16.2.
apiVersion: v1
kind: Pod
metadata:
name: qos-demo
namespace: qos-example
spec:
securityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
containers:
- name: qos-demo-ctr
image: <image-pull-spec>
resources:
limits:
memory: "200Mi"
cpu: "1"
requests:
memory: "200Mi"
cpu: "1"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop: [ALL]
$ oc apply -f qos-pod.yaml --namespace=qos-example$ oc get pod qos-demo --namespace=qos-example --output=yamlspec: containers: ... status: qosClass: Guaranteed참고