Skip to content

TELCODOCS:857 - document resource requirements and prerequisites for …#7

Open
MirzWeiss wants to merge 2 commits intoKATA-1635from
TELCODOCS-857
Open

TELCODOCS:857 - document resource requirements and prerequisites for …#7
MirzWeiss wants to merge 2 commits intoKATA-1635from
TELCODOCS-857

Conversation

@MirzWeiss
Copy link
Copy Markdown
Owner

@MirzWeiss MirzWeiss commented Feb 27, 2023

Issue:
TELCODOCS-857

Link to docs preview

@bpradipt @jensfr @abhbaner @cpmeadors @snir911 please review/approve. This PR covers the prerequisites an resource requirements for peer-pods only, not the other content.

QE review:

  • QE has approved this change.

Comment thread modules/sandboxed-containers-prereqs-peer-pods.adoc Outdated
Comment thread modules/sandboxed-containers-prereqs-peer-pods.adoc Outdated
Comment thread modules/sandboxed-containers-prereqs-peer-pods.adoc Outdated
Comment thread modules/sandboxed-containers-prereqs-peer-pods.adoc Outdated
Comment thread modules/sandboxed-containers-prereqs-peer-pods-aws.adoc
Comment thread modules/sandboxed-containers-prereqs-peer-pods-aws.adoc Outdated
Comment thread modules/sandboxed-containers-prereqs-peer-pods-aws.adoc Outdated
Comment thread modules/sandboxed-containers-prereqs-peer-pods-aws.adoc
A container running without a memory resource consumes free memory until the total memory used by the VM reaches the default allocation. The guest and its I/O buffers also consume memory.

If a container is given a specific amount of memory, then that memory is hot-plugged into the VM before the container starts.
* You have {product-title} {product-version} installed on AWS or Azure.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since vSphere is already mentioned, should the above line also include vSphere ?
cc @@jensfr

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@bpradipt Sorry, the section about vSphere should be removed. Not sure why it's still here.

A peer-pod uses resources in two locations:

The following table lists some the default values for resource allocation.
* The Kubernetes worker node. The worker node stores metadata, Kata shim resources (`containerd-shim-kata-v2`), remote-hypervisor (`cloud-api-adaptor`) resources, and the tunnel setup between the worker nodes and the peer-pod VM.
Copy link
Copy Markdown

@bpradipt bpradipt Mar 30, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* The Kubernetes worker node. The worker node stores metadata, Kata shim resources (`containerd-shim-kata-v2`), remote-hypervisor (`cloud-api-adaptor`) resources, and the tunnel setup between the worker nodes and the peer-pod VM.
The Kubernetes worker node. The worker node stores metadata, Kata shim resources (`containerd-shim-kata-v2`), remote-hypervisor (`cloud-api-adaptor`) resources, and the tunnel setup between the worker node and the pod VMs.


The following table lists some the default values for resource allocation.
* The Kubernetes worker node. The worker node stores metadata, Kata shim resources (`containerd-shim-kata-v2`), remote-hypervisor (`cloud-api-adaptor`) resources, and the tunnel setup between the worker nodes and the peer-pod VM.
* The cloud instance. This is the actual peer-pod VM running in the cloud.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* The cloud instance. This is the actual peer-pod VM running in the cloud.
The cloud instance. This is the actual pod VM created in the cloud in response to pod creation.

|===
[.small]
--
The total capacity of the peer-pod VMs running in the cloud is defined as Kubernetes Node extended resources. This enables the Kubernetes scheduler to handle capacity tracking and accounting. The extended resource is named `kata.peerpods.io/vm`, and defines the maximum number of peer-pods that you can create in the cluster.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
The total capacity of the peer-pod VMs running in the cloud is defined as Kubernetes Node extended resources. This enables the Kubernetes scheduler to handle capacity tracking and accounting. The extended resource is named `kata.peerpods.io/vm`, and defines the maximum number of peer-pods that you can create in the cluster.
The total peer-pods capacity of the cluster is the total number of pod VMs that can be created in the cloud and is defined using Kubernetes Node extended resources. This enables the Kubernetes scheduler to handle capacity tracking and accounting. The extended resource is named `kata.peerpods.io/vm`, and defines the maximum number of peer-pods that you can create in the cluster.

The total capacity of the peer-pod VMs running in the cloud is defined as Kubernetes Node extended resources. This enables the Kubernetes scheduler to handle capacity tracking and accounting. The extended resource is named `kata.peerpods.io/vm`, and defines the maximum number of peer-pods that you can create in the cluster.

File buffers appear and are accounted for in multiple locations:
A link:https://https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/[mutating webhook] removes any resource-specific entries from the pod specifications and adds them to the peer-pods extended resources. This enables the Kubernetes scheduler to account for these extended resources, ensuring the peer-pod is only scheduled when resources are available.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
A link:https://https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/[mutating webhook] removes any resource-specific entries from the pod specifications and adds them to the peer-pods extended resources. This enables the Kubernetes scheduler to account for these extended resources, ensuring the peer-pod is only scheduled when resources are available.
A link:https://https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/[mutating webhook] removes any cpu and memory resource-specific entries from the pod specification (if it exists) and adds a peer-pods extended resource to the pod specification. This enables the Kubernetes scheduler to account for these extended resources, ensuring the peer-pod is only scheduled when capacity is available.

== Creating peer-pod VM images for {sandboxed-containers-first}

include::modules/sandboxed-containers-creating-peer-pod-vm-images.adoc[leveloffset=+1]
To use {sandboxed-containers-first} with peer-pods, you must prepare your {product-title} cluster, and create a peer-pod VM image before installing the {sandboxed-containers-operator}. You can install the {sandboxed-containers-operator} using either the web console or OpenShift CLI (`oc`).
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
To use {sandboxed-containers-first} with peer-pods, you must prepare your {product-title} cluster, and create a peer-pod VM image before installing the {sandboxed-containers-operator}. You can install the {sandboxed-containers-operator} using either the web console or OpenShift CLI (`oc`).
To use {sandboxed-containers-first} with peer-pods, you must prepare your {product-title} cluster, and create a pod VM image before installing the {sandboxed-containers-operator}. You can install the {sandboxed-containers-operator} using either the web console or OpenShift CLI (`oc`).

@cpmeadors
Copy link
Copy Markdown

In the rendered preview, I am seeing the channel name is still "stable-1.3". It should be "stable". I am also seeing the runtimeclass as "kata" in the peerpod examples. That should probably be kata-remote-cc. Not easy to find the lines in the source because I think they are variables.

@cpmeadors
Copy link
Copy Markdown

cpmeadors commented Apr 4, 2023

I am also not seeing a section to describe installing the kataconfig with the appropriate options to enable peerpods.

[edit] I see that this will be in a different PR. Will review that when it is ready.

@MirzWeiss
Copy link
Copy Markdown
Owner Author

I am also not seeing a section to describe installing the kataconfig with the appropriate options to enable peerpods.

[edit] I see that this will be in a different PR. Will review that when it is ready.

@cpmeadors this PR only covers the updates to the resource requirements and prereqs. I have other PRs to cover those sections, that's why those updates don't appear here.

MirzWeiss pushed a commit that referenced this pull request Dec 22, 2024
TELCODOCS-1990: Docfooding feedback #2 applied

TELCODOCS-1990: Docfooding feedback #3 applied

TELCODOCS-1990: Docfooding feedback #4 applied

TELCODOCS-1990: Docfooding feedback #5 applied

TELCODOCS-1990: Docfooding feedback #6 applied

TELCODOCS-1990: Docfooding feedback #7 applied

TELCODOCS-1990: Docfooding feedback #8 applied

TELCODOCS-1990: Docfooding feedback #9 applied

TELCODOCS-1990: Docfooding feedback #10 applied

TELCODOCS-1990: Docfooding feedback #11 applied

TELCODOCS-1990: Peer review feedback applied

TELCODOCS-1990: Dev review feedback applied

TELCODOCS-1990: Dev/Peer review feedback applied

TELCODOCS-1990: Dev/Peer #2 review feedback applied

TELCODOCS-1990: Dev #2 review feedback applied

TELCODOCS-1990: Peer review squad feedback applied
MirzWeiss pushed a commit that referenced this pull request Jan 30, 2025
TELCODOCS-1990: Docfooding feedback #2 applied

TELCODOCS-1990: Docfooding feedback #3 applied

TELCODOCS-1990: Docfooding feedback #4 applied

TELCODOCS-1990: Docfooding feedback #5 applied

TELCODOCS-1990: Docfooding feedback #6 applied

TELCODOCS-1990: Docfooding feedback #7 applied

TELCODOCS-1990: Docfooding feedback #8 applied

TELCODOCS-1990: Docfooding feedback #9 applied

TELCODOCS-1990: Docfooding feedback #10 applied

TELCODOCS-1990: Docfooding feedback #11 applied

TELCODOCS-1990: Peer review feedback applied

TELCODOCS-1990: Dev review feedback applied

TELCODOCS-1990: Dev/Peer review feedback applied

TELCODOCS-1990: Dev/Peer #2 review feedback applied

TELCODOCS-1990: Dev #2 review feedback applied

TELCODOCS-1990: Peer review squad feedback applied
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants