From c3d204af8ad6b796c0e6c212f9d11b93a8c90fe8 Mon Sep 17 00:00:00 2001
From: Jonas Mai <jo@jonasmai.de>
Date: Tue, 1 Dec 2020 20:27:42 +0100
Subject: [PATCH] changes the pod requests and limits example policy,
indicating that configuring memory limits is recommended
---
samples/RequirePodRequestsLimits.md | 2 +-
samples/best_practices/require_pod_requests_limits.yaml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/samples/RequirePodRequestsLimits.md b/samples/RequirePodRequestsLimits.md
index 0912ec0659..a5e3019d4b 100644
--- a/samples/RequirePodRequestsLimits.md
+++ b/samples/RequirePodRequestsLimits.md
@@ -1,6 +1,6 @@
# Require pod resource requests and limits
-Application workloads share cluster resources. Hence, it is important to manage resources assigned to each pod. It is recommended that `resources.requests` and `resources.limits` are configured per pod and include CPU and memory resources. Other resources such as GPUs may also be specified as needed.
+Application workloads share cluster resources. Hence, it is important to manage resources assigned to each pod. It is recommended that `resources.requests.cpu`, `resources.requests.memory` and `resources.limits.memory` are configured per pod. Other resources such as GPUs may also be specified as needed.
If a namespace level request or limit is specified, defaults will automatically be applied to each pod based on the `LimitRange` configuration.
diff --git a/samples/best_practices/require_pod_requests_limits.yaml b/samples/best_practices/require_pod_requests_limits.yaml
index 721a1960fe..0940f454b2 100644
--- a/samples/best_practices/require_pod_requests_limits.yaml
+++ b/samples/best_practices/require_pod_requests_limits.yaml
@@ -6,7 +6,7 @@ metadata:
policies.kyverno.io/category: Workload Management
policies.kyverno.io/description: As application workloads share cluster resources, it is important
to limit resources requested and consumed by each pod. It is recommended to require
- 'resources.requests' and 'resources.limits' per pod. If a namespace level request or limit is
+ 'resources.requests' and 'resources.limits.memory' per pod. If a namespace level request or limit is
specified, defaults will automatically be applied to each pod based on the 'LimitRange' configuration.
spec:
validationFailureAction: audit