Skip to content

Commit 6ef5185

Browse files
committed
Add details about using quotas in UserNamespaces in Proposal
Signed-off-by: PannagaRamamanohara <[email protected]>
1 parent 2e6b66b commit 6ef5185

File tree

1 file changed

+9
-1
lines changed
  • keps/sig-node/1029-ephemeral-storage-quotas

1 file changed

+9
-1
lines changed

keps/sig-node/1029-ephemeral-storage-quotas/README.md

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -269,6 +269,11 @@ and attaching the ID to one or more files. By default (and as
269269
utilized herein), if a project ID is attached to a directory, it is
270270
inherited by any files created under that directory.
271271
272+
To use quotas to track a pod's resource usage, the pod must be in
273+
a user namespace. Within user namespaces, the kernel restricts changes
274+
to projectIDs on the filesystem, ensuring the reliability of storage
275+
metrics calculated by quotas.
276+
272277
_If we elect to use the quota as enforcing, we impose a quota
273278
consistent with the desired limit._ If we elect to use it as
274279
non-enforcing, we impose a large quota that in practice cannot be
@@ -279,7 +284,7 @@ below](#implementation-detailsnotesconstraints-optional).
279284
280285
### Control over Use of Quotas
281286
282-
At present, two feature gates control operation of quotas:
287+
At present, three feature gates control operation of quotas:
283288
284289
* `LocalStorageCapacityIsolation` must be enabled for any use of
285290
quotas.
@@ -289,6 +294,9 @@ At present, two feature gates control operation of quotas:
289294
present, this defaults to False, but the intention is that this will
290295
default to True by initial release.
291296

297+
* Ensure the `UserNamespacesSupport`
298+
is enabled, and that the kernel, CRI implementation and OCI runtime support user namespaces.
299+
292300
### Operation Flow -- Applying a Quota
293301

294302
* Caller (emptydir volume manager or container runtime) creates an

0 commit comments

Comments
 (0)