespace 1
[Not supported by viewer]
Resource Quota 1:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Namespace 2
[Not supported by viewer]
Resource Quota 2:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Namespace 4
[Not supported by viewer]
Resource Quota 4:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Namespace 3
[Not supported by viewer]
Resource Quota 3:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Kubernetes Admin applies 
unique resource quotas to each namespace.
[Not supported by viewer]
\ No newline at end of file diff --git a/src/img/rancher/rancher-resource-quota-override.svg b/src/img/rancher/rancher-resource-quota-override.svg new file mode 100644 index 00000000000..2f3c17c4eb9 --- /dev/null +++ b/src/img/rancher/rancher-resource-quota-override.svg @@ -0,0 +1,2 @@ + +
Rancher Cluster
[Not supported by viewer]
Rancher Project
[Not supported by viewer]
Namespace 2
[Not supported by viewer]
Namespace Resource Quota
[Not supported by viewer]
Namespace 1
[Not supported by viewer]
Namespace
Resource 
Quota
[Not supported by viewer]
Project
Resource Quota:
[Not supported by viewer]
Project Limit:

CPU Limit: 2000 milli CPUs
Memory Limit: 2048 MiB
[Not supported by viewer]
Namespace 3
[Not supported by viewer]
Namespace Resource Quota
[Not supported by viewer]
+
[Not supported by viewer]
Namespace 4
[Not supported by viewer]
Namespace Resource Quota
[Not supported by viewer]
Namespace
Default Limit:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Rancher Admin overrides Namespace Default Limit.
<span style="background-color: rgb(255 , 255 , 255)">Rancher Admin overrides Namespace Default Limit.</span><br>
Namespace Resource Quota Override
[Not supported by viewer]
\ No newline at end of file diff --git a/src/img/rancher/rancher-resource-quota.svg b/src/img/rancher/rancher-resource-quota.svg index 2db02773f6d..80b3d4203e8 100644 --- a/src/img/rancher/rancher-resource-quota.svg +++ b/src/img/rancher/rancher-resource-quota.svg @@ -1,2 +1,2 @@ -
Rancher Cluster
[Not supported by viewer]
Rancher Project
[Not supported by viewer]
Namespace 2
[Not supported by viewer]
Namespace
Default Limit

[Not supported by viewer]
Namespace 1
[Not supported by viewer]
Namespace
Default Limit

[Not supported by viewer]
Resource Quota:
[Not supported by viewer]
Project Limit:

CPU Limit: 2000 milli CPUs
Memory Limit: 2048 MiB
[Not supported by viewer]
Namespace 3
[Not supported by viewer]
Namespace
Default Limit

[Not supported by viewer]
Namespace 4
[Not supported by viewer]
Namespace
Default Limit

[Not supported by viewer]
Namespace
Default Limit:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
\ No newline at end of file +
Rancher Cluster
[Not supported by viewer]
Rancher Project
[Not supported by viewer]
Namespace 2
[Not supported by viewer]
Namespace Resource Quota
[Not supported by viewer]
Namespace 1
[Not supported by viewer]
Namespace
Resource 
Quota
[Not supported by viewer]
Project
Resource Quota:
[Not supported by viewer]
Project Limit:

CPU Limit: 2000 milli CPUs
Memory Limit: 2048 MiB
[Not supported by viewer]
Namespace 3
[Not supported by viewer]
Namespace Resource Quota
[Not supported by viewer]
Namespace 4
[Not supported by viewer]
Namespace Resource Quota
[Not supported by viewer]
Namespace
Default Limit:

CPU Limit: 500 milli CPUs
Memory Limit 1024 MiB

[Not supported by viewer]
Rancher Admin creates Project Resource Quota. 
Resource quota propagates to namespaces.
Rancher Admin creates Project Resource Quota. <br>Resource quota propagates to namespaces.<br>
\ No newline at end of file