851ef58fa8
* Official documentation on Poseidon/Firmament, a new multi-scheduler support for K8S. (#11752)
* Added documentation about Poseidon-Firmament scheduler
* Fixed some style issues.
* Udpated the document as per the review comments.
* Fixed some typos and updated the document
* Updated the document as per the review comments.
* Document timeout attribute for kms-plugin. (#12158)
See 72540.
* Official documentation on Poseidon/Firmament, a new multi-scheduler (#12343)
* Removed the old version of the Poseidon documentation. Incorrect location.
* Official documentation on Poseidon/Firmament, a new multi-scheduler support for K8S (#12069)
* Official documentation on Poseidon/Firmament, a new multi-scheduler support for K8S. (#11752)
* Added documentation about Poseidon-Firmament scheduler
* Fixed some style issues.
* Udpated the document as per the review comments.
* Fixed some typos and updated the document
* Updated the document as per the review comments.
* Updated the document as per review comments. Added config details.
* Updated the document as per the latest review comments. Fixed nits
* Made changes as per latest suggestions.
* Some more changes added.
* Updated as per suggestions.
* Changed the release process section.
* SIG Docs edits
Small edits to match style guidelines.
* add plus to feature state
* capitalization
* revert feature state shortcode
since this is a Kubernetes extension, not a direct feature, it shouldn't use the regular feature state tagging.
(cherry picked from commit 7730c1540b)
* Remove initializers from doc. It will be removed in 1.14 (#12331)
* kubeadm: Document CRI auto detection functionality (#12462)
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
* Minor doc change for GAing Pod DNS Config (#12514)
* Graduate ExpandInUsePersistentVolumes feature to beta (#10574)
* Rename 2018-11-07-grpc-load-balancing-with-linkerd.md.md file (#12594)
* Add dynamic percentage of node scoring to user docs (#12235)
* Add dynamic percentage of node scoring to user docs
* addressed review comments
* delete special symbol (#12445)
* Update documentation for VolumeSubpathEnvExpansion (#11843)
* Update documentation for VolumeSubpathEnvExpansion
* Address comments - improve descriptions
* Graduate Pod Priority and Preemption to GA (#12428)
* Added Instana links to the documentation (#12977)
* Added link to the Instana Kubernetes integration
* Added Instana link for services section
Added Instana and a link to the Kubernetes integration to the analytics services section and broadened the scope to APM, monitoring and analytics.
* Oxford comma /flex
* More Oxford commas, because they matter
* Update kubectl plugins to stable (#12847)
* documentation for CSI topology beta (#12889)
* Document changes to default RBAC discovery ClusterRole(Binding)s (#12888)
* Document changes to default RBAC discovery ClusterRole(Binding)s
Documentation for https://github.com/kubernetes/enhancements/issues/789 and https://github.com/kubernetes/kubernetes/pull/73807
* documentation review feedback
* CSI raw block to beta (#12931)
* Change incorrect string raw to block (#12926)
Fixes #12925
* Update documentation on node OS/arch labels (#12976)
These labels have been promoted to GA:
https://github.com/kubernetes/enhancements/issues/793
* local pv GA doc updates (#12915)
* Publish CRD OpenAPI Documentation (#12910)
* add documentation for CustomResourcePublishOpenAPI
* address comments
fix links, ordered lists, style and typo
* kubeadm: add document for upgrading from 1.13 to 1.14 (single CP and HA) (#13189)
* kubeadm: add document for upgrading from 1.13 to 1.14
- remove doc for upgrading 1.10 -> 1.11
* kubeadm: apply amends to upgrade-1.14 doc
* kubeadm: apply amends to upgrade-1.14 doc (part2)
* kubeadm: apply amends to upgrade-1.14 doc (part3)
* kubeadm: add note about "upgrade node experimental-control-plane"
+ add comment about `upgrade plan`
* kubeadm: add missing "You should see output similar to this"
* fix bullet indentation (#13214)
* mark PodReadinessGate GA (#12800)
* Update RuntimeClass documentation for beta (#13043)
* Update RuntimeClass documentation for beta
* Update feature gate & add upgrade section
* formatting fixes
* Highlight upgrade action required
* Address feedback
* CSI ephemeral volume alpha documentation (#10934)
* update kubectl documentation (#12867)
* update kubectl documentation
* add document for Secret/ConfigMap generators
* replace `kubectl create -f` by `kubectl apply -f`
* Add page for kustomization support in kubectl
* fix spelling errors and address comments
* Documentation for Windows GMSA feature (#12936)
* Documentation for Windows GMSA feature
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Enhancements to GMSA docs
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Fix links
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Fix GMSA link
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Add GMSA feature flag in feature flag list
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Relocate GMSA to container configuration
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Add example for container spec
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Remove changes in Windows index
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Update configure-gmsa.md
* Update configure-gmsa.md
* Update configure-gmsa.md
* Update configure-gmsa.md
* Rearrange the steps into two sections and other edits
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Fix links
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Add reference to script to generate GMSA YAMLs
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Some more clarifications for GMSA
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* HugePages graduated to GA (#13004)
* HugePages graduated to GA
* fixing nit for build
* Docs for node PID limiting (https://github.com/kubernetes/kubernetes/pull/73651) (#12932)
* kubeadm: update the reference documentation for 1.14 (#12911)
* kubeadm: update list of generated files for 1.14
NOTE: PLACEHOLDERS! these files are generated by SIG Docs each
release, but we need them to pass the k/website PR CI.
- add join_phase* (new sub phases of join)
- add init_phase_upload-certs.md (new upload certs phase for init)
- remove alpha-preflight (now both init and join have this)
* kubeadm: update reference docs includes for 1.14
- remove includes from alpha.md
- add upload-certs to init-phase.md
- add join-phase.md and it's phases
* kubeadm: update the editorial content of join and init
- cleanup master->control-plane node
- add some notes about phases and join
- remove table about pre-pulling images
- remove outdated info about self-hosting
* kubeadm: update target release for v1alpha3 removal
1.14 -> 1.15
* kubeadm: copy edits for 1.14 reference docs (part1)
* kubeadm: use "shell" for code blocks
* kubeadm: update the 1.14 HA guide (#13191)
* kubeadm: update the 1.14 HA guide
* kubeadm: try to fix note/caution indent in HA page
* kubeadm: fix missing sudo and minor amends in HA doc
* kubeadm: apply latest amends to the HA doc for 1.14
* fixed a few missed merge conflicts
* Admission Webhook new features doc (#12938)
- kubernetes/kubernetes#74998
- kubernetes/kubernetes#74477
- kubernetes/kubernetes#74562
* Clarifications and fixes in GMSA doc (#13226)
* Clarifications and fixes in GMSA doc
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Update configure-gmsa.md
* Reformat to align headings and pre-reqs better
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Reformat to align headings and pre-reqs better
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Reformat to fix bullets
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Reword application of sample gmsa
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Update configure-gmsa.md
* Address feedback to use active voice
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Address feedback to use active voice
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* RunAsGroup documentation for Progressing this to Beta (#12297)
* start serverside-apply documentation (#13077)
* start serverside-apply documentation
* add more concept info on server side apply
* Update api concepts
* Update api-concepts.md
* fix style issues
* Document CSI update (#12928)
* Document CSI update
* Finish CSI documentation
Also fix mistake with ExpandInUsePersistentVolumes documented as beta
* Overall docs for CSI Migration feature (#12935)
* Placeholder docs for CSI Migration feature
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Address CR comments and update feature gates
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Add mappings for CSI plugins
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Add sections for AWS and GCE PD migration
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Add docs for Cinder and CSI Migration info
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Clarify scope to volumes with file system
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Change the format of EBS and Cinder CSI Migration sections to follow the GCE template
Signed-off-by: Deep Debroy <ddebroy@docker.com>
* Windows documentation updates for 1.14 (#12929)
* Updated the note to indicate doc work for 1.14
* first attempt at md export from gdoc
* simplifyig
* big attempt
* moving DRAFT windows content to PR for review
* moving content to PR in markdown for review
* updated note tags
* Delete windows-contributing.md
deleting this file as it is already ported to the github contributor guide
* fixed formatting in intro and cluster setup guide
* updating formatting for running containers guide
* rejiggered end of troubleshooting
* fixed minor typos
* Clarified the windows binary download step
* Update _index.md
making updates based on feedback
* Update _index.md
updating ovn-kubernetes docs
* Update _index.md
* Update _index.md
* updating relative docs links
updating all the links to be relative links to /docs
* Update _index.md
* Update _index.md
updates for windows services and ovn-kubernetes
* formatted for correct step numbering
* fix typos
* Update _index.md
updates for flannel PR in troubleshooting
* Update _index.md
* Update _index.md
updating a few sections like roadmap, services, troubleshooting/filing tickets
* Update _index.md
* Update _index.md
* Update _index.md
* Fixed a few whitespace issues
* Update _index.md
* Update _index.md
* Update _index.md
* add section on upgrading CoreDNS (#12909)
* documentation for kubelet resource metrics endpoint (#12934)
* windows docs updates for 1.14 (#13279)
* Delete sample-l2bridge-wincni-config.json
this file is not used anywhere
* Update _index.md
* Update _index.md
* Update _index.md
* Update _index.md
* Update _index.md
* Rename content/en/docs/getting-started-guides/windows/_index.md to content/en/docs/setup/windows/_index.md
moving to new location
* Delete flannel-master-kubectl-get-ds.png
* Delete flannel-master-kubeclt-get-pods.png
* Delete windows-docker-error.png
* Add files via upload
* Rename _index.md to add-windows-nodes.md
* Create _index.md
* Update _index.md
* Update add-windows-nodes.md
* Update add-windows-nodes.md
* Create user-guide-windows-nodes.md
* Create user-guide-windows-containers.md
* Update and rename add-windows-nodes.md to intro-windows-nodes.md
* Update user-guide-windows-containers.md
* Rename intro-windows-nodes.md to intro-windows-in-kubernetes.md
* Update user-guide-windows-nodes.md
* Update user-guide-windows-containers.md
* Update user-guide-windows-containers.md
* Update user-guide-windows-nodes.md
* Update user-guide-windows-containers.md
* Update _index.md
* Update intro-windows-in-kubernetes.md
* Update intro-windows-in-kubernetes.md
fixing the pause image
* Update intro-windows-in-kubernetes.md
changing tables from html to MD
* Update user-guide-windows-nodes.md
converting tables from HTML to MD
* Update intro-windows-in-kubernetes.md
* Update user-guide-windows-nodes.md
* Update user-guide-windows-nodes.md
* Update user-guide-windows-nodes.md
updating the numbering , even though it messes up the notes a little bit. Jim will file a ticket to follow up
* Update user-guide-windows-nodes.md
* update to windows docs for 1.14 (#13322)
* Update intro-windows-in-kubernetes.md
* Update intro-windows-in-kubernetes.md
* Update intro-windows-in-kubernetes.md
* Update intro-windows-in-kubernetes.md
* Update intro-windows-in-kubernetes.md
* Update user-guide-windows-containers.md
* Update user-guide-windows-nodes.md
* Update intro-windows-in-kubernetes.md (#13344)
* server side apply followup (#13321)
* change some parts of serverside apply docs in response to comments
* fix typos and wording
* Update config.toml (#13365)
275 lines
8.5 KiB
Markdown
275 lines
8.5 KiB
Markdown
---
|
|
title: Assign CPU Resources to Containers and Pods
|
|
content_template: templates/task
|
|
weight: 20
|
|
---
|
|
|
|
{{% capture overview %}}
|
|
|
|
This page shows how to assign a CPU *request* and a CPU *limit* to
|
|
a Container. A Container is guaranteed to have as much CPU as it requests,
|
|
but is not allowed to use more CPU than its limit.
|
|
|
|
|
|
{{% /capture %}}
|
|
|
|
|
|
{{% capture prerequisites %}}
|
|
|
|
{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
|
|
|
|
Each node in your cluster must have at least 1 CPU.
|
|
|
|
A few of the steps on this page require you to run the
|
|
[metrics-server](https://github.com/kubernetes-incubator/metrics-server)
|
|
service in your cluster. If you have the metrics-server
|
|
running, you can skip those steps.
|
|
|
|
If you are running minikube, run the following command to enable
|
|
metrics-server:
|
|
|
|
```shell
|
|
minikube addons enable metrics-server
|
|
```
|
|
|
|
To see whether metrics-server (or another provider of the resource metrics
|
|
API, `metrics.k8s.io`) is running, type the following command:
|
|
|
|
```shell
|
|
kubectl get apiservices
|
|
```
|
|
|
|
If the resource metrics API is available, the output will include a
|
|
reference to `metrics.k8s.io`.
|
|
|
|
|
|
```shell
|
|
NAME
|
|
v1beta1.metrics.k8s.io
|
|
```
|
|
|
|
{{% /capture %}}
|
|
|
|
|
|
{{% capture steps %}}
|
|
|
|
## Create a namespace
|
|
|
|
Create a namespace so that the resources you create in this exercise are
|
|
isolated from the rest of your cluster.
|
|
|
|
```shell
|
|
kubectl create namespace cpu-example
|
|
```
|
|
|
|
## Specify a CPU request and a CPU limit
|
|
|
|
To specify a CPU request for a Container, include the `resources:requests` field
|
|
in the Container resource manifest. To specify a CPU limit, include `resources:limits`.
|
|
|
|
In this exercise, you create a Pod that has one Container. The Container has a request of 0.5 CPU and a limit of 1 CPU. Here is the configuration file for the Pod:
|
|
|
|
{{< codenew file="pods/resource/cpu-request-limit.yaml" >}}
|
|
|
|
The `args` section of the configuration file provides arguments for the Container when it starts.
|
|
The `-cpus "2"` argument tells the Container to attempt to use 2 CPUs.
|
|
|
|
Create the Pod:
|
|
|
|
```shell
|
|
kubectl apply -f https://k8s.io/examples/pods/resource/cpu-request-limit.yaml --namespace=cpu-example
|
|
```
|
|
|
|
Verify that the Pod Container is running:
|
|
|
|
```shell
|
|
kubectl get pod cpu-demo --namespace=cpu-example
|
|
```
|
|
|
|
View detailed information about the Pod:
|
|
|
|
```shell
|
|
kubectl get pod cpu-demo --output=yaml --namespace=cpu-example
|
|
```
|
|
|
|
The output shows that the one Container in the Pod has a CPU request of 500 milliCPU
|
|
and a CPU limit of 1 CPU.
|
|
|
|
```yaml
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
requests:
|
|
cpu: 500m
|
|
```
|
|
|
|
Use `kubectl top` to fetch the metrics for the pod:
|
|
|
|
```shell
|
|
kubectl top pod cpu-demo --namespace=cpu-example
|
|
```
|
|
|
|
The output shows that the Pod is using 974 milliCPU, which is just a bit less than
|
|
the limit of 1 CPU specified in the Pod configuration file.
|
|
|
|
```
|
|
NAME CPU(cores) MEMORY(bytes)
|
|
cpu-demo 974m <something>
|
|
```
|
|
|
|
Recall that by setting `-cpu "2"`, you configured the Container to attempt to use 2 CPUs, but the Container is only being allowed to use about 1 CPU. The Container CPU use is being throttled, because the Container is attempting to use more CPU resources than its limit.
|
|
|
|
{{< note >}}
|
|
Another possible explanation for the CPU throttling is that the Node might not have
|
|
enough CPU resources available. Recall that the prerequisites for this exercise require each of
|
|
your Nodes to have at least 1 CPU. If your Container runs on a Node that has only 1 CPU, the Container
|
|
cannot use more than 1 CPU regardless of the CPU limit specified for the Container.
|
|
{{< /note >}}
|
|
|
|
## CPU units
|
|
|
|
The CPU resource is measured in *CPU* units. One CPU, in Kubernetes, is equivalent to:
|
|
|
|
* 1 AWS vCPU
|
|
* 1 GCP Core
|
|
* 1 Azure vCore
|
|
* 1 Hyperthread on a bare-metal Intel processor with Hyperthreading
|
|
|
|
Fractional values are allowed. A Container that requests 0.5 CPU is guaranteed half as much
|
|
CPU as a Container that requests 1 CPU. You can use the suffix m to mean milli. For example
|
|
100m CPU, 100 milliCPU, and 0.1 CPU are all the same. Precision finer than 1m is not allowed.
|
|
|
|
CPU is always requested as an absolute quantity, never as a relative quantity; 0.1 is the same
|
|
amount of CPU on a single-core, dual-core, or 48-core machine.
|
|
|
|
Delete your Pod:
|
|
|
|
```shell
|
|
kubectl delete pod cpu-demo --namespace=cpu-example
|
|
```
|
|
|
|
## Specify a CPU request that is too big for your Nodes
|
|
|
|
CPU requests and limits are associated with Containers, but it is useful to think
|
|
of a Pod as having a CPU request and limit. The CPU request for a Pod is the sum
|
|
of the CPU requests for all the Containers in the Pod. Likewise, the CPU limit for
|
|
a Pod is the sum of the CPU limits for all the Containers in the Pod.
|
|
|
|
Pod scheduling is based on requests. A Pod is scheduled to run on a Node only if
|
|
the Node has enough CPU resources available to satisfy the Pod CPU request.
|
|
|
|
In this exercise, you create a Pod that has a CPU request so big that it exceeds
|
|
the capacity of any Node in your cluster. Here is the configuration file for a Pod
|
|
that has one Container. The Container requests 100 CPU, which is likely to exceed the
|
|
capacity of any Node in your cluster.
|
|
|
|
{{< codenew file="pods/resource/cpu-request-limit-2.yaml" >}}
|
|
|
|
Create the Pod:
|
|
|
|
```shell
|
|
kubectl apply -f https://k8s.io/examples/pods/resource/cpu-request-limit-2.yaml --namespace=cpu-example
|
|
```
|
|
|
|
View the Pod status:
|
|
|
|
```shell
|
|
kubectl get pod cpu-demo-2 --namespace=cpu-example
|
|
```
|
|
|
|
The output shows that the Pod status is Pending. That is, the Pod has not been
|
|
scheduled to run on any Node, and it will remain in the Pending state indefinitely:
|
|
|
|
|
|
```shell
|
|
kubectl get pod cpu-demo-2 --namespace=cpu-example
|
|
NAME READY STATUS RESTARTS AGE
|
|
cpu-demo-2 0/1 Pending 0 7m
|
|
```
|
|
|
|
View detailed information about the Pod, including events:
|
|
|
|
|
|
```shell
|
|
kubectl describe pod cpu-demo-2 --namespace=cpu-example
|
|
```
|
|
|
|
The output shows that the Container cannot be scheduled because of insufficient
|
|
CPU resources on the Nodes:
|
|
|
|
|
|
```shell
|
|
Events:
|
|
Reason Message
|
|
------ -------
|
|
FailedScheduling No nodes are available that match all of the following predicates:: Insufficient cpu (3).
|
|
```
|
|
|
|
Delete your Pod:
|
|
|
|
```shell
|
|
kubectl delete pod cpu-demo-2 --namespace=cpu-example
|
|
```
|
|
|
|
## If you do not specify a CPU limit
|
|
|
|
If you do not specify a CPU limit for a Container, then one of these situations applies:
|
|
|
|
* The Container has no upper bound on the CPU resources it can use. The Container
|
|
could use all of the CPU resources available on the Node where it is running.
|
|
|
|
* The Container is running in a namespace that has a default CPU limit, and the
|
|
Container is automatically assigned the default limit. Cluster administrators can use a
|
|
[LimitRange](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#limitrange-v1-core/)
|
|
to specify a default value for the CPU limit.
|
|
|
|
## Motivation for CPU requests and limits
|
|
|
|
By configuring the CPU requests and limits of the Containers that run in your
|
|
cluster, you can make efficient use of the CPU resources available on your cluster
|
|
Nodes. By keeping a Pod CPU request low, you give the Pod a good chance of being
|
|
scheduled. By having a CPU limit that is greater than the CPU request, you accomplish two things:
|
|
|
|
* The Pod can have bursts of activity where it makes use of CPU resources that happen to be available.
|
|
* The amount of CPU resources a Pod can use during a burst is limited to some reasonable amount.
|
|
|
|
## Clean up
|
|
|
|
Delete your namespace:
|
|
|
|
```shell
|
|
kubectl delete namespace cpu-example
|
|
```
|
|
|
|
{{% /capture %}}
|
|
|
|
{{% capture whatsnext %}}
|
|
|
|
|
|
### For app developers
|
|
|
|
* [Assign Memory Resources to Containers and Pods](/docs/tasks/configure-pod-container/assign-memory-resource/)
|
|
|
|
* [Configure Quality of Service for Pods](/docs/tasks/configure-pod-container/quality-service-pod/)
|
|
|
|
### For cluster administrators
|
|
|
|
* [Configure Default Memory Requests and Limits for a Namespace](/docs/tasks/administer-cluster/memory-default-namespace/)
|
|
|
|
* [Configure Default CPU Requests and Limits for a Namespace](/docs/tasks/administer-cluster/cpu-default-namespace/)
|
|
|
|
* [Configure Minimum and Maximum Memory Constraints for a Namespace](/docs/tasks/administer-cluster/memory-constraint-namespace/)
|
|
|
|
* [Configure Minimum and Maximum CPU Constraints for a Namespace](/docs/tasks/administer-cluster/cpu-constraint-namespace/)
|
|
|
|
* [Configure Memory and CPU Quotas for a Namespace](/docs/tasks/administer-cluster/quota-memory-cpu-namespace/)
|
|
|
|
* [Configure a Pod Quota for a Namespace](/docs/tasks/administer-cluster/quota-pod-namespace/)
|
|
|
|
* [Configure Quotas for API Objects](/docs/tasks/administer-cluster/quota-api-object/)
|
|
|
|
{{% /capture %}}
|
|
|
|
|
|
|