网站建设文案详情,花生壳怎么建设购物网站,西安网站开发方案,视频网站建设的意义论文kubernetes 资源限制
kubernetes中资源限制概括 1.如果运行的容器没有定义资源(memory、CPU)等限制#xff0c;但是在namespace定义了LimitRange限制#xff0c;那么该容器会继承LimitRange中的 默认限制。
2.如果namespace没有定义LimitRange限制#xff0c;那么该容器可…kubernetes 资源限制
kubernetes中资源限制概括 1.如果运行的容器没有定义资源(memory、CPU)等限制但是在namespace定义了LimitRange限制那么该容器会继承LimitRange中的 默认限制。
2.如果namespace没有定义LimitRange限制那么该容器可以只要宿主机的最大可用资源直到无资源可用而触发宿主机(OOM Killer)。
为容器和 Pods 分配 CPU 资源 | Kubernetes本页面展示如何为容器设置 CPU request请求 和 CPU limit限制。 容器使用的 CPU 不能超过所配置的限制。 如果系统有空闲的 CPU 时间则可以保证给容器分配其所请求数量的 CPU 资源。准备开始 你必须拥有一个 Kubernetes 的集群且必须配置 kubectl 命令行工具让其与你的集群通信。 建议运行本教程的集群至少有两个节点且这两个节点不能作为控制平面主机。 如果你还没有集群你可以通过 Minikube 构建一个你自己的集群或者你可以使用下面的 Kubernetes 练习环境之一Killercoda 玩转 Kubernetes 要获知版本信息请输入 kubectl version. 你的集群必须至少有 1 个 CPU 可用才能运行本任务中的示例。本页的一些步骤要求你在集群中运行 metrics-server 服务。如果你的集群中已经有正在运行的 metrics-server 服务可以跳过这些步骤。如果你正在运行 Minikube请运行以下命令启用 metrics-serverminikube addons enable metrics-server 查看 metrics-server或者其他资源指标 API metrics.k8s.io 服务提供者是否正在运行 请键入以下命令kubectl get apiservices 如果资源指标 API 可用则会输出将包含一个对 metrics.k8s.io 的引用。NAME v1beta1.metrics.k8s.io 创建一个名字空间 创建一个名字空间以便将 本练习中创建的资源与集群的其余部分资源隔离。kubectl create namespace cpu-example 指定 CPU 请求和 CPU 限制 要为容器指定 CPU 请求请在容器资源清单中包含 resources: requests 字段。 要指定 CPU 限制请包含 resources:limits。https://kubernetes.io/zh/docs/tasks/configure-pod-container/assign-cpu-resource/
CPU 以核心为单位进行限制单位可以是整核、浮点核心数或毫核(m/milli)
22核心200% 0.5500m50% 1.21200m120% 为容器和 Pod 分配内存资源 | Kubernetes memory 以字节为单位,单位可以是E、P、T、G、M、K、Ei、Pi、Ti、Gi、Mi、Ki
1536Mi1.5Gi requests(请求)为kubernetes scheduler执行pod调度时node节点至少需要拥有的资源。
limits(限制)为pod运行成功后最多可以使用的资源上限。 kubernetes对单个容器的CPU及memory实现资源限制 [rootk8s-master1 vip-limit-case]#cat case1-pod-memory-limit.yml #apiVersion: extensions/v1beta1 apiVersion: apps/v1 kind: Deployment metadata: name: limit-test-deployment namespace: vip spec: replicas: 1 selector: matchLabels: #rs or deployment app: limit-test-pod # matchExpressions: # - {key: app, operator: In, values: [ng-deploy-80,ng-rs-81]} template: metadata: labels: app: limit-test-pod spec: containers: - name: limit-test-container image: lorel/docker-stress-ng resources: limits: cpu: 1 memory: 256Mi requests: cpu: 1 memory: 256Mi #command: [stress] args: [--vm, 2, --vm-bytes, 256M] #nodeSelector: # env: group1 [rootk8s-master1 vip-limit-case]#kubectl apply -f case1-pod-memory-limit.yml [rootk8s-master1 vip-limit-case]#kubectl top pod -n vip NAME CPU(cores) MEMORY(bytes) limit-test-deployment-6d7c8cc78b-x868g 935m 246Mi kubernetes对单个pod的CPU及memory实现资源限制
Limit Range是对具体某个Pod或容器的资源使用进行限制
限制范围LimitRange | Kubernetes 限制namespace中每个Pod或容器的最小与最大计算资源 限制namespace中每个Pod或容器计算资源request、limit之间的比例 限制namespace中每个存储卷声明PersistentVolumeClaim可使用的最小与最大存储空间 设置namespace中容器默认计算资源的request、limit并在运行时自动注入到容器中 [rootk8s-master1 vip-limit-case]#cat case3-LimitRange.yaml apiVersion: v1 kind: LimitRange metadata: name: limitrange-magedu namespace: vip spec: limits: - type: Container #限制的资源类型 max: cpu: 2 #限制单个容器的最大CPU memory: 2Gi #限制单个容器的最大内存 min: cpu: 500m #限制单个容器的最小CPU memory: 512Mi #限制单个容器的最小内存 default: cpu: 500m #默认单个容器的CPU限制 memory: 512Mi #默认单个容器的内存限制 defaultRequest: cpu: 500m #默认单个容器的CPU创建请求 memory: 512Mi #默认单个容器的内存创建请求 maxLimitRequestRatio: cpu: 2 #限制CPU limit/request比值最大为2 memory: 2 #限制内存limit/request比值最大为1.5 - type: Pod max: cpu: 4 #限制单个Pod的最大CPU memory: 4Gi #限制单个Pod最大内存 - type: PersistentVolumeClaim max: storage: 50Gi #限制PVC最大的requests.storage min: storage: 30Gi #限制PVC最小的requests.storage 限制案例CPU与内存 RequestRatio比例限制 与 CPU与内存或超分限制
[rootk8s-master1 magedu-limit-case]#cat ../metrics-server-0.6.1-case/tomcat-app1.yaml
kind: Deployment
#apiVersion: extensions/v1beta1
apiVersion: apps/v1
metadata:labels:app: vip-tomcat-app1-deployment-labelname: vip-tomcat-app1-deploymentnamespace: vip
spec:replicas: 1selector:matchLabels:app: vip-tomcat-app1-selectortemplate:metadata:labels:app: vip-tomcat-app1-selectorspec:nodeName: 10.0.0.113containers:- name: vip-tomcat-app1-containerimage: tomcat:7.0.93-alpine #image: lorel/docker-stress-ng #args: [--vm, 2, --vm-bytes, 256M]##command: [/apps/tomcat/bin/run_tomcat.sh]imagePullPolicy: IfNotPresent##imagePullPolicy: Alwaysports:- containerPort: 8080protocol: TCPname: httpenv:- name: passwordvalue: 123456- name: agevalue: 18resources:limits:cpu: 3memory: 512Mirequests:cpu: 500mmemory: 512Mi- name: vip-tomcat-app2-containerimage: tomcat:7.0.93-alpine#image: lorel/docker-stress-ng #args: [--vm, 2, --vm-bytes, 256M]##command: [/apps/tomcat/bin/run_tomcat.sh]imagePullPolicy: IfNotPresent##imagePullPolicy: Alwaysports:- containerPort: 8080protocol: TCPname: httpenv:- name: passwordvalue: 123456- name: agevalue: 18resources:limits:cpu: 500mmemory: 500Mirequests:cpu: 500mmemory: 500Mi---
kind: Service
apiVersion: v1
metadata:labels:app: vip-tomcat-app1-service-labelname: vip-tomcat-app1-servicenamespace: vip
spec:type: NodePortports:- name: httpport: 80protocol: TCPtargetPort: 8080#nodePort: 40003selector:app: vip-tomcat-app1-selector
# kubectl apply -f case3-LimitRange.yaml
[rootk8s-master1 vip-limit-case]#kubectl describe limitranges -n vip
Name: limitrange-vip
Namespace: magedu
Type Resource Min Max Default Request Default Limit Max Limit/Request Ratio
---- -------- --- --- --------------- ------------- -----------------------
Container cpu 500m 2 500m 500m 2
Container memory 512Mi 2Gi 512Mi 512Mi 2
Pod cpu - 4 - - -
Pod memory - 4Gi - - -
PersistentVolumeClaim storage 30Gi 50Gi - - -#kubectl apply -f ../metrics-server-0.6.1-case/tomcat-app1.yaml#kubectl get deployment.apps/magedu-tomcat-app1-deployment -n vip -o jsonmessage: pods \magedu-tomcat-app1-deployment-76dcc947d5-b25r6\ is forbidden: [minimum memory usage per Container is 512Mi, but request is 500Mi, maximum cpu usage per Container is 2, but limit is 3, cpu max limit to request ratio per Container is 2, but provided ratio is 6.000000
消息“:”pods \“magedu-tomcat-app1-deployment-76dcc947d5-b25r6\”被禁止[每个容器的最小内存使用量是512Mi但请求是500Mi每个容器的最大cpu使用量是2但限制是3每个容器的cpu最大限制与请求比率是2但提供的比率是6000000cpu比例等于 cpulimit/cpurequest 3/0.56 kubernetes对整个namespace的CPU及memory实现资源限制 资源配额 | Kubernetes 限定某个对象类型如Pod、service可创建对象的总数 限定某个对象类型可消耗的计算资源CPU、内存与存储资源存储卷声明总数 [rootk8s-master1 vip-limit-case]#cat case6-ResourceQuota-vip.yaml
apiVersion: v1
kind: ResourceQuota
metadata:name: quota-magedunamespace: vip
spec:hard:requests.cpu: 8limits.cpu: 8requests.memory: 4Gilimits.memory: 4Girequests.nvidia.com/gpu: 4pods: 2services: 100[rootk8s-master1 vip-limit-case]#kubectl get resourcequotas -n vip
NAME AGE REQUEST LIMIT
quota-vip 4m25s pods: 0/100, requests.cpu: 0/8, requests.memory: 0/4Gi, requests.nvidia.com/gpu: 0/4, services: 0/100 limits.cpu: 0/8, limits.memory: 0/4Gi
[rootk8s-master1 vip-limit-case]#kubectl describe resourcequotas -n vip
Name: quota-vip
Namespace: vip
Resource Used Hard
-------- ---- ----
limits.cpu 0 8
limits.memory 0 4Gi
pods 0 100
requests.cpu 0 8
requests.memory 0 4Gi
requests.nvidia.com/gpu 0 4
services 0 100
限制案例1验证namespace Pod副本数限制
[rootk8s-master1 ~]#kubectl get deployments.apps -n magedu
NAME READY UP-TO-DATE AVAILABLE AGE
magedu-nginx-deployment 2/3 2 2 38s
[rootk8s-master1 ~]#kubectl describe resourcequotas -n magedu
Name: quota-magedu
Namespace: magedu
Resource Used Hard
-------- ---- ----
limits.cpu 400m 8
limits.memory 424Mi 4Gi
pods 2 2
requests.cpu 400m 8
requests.memory 424Mi 4Gi
requests.nvidia.com/gpu 0 4
services 1 100kubectl get -n magedu deployments.apps/magedu-nginx-deployment -o jsonlastTransitionTime: 2024-12-27T08:52:29Z,lastUpdateTime: 2024-12-27T08:52:29Z,message: pods \magedu-nginx-deployment-7f548f9b4d-2kc42\ is forbidden: exceeded quota: quota-magedu, requested: pods1, used: pods2, limited: pods2,reason: FailedCreate,status: True,type: ReplicaFailure},
消息禁止创建 pod“magedu-nginx-deployment-7f548f9b4d-2kc42”超出配额quota-magedu请求pod1已用pod2限制pod2 限制案例2CPU总计核心数限制
[rootk8s-master1 vip-limit-case]#cat case7-namespace-pod-limit-test.yaml
kind: Deployment
apiVersion: apps/v1
metadata:labels:app: vip-nginx-deployment-labelname: vip-nginx-deploymentnamespace: vip
spec:replicas: 1selector:matchLabels:app: vip-nginx-selectortemplate:metadata:labels:app: vip-nginx-selectorspec:nodeName: 10.0.0.113containers:- name: vip-nginx-containerimage: nginx:1.20.2-alpineimagePullPolicy: IfNotPresentports:- containerPort: 80protocol: TCPname: httpenv:- name: passwordvalue: 123456- name: agevalue: 18resources:limits:cpu: 5memory: 212Mirequests:cpu: 5memory: 212Mi [rootk8s-master1 ~]#kubectl get -n magedu deployments.apps/magedu-nginx-deployment -o json
message: pods \magedu-nginx-deployment-5bccb4c76b-9857m\ is forbidden: exceeded quota: quota-magedu, requested: limits.cpu5,pods1,requests.cpu5, used: limits.cpu5005m,pods2,requests.cpu5005m, limited: limits.cpu8,pods2,requests.cpu8,消息禁止创建 pod magedu-nginx-deployment-5bccb4c76b-9857m超出配额quota-magedu请求limits.cpu5pods1requests.cpu5已使用limits.cpu5005mpods2requests.cpu5005m限制limits.cpu8pods2requests.cpu8
