Chapter 13. Resource Limits

A LimitRange object enumerates the minimum and maximum resource usage values per object in a project.

A LimitRange object can enumerate the following limits for each object type and resource value that is created or modified in the project. If a usage limit is defined, and the incoming resource exceeds the allowed range, then the resource is forbidden from the project.

For some fields, in the absence of a value on the incoming resource, it is possible to apply a default value, if it is specified in the LimitRange definition.

Once a LimitRange is created in a project, all resource create and modification requests are evaluated against each LimitRange object in the project. If the resource violates a minimum or maximum constraint enumerated, then the resource is rejected. If the resource does not set an explicit value, and if the constraint supports a default value, then the default value is applied to the resource.

For example, if the container does not express a CPU resource requirement, but the LimitRange specifies a default value for container CPU, then the default value is set to the allowed CPU usage for that container, and the minimum (if specified) is set as the minimum requested value for that container.

{
  "apiVersion": "v1",
  "kind": "LimitRange",
  "metadata": {
    "name": "limits" 
  },
  "spec": {
    "limits": [
    {
      "type": "Pod",
      "max": {
        "memory": "1Gi", 
        "cpu": "2" 
      },
      "min": {
        "memory": "1Mi", 
        "cpu": "250m" 
      }
    },
    {
      "type": "Container",
      "max": {
        "memory": "1Gi", 
        "cpu": "2" 
      },
      "min": {
        "memory": "1Mi", 
        "cpu": "250m" 
      },
      "default": {
        "memory": "1Mi", 
        "cpu": "250m" 
      }
    }
    ]
  }
}

{
  "apiVersion": "v1",
  "kind": "LimitRange",
  "metadata": {
    "name": "limits" 

  },
  "spec": {
    "limits": [
    {
      "type": "Pod",
      "max": {
        "memory": "1Gi", 

        "cpu": "2" 

      },
      "min": {
        "memory": "1Mi", 

        "cpu": "250m" 

      }
    },
    {
      "type": "Container",
      "max": {
        "memory": "1Gi", 

        "cpu": "2" 

      },
      "min": {
        "memory": "1Mi", 

        "cpu": "250m" 

      },
      "default": {
        "memory": "1Mi", 

        "cpu": "250m" 

      }
    }
    ]
  }
}

To apply a limit range to a project, create a limit range object definition on your file system to your specifications, then run:

oc create -f <limit_range_file>

$ oc create -f <limit_range_file>

To view limits enforced in a project:

oc get limits
oc describe limits limits

$ oc get limits
NAME
limits

$ oc describe limits limits
Name:           limits
Type            Resource        Min     Max     Default
----            --------        ---     ---     ---
Pod             memory          1Mi     1Gi     -
Pod             cpu             250m    2       -
Container       memory          1Mi     1Gi     1Mi
Container       cpu             250m    250m    250m

If you do not want to enforce limits in a project, you can remove any active limit range by name:

oc delete limits <limit_name>

$ oc delete limits <limit_name>