{"id":1017,"date":"2023-12-29T18:08:17","date_gmt":"2023-12-29T10:08:17","guid":{"rendered":"https:\/\/nj.transwarp.cn:8180\/?p=1017"},"modified":"2023-12-29T18:08:16","modified_gmt":"2023-12-29T10:08:16","slug":"k8s%e7%9a%84%e8%ae%a1%e7%ae%97%e8%b5%84%e6%ba%90","status":"publish","type":"post","link":"https:\/\/kbwp.transwarp.cn\/?p=1017","title":{"rendered":"k8s\u7684\u8ba1\u7b97\u8d44\u6e90"},"content":{"rendered":"<h3>\u6982\u8981\u63cf\u8ff0<\/h3>\n<hr \/>\n<h4>\u8ba1\u7b97\u8d44\u6e90\u6982\u8ff0<\/h4>\n<p>\u8ba1\u7b97\u8d44\u6e90\u5206\u4e3a\u4e24\u79cd\uff1a<strong>\u8d44\u6e90\u8bf7\u6c42<\/strong>(requests)\u548c<strong>\u8d44\u6e90\u9650\u5236<\/strong>(limits)\u3002\u8d44\u6e90\u8bf7\u6c42\u8868\u793a\u5bb9\u5668\u5e0c\u671b\u88ab\u5206\u914d\u5230\u7684\u8d44\u6e90\uff0c\u53ef\u4ee5\u5b8c\u5168\u4fdd\u8bc1\u7684\u8d44\u6e90;\u8d44\u6e90\u9650\u5236\u662f\u5bb9\u5668\u6700\u591a\u80fd\u4f7f\u7528\u5230\u7684\u8d44\u6e90\u91cf\u7684\u4e0a\u9650\uff0c\u8fd9\u4e2a\u4e0a\u9650\u503c\u4f1a\u5f71\u54cd\u8282\u70b9\u4e0a\u53d1\u751f\u8d44\u6e90\u7ade\u4e89\u65f6\u7684\u89e3\u51b3\u7b56\u7565\u3002<\/p>\n<p>\u5f53\u524d\u7248\u672c\u8ba1\u7b97\u8d44\u6e90\u5206\u4e3a<strong>CPU<\/strong>\u548c<strong>\u5185\u5b58<\/strong>\uff1bCPU\u5355\u4f4d\u4e3acore,\u5185\u5b58\u5355\u4f4d\u4e3a\u5b57\u8282<\/p>\n<h3>\u8be6\u7ec6\u8bf4\u660e<\/h3>\n<hr \/>\n<h4>\u8ba1\u7b97\u8d44\u6e90\u7684\u53c2\u6570<\/h4>\n<p>\u53c2\u6570\uff1a\uff08\uff09<\/p>\n<pre><code>spec.container[].resources.requests.cpu --> --cpu-shares\nspec.container[].resources.limits.cpu --> --cpu-period\nspec.container[].resources.requests.memory \u6ca1\u6709\u8f6c\u6362docker run\uff0c\u53ea\u7ed9kubernets\u7684\u8c03\u5ea6\u5668\nspec.container[].resources.limits.memory  --> --memory<\/code><\/pre>\n<pre><code>    spec:\n      containers:\n      - args:\n        - boot.sh\n        - SEARCH_HEAD\n        env:\n        - name: HEAD_PORT\n          value: \"9100\"\n        - name: HEAD_TARGET_HOST\n          value: ts-mjx-22:9200\n        - name: HEAD_LOG_DIR\n          value: \/var\/log\/head\n        image: ts-mjx-21:5000\/transwarp\/search-head:transwarp-5.2.3-final\n        imagePullPolicy: Always\n        name: search-head-search2\n        resources:\n          limits:\n            cpu: \"2\"\n            memory: 1025Mi\n          requests:\n            cpu: \"2\"\n            memory: 1Gi\n<\/code><\/pre>\n<ul>\n<li>\u5982\u679c\u4e0a\u9762\u51e0\u4e2a\u6ca1\u914d\u7f6e\uff0c\u4f1a\u4f7f\u7528\u9ed8\u8ba4\u7684\uff0c\u9ed8\u8ba4\u503c\u53d6\u51b3\u4e8e\u96c6\u7fa4<\/li>\n<li>requests\u6ca1\u914d\u7f6e\uff0c\u9ed8\u8ba4requests\u503c=limits\u503c<\/li>\n<li>\u5728\u4efb\u4f55\u60c5\u51b5\u4e0b\uff0climits\u503c&gt;=requests\u503c<\/li>\n<\/ul>\n<p>\u5982\u679c\u4e00\u4e2a\u5bb9\u5668\u5728\u8fd0\u884c\u8fc7\u7a0b\u4e2d\u4f7f\u7528\u4e86\u8d85\u51fa\u5176\u5185\u5b58limits\u914d\u7f6e\u7684\u5185\u5b58\u9650\u5236(oom)\uff0c\u90a3\u4e48\u5b83\u53ef\u80fd\u4f1a\u88ab\u6740\u6389\uff0c\u5982\u679c\u8fd9\u4e2a\u5bb9\u5668\u662f\u4e00\u4e2a\u53ef\u91cd\u542f\u7684\u5bb9\u5668\uff0c\u90a3\u4e48\u4e4b\u540e\u5b83\u4f1a\u88abkubelet\u91cd\u65b0\u542f\u52a8\u8d77\u6765\u3002<\/p>\n<p><strong>\u6848\u4f8b<\/strong>\uff1a<\/p>\n<p><strong>\u5728docker1.13.1\uff08tdh6.0\u4e4b\u524d\u7528\uff09\u4e0a\uff0c\u5f53container\u53d1\u751foom\u65f6\uff0c\u5e76\u4e0d\u4f1a\u88ab\u91cd\u65b0\u62c9\u8d77<\/strong>\u3002<\/p>\n<p>\u539f\u56e0\uff1a<\/p>\n<p>dockerd 1.13.1 \u91cc\u9762\u5b58\u5728\u6b7b\u9501\uff0c\u6216\u8005\u5728\u5185\u5b58\u4e0d\u8db3\u7684\u60c5\u51b5\u4e0b\u4e00\u4e9b\u8fdb\u7a0b\u4f1a\u5f02\u5e38\u9000\u51fa\u3002\u5bfc\u81f4 dockerd \u65e0\u6cd5\u83b7\u53d6 containerd \u7684\u6700\u65b0\u72b6\u6001\u3002<\/p>\n<p>kubernetes\u8ba4\u4e3acontainer\u5e94\u8be5\u91cd\u542f, \u8981\u91cd\u542fcontainer\u7684\u65f6\u5019. dockerd\u4f1a\u53d1\u9001kill\u4fe1\u53f7\u7ed9\u5bf9\u5e94container\u7684pid. \u4f46\u662f\u56e0\u4e3a\u548ccontainerd\u7684\u94fe\u63a5\u65ad\u6389\u4e86. dockerd\u4f1a\u8ba4\u4e3a\u8fd9\u4e2acontainer\u5e76\u6ca1\u6709\u6740\u6389. \u4f1a\u7ee7\u7eed\u6740\u8fd9\u4e2apid, \u4f46\u662f\u5b9e\u9645\u4e0apid\u53ef\u80fd\u5df2\u7ecf\u662f\u522b\u7684\u8fdb\u7a0b\u5728\u4f7f\u7528\u4e86.<br \/>\ncontainer\u91cc\u9762\u7684\u8fdb\u7a0b\u5df2\u7ecf\u6302\u6389\u4e86. \u4f46\u662fdockerd\u65e0\u6cd5\u53d1\u73b0. \u8fd9\u6837\u670d\u52a1\u7684container\u5c31\u4e0d\u4f1a\u88ab\u91cd\u65b0\u542f\u52a8.<\/p>\n<p>\u73b0\u8c61\uff1a<br \/>\npod\u72b6\u6001\u4e3a0\/1 Running<br \/>\n\u4f7f\u7528kubectl exec \u8fdb\u5165container\u65f6\u65e0\u6cd5\u8fdb\u5165\uff1a<br \/>\nrpc error : code = 2 desc = containerd: container not found<br \/>\n<img decoding=\"async\" src=\"http:\/\/www.mjxiang.cn\/blog\/20190904\/jV8Jf9wUoDYC.png\" alt=\"mark\" \/><\/p>\n<p><img decoding=\"async\" src=\"http:\/\/www.mjxiang.cn\/blog\/20190904\/Y410DB1GjSCO.png\" alt=\"mark\" \/><\/p>\n<p>\u67e5\u770bUp\u7684docker\u8fdb\u7a0b\u548c\u5b9e\u9645docker\u8fdb\u7a0b\u53d1\u73b0\u4e0d\u4e00\u81f4<br \/>\n<img decoding=\"async\" src=\"http:\/\/www.mjxiang.cn\/blog\/20190904\/hMiYbOseadKg.png\" alt=\"mark\" \/><\/p>\n<p>\u89e3\u51b3\u65b9\u6848\uff1a<\/p>\n<p>\u5347\u7ea7\u5230docker-monitor 1.0.2\uff0c<strong>\u91cd\u542fdocker-monitor\u548cdocker<\/strong>\u3002<\/p>\n<h4>\u8ba1\u7b97\u8d44\u6e90\u5e38\u89c1\u95ee\u9898<\/h4>\n<ul>\n<li>\n<p><strong>pod\u72b6\u6001\u4e3aPending\uff0c\u9519\u8bef\u4fe1\u606f\u4e3aFailedScheduling<\/strong><\/p>\n<p>\u539f\u56e0\uff1ascheduler \u672a\u80fd\u627e\u5230\u5408\u9002\u7684\u8282\u70b9\uff0c\u6216\u9009\u62e9\u7684\u8282\u70b9\u6ca1\u6709\u8db3\u591f\u7684\u8d44\u6e90\u6765\u8c03\u5ea6\uff0c\u6b64\u65f6\u4f1a\u4ea7\u751f\u4e00\u4e2aEvents<br \/>\n<code><code>kubectl describe pod [pod\u540d] | grep -A 3 Events    <\/code><\/code><\/p>\n<p>\u8fd9\u4e2a\u662f\u4ee3\u8868\u8fd9\u4e2a\u8282\u70b9\u4e0a\u7684CPU\u5df2\u7ecf\u4e0d\u8db3\u4ee5\u8c03\u5ea6\u8fd9\u4e2apod\uff0c\u540c\u7406memory(PodExceedsFreeMemory)<\/p>\n<pre><code>Events:\n  FirstSeen    LastSeen    Count From   Subobject    PathReason    Message\n  36s      5s      6       {scheduler}   FailedScheduling Failed for reason PodExceedsFreeCPU and possibly others<\/code><\/pre>\n<p>\u89e3\u51b3\u529e\u6cd5\uff1a<\/p>\n<ul>\n<li>\u82e5\u662f\u52a8\u6001pod\uff0c\u4e14\u975elabel\u56fa\u5b9apod\uff0c\u90a3\u4e48\u53ef\u4ee5\u589e\u52a0\u66f4\u591a\u7684\u8282\u70b9\uff1b<\/li>\n<li>\u505c\u6b62\u4e00\u4e9b\u4e0d\u5fc5\u8981\u7684pod\uff0c\u91ca\u653e\u8d44\u6e90\uff1b<\/li>\n<li>\u68c0\u67e5pod\u7684\u914d\u7f6e\uff08pod\u914d\u7f6ecpu require \u4e3a2\uff0c\u4f46\u662f\u8282\u70b9\u4e0a\u53ea\u67091\uff0c\u90a3\u4e48\u8fd9\u4e2apod\u5c06\u6c38\u8fdc\u65e0\u6cd5\u5728\u8fd9\u4e2a\u8282\u70b9\u4e0a\u8c03\u5ea6\uff09<\/li>\n<\/ul>\n<p>\u53ef\u4ee5\u4f7f\u7528kubectl describe nodes [node\u540d]<\/p>\n<p>\u603b\u8d44\u6e90\uff1a<\/p>\n<pre><code>Capacity:\ncpu:                12\nephemeral-storage:  153525Mi\nmemory:             32781488Ki\npods:               200\nstorage:            1006802Mi<\/code><\/pre>\n<p>\u53ef\u5206\u914d\u8d44\u6e90\uff1a<\/p>\n<pre><code class=\"language-shell\">Allocatable:\ncpu:                12\nephemeral-storage:  153525Mi\nmemory:             32781488Ki\npods:               200\nstorage:            1006802Mi<\/code><\/pre>\n<p>\u5df2\u5206\u914d\u8d44\u6e90<\/p>\n<pre><code class=\"language-shell\">Allocated resources:\n(Total limits may be over 100 percent, i.e., overcommitted.)\nCPU Requests  CPU Limits  Memory Requests  Memory Limits\n------------  ----------  ---------------  -------------\n0 (0%)        0 (0%)      0 (0%)           0 (0%)\n<\/code><\/pre>\n<p><img decoding=\"async\" src=\"http:\/\/www.mjxiang.cn\/blog\/20190904\/VWQwK9Dlt9yI.png\" alt=\"mark\" \/><\/p>\n<p>ps\uff1a<strong>TDH\u6ca1\u6709\u5bf9container\u505a\u4efb\u4f55\u9650\u5236<\/strong>\uff0c\u662f\u901a\u8fc7\u9650\u5236\u8fdb\u7a0b\u7684\u5185\u5b58\u548cCPU\u6765\u9650\u5236\u8d44\u6e90\u3002<\/p>\n<\/li>\n<li>\n<p><strong>pod\u72b6\u6001\u4e3aTerminated<\/strong><br \/>\n\u5f53\u5bb9\u5668\u4f7f\u7528\u7684\u8d44\u6e90\u8d85\u8fc7\u4e86\u5b83\u914d\u7f6e\u7684Limits\uff0c\u90a3\u4e48\u5b83\u53ef\u80fd\u4f1a\u88ab\u5f3a\u5236\u7ec8\u6b62\uff0c\u72b6\u6001\u4e3aTerminated\u3002\u4f46\u72b6\u6001\u4e3aTerminated\u7684\u539f\u56e0\u4e0d\u7528\u4e00\u5b9a\u662f\u56e0\u4e3a\u4f7f\u7528\u7684\u8d44\u6e90\u8d85\u8fc7\u4e86\u5b83\u914d\u7f6e\u7684Limits\u3002<\/p>\n<p><code><code>kubectl get pod  -o go-template=&#039;{{range.status.containerStatuses}}{{&quot;Container Name:&quot;}}{{.name}}{{&quot;\\r\\nLastState: &quot;}}{{.lastState}}{{end}}&#039; [pod\u540d]<\/code><\/code><\/p>\n<pre><code>[root@ts-mjx-21 ~]#  kubectl get pod  -o go-template='{{range.status.containerStatuses}}{{\"Container Name:\"}}{{.name}}{{\"\\r\\nLastState: \"}}{{.lastState}}{{end}}' inceptor-server-inceptor1-7b67b546f6-h8q5j\nContainer Name:inceptor-server-inceptor1\nLastState: map[terminated:map[finishedAt:2019-09-04T09:07:19Z reason:Error startedAt:2019-09-04T09:07:03Z containerID:docker:\/\/b1378a99e33302c2afc1abbae19227c4a59025f157e3908e97dd9c988e615b21 exitCode:1]]\n[root@ts-mjx-21 ~]#\n<\/code><\/pre>\n<p>\u8fd9\u4e2a\u662f\u672a\u80fd\u542f\u52a8docker container\uff0c\u5373docker container\u51fa\u73b0\u4e86\u95ee\u9898\uff0c\u9700\u8981\u6392\u67e5container\u7684\u95ee\u9898<\/p>\n<\/li>\n<\/ul>\n<h4>\u8d44\u6e90\u9650\u5236<\/h4>\n<p>\u521b\u5efanamespace<\/p>\n<pre><code class=\"language-shell\">  [root@ts-mjx-21 yaml]# kubectl create namespace front\n  namespace \"front\" created\n  [root@ts-mjx-21 yaml]#<\/code><\/pre>\n<p>\u521b\u5efa\u8d44\u6e90\u9650\u5236\u6587\u4ef6:limit.yaml<\/p>\n<pre><code class=\"language-yaml\">  apiVersion: v1\n  kind: LimitRange\n  metadata:\n      name: mylimits\n  spec:\n      limits:\n      - max:\n           cpu: \"4\"\n           memory: 2Gi\n        min:\n           cpu: 20m\n           memory: 6Mi\n        maxLimitRequestRatio: \n          cpu: 3      ---limits\u503c:requests\u503c<=3\n          memory: 2\n        type: Pod  \n       ---------------\n      - default:\n          cpu: 300m\n          memory: 200Mi\n        defaultRequest:\n           cpu: 200m\n           memory: 100Mi\n        max:\n           cpu: 2\n           memory: 1Gi\n        min:\n           cpu: 100m\n           memory: 3Mi\n        maxLimitRequestRatio:\n           cpu: 5\n           memory: 4\n        type: Container<\/code><\/pre>\n<p><strong>pod\u4e0d\u80fd\u8bbe\u7f6edefault request\u548cdefault limit<\/strong>\u3002<\/p>\n<pre><code class=\"language-shell\">  [root@ts-mjx-21 yaml]# kubectl create -f limits.yaml --namespace=front\n  limitrange \"mylimits\" created\n  [root@ts-mjx-21 yaml]# kubectl describe limits mylimit --namespace=front\n  Name:       mylimits\n  Namespace:  front\n  Type        Resource  Min   Max  Default Request  Default Limit  Max Limit\/Request Ratio\n  ----        --------  ---   ---  ---------------  -------------  -----------------------\n  Pod         cpu       20m   4    -                -              3\n  Pod         memory    6Mi   2Gi  -                -              2\n  Container   cpu       100m  2    200m             300m           5\n  Container   memory    3Mi   1Gi  100Mi            200Mi          4\n\n  [root@ts-mjx-21 yaml]#<\/code><\/pre>\n<pre><code class=\"language-shell\">  [root@ts-mjx-21 yaml]# kubectl run zk --image=ts-mjx-21:5000\/transwarp\/zookeeper:transwarp-6.0.2-final --namespace=front\n  deployment \"zk\" created\n  [root@ts-mjx-21 yaml]# kubectl get pod -n front\n  NAME                 READY     STATUS              RESTARTS   AGE\n  zk-69b8c766c-9xhsx   0\/1       ContainerCreating   0          13s\n  [root@ts-mjx-21 yaml]# kubectl get pod -n front\n  NAME                 READY     STATUS              RESTARTS   AGE\n  zk-69b8c766c-9xhsx   0\/1       ContainerCreating   0          32s\n  [root@ts-mjx-21 yaml]# kubectl get pod zk-69b8c766c-9xhsx -n front -o yaml | grep resources -C 8\n    resourceVersion: \"5418021\"\n    selfLink: \/api\/v1\/namespaces\/front\/pods\/zk-69b8c766c-9xhsx\n    uid: 59d9615c-cf06-11e9-920b-005056a6098a\n  spec:\n    containers:\n    - image: ts-mjx-21:5000\/transwarp\/zookeeper:transwarp-6.0.2-final\n      imagePullPolicy: IfNotPresent\n      name: zk\n      resources:\n        limits:\n          cpu: 300m\n          memory: 200Mi\n        requests:\n          cpu: 200m\n          memory: 100Mi\n      terminationMessagePath: \/dev\/termination-log\n      terminationMessagePolicy: File\n  [root@ts-mjx-21 yaml]#<\/code><\/pre>\n<p>\u5931\u8d25\u6848\u4f8b\uff1a<\/p>\n<pre><code class=\"language-shell\">  [root@ts-mjx-21 yaml]# cat invalid-pod.yaml\n  apiVersion: v1\n  kind: Pod\n  metadata:\n    name: invalid-zk\n  spec:\n    containers:\n    - name: invalid-zk\n      image: ts-mjx-21:5000\/transwarp\/zookeeper:transwarp-6.0.2-final\n      resources:\n        limits:\n          cpu: \"3\"\n          memory: 100Mi\n  [root@ts-mjx-21 yaml]# kubectl create -f invalid-pod.yaml --namespace=front\n  Error from server (Forbidden): error when creating \"invalid-pod.yaml\": pods \"invalid-zk\" is forbidden: maximum cpu usage per Container is 2, but limit is 3.<\/code><\/pre>\n<p>\u53ef\u4ee5\u770b\u5230\u65e0\u6cd5\u521b\u5efapod\uff0c\u8d44\u6e90\u9650\u5236\uff0c\u540c\u6837\u53ef\u4ee5\u8c03\u6574limits\u548crequets\u7684\u6bd4\u4f8b\uff0c\u8d85\u8fc72\u65f6\u4f1a\u62a5\u9519<\/p>\n<pre><code class=\"language-shell\">  [root@ts-mjx-21 yaml]# cat invalid-pod-limit.yaml\n  apiVersion: v1\n  kind: Pod\n  metadata:\n    name: invalid-zk\n  spec:\n    containers:\n    - name: invalid-zk\n      image: ts-mjx-21:5000\/transwarp\/zookeeper:transwarp-6.0.2-final\n      resources:\n        limits:\n          cpu: \"1\"\n          memory: 512Mi\n        requests:\n          cpu: \"0.8\"\n          memory: 250Mi\n  [root@ts-mjx-21 yaml]# kubectl create -f invalid-pod-limit.yaml --namespace=front\n  Error from server (Forbidden): error when creating \"invalid-pod-limit.yaml\": pods \"invalid-zk\" is forbidden: memory max limit to request ratio per Pod is 2, but provided ratio is 2.048000.\n  [root@ts-mjx-21 yaml]#\n<\/code><\/pre>\n<h4>Resource QoS<\/h4>\n<p>requests\u548climits\u5bf9\u4e0d\u540c\u8ba1\u7b97\u8d44\u6e90\u7c7b\u578b\u7684\u9650\u5236\u673a\u5236<br \/>\n\u5728\u914d\u7f6e\u8d44\u6e90\u65f6\u8981\u786e\u4fdd\uff1a<\/p>\n<blockquote>\n<p>\u200b requests  \u200b requests &lt;= limits<\/p>\n<\/blockquote>\n<ul>\n<li>\n<p>\u53ef\u538b\u7f29\u8d44\u6e90<\/p>\n<ul>\n<li>\n<p>\u53ef\u538b\u7f29\u8d44\u6e90\u53ea\u6709CPU<\/p>\n<\/li>\n<li>\n<p>pod\u53ef\u4ee5\u5f97\u5230requests\u914d\u7f6e\u7684CPU\u4f7f\u7528\u91cf\uff0c\u662f\u5426\u80fd\u4f7f\u7528\u8d85\u8fc7Requests\u7684\u503c\u7684\u90e8\u5206\u53d6\u51b3\u4e8e\u7cfb\u7edf\u7684\u8d1f\u8f7d\u548c\u8c03\u5ea6<\/p>\n<\/li>\n<li>\n<p>\u7a7a\u95f2CPU\u8d44\u6e90\u6309\u7167\u5bb9\u5668Requests\u503c\u7684\u6bd4\u4f8b\u5206\u914d\uff0c\u6700\u5927\u4e0d\u8d85\u8fc7limits\u503c<\/p>\n<\/li>\n<li>\n<p>\u5982\u679cpod\u4f7f\u7528\u4e86\u8d85\u8fc7limits\u503c\uff0c\u90a3\u4e48cgroups\u4f1a\u5bf9pod\u4e2d\u7684\u5bb9\u5668\u7684CPU\u505a\u9650\u6d41\uff0c\u5982\u679cpod\u6ca1\u6709\u914d\u7f6elimits\uff0c\u90a3\u4e48pod\u4f1a\u62a2\u5360\u6240\u6709\u7a7a\u95f2\u7684CPU\u8d44\u6e90(\u4ecev1.2\u7248\u672c\u5f00\u59cb\u9ed8\u8ba4\u662f\u5f00\u542f--cpu-cfs-quata\uff0c\u56e0\u6b64\u9ed8\u8ba4\u60c5\u51b5\u5fc5\u987b\u914d\u7f6eLimits)<\/p>\n<\/li>\n<li>\n<p>\u4e0d\u53ef\u538b\u7f29\u8d44\u6e90<\/p>\n<\/li>\n<li>\n<p>\u4e0d\u53ef\u538b\u7f29\u8d44\u6e90\u76ee\u524d\u6709\u5185\u5b58<\/p>\n<\/li>\n<li>\n<p>\u5982\u679cpod\u4f7f\u7528\u4e86\u5c11\u4e8erequests\u503c\u7684\u5185\u5b58\uff0c\u90a3\u4e48\u8fd9\u4e2apod\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\uff0c\u4f46\u662f\u5f53pod\u4f7f\u7528\u8d85\u8fc7requests\u503c\u800c\u5c0f\u4e8elimits\uff0c\u90a3\u4e48\u5f53\u5176\u4ed6\u5c11\u4e8erequests \u5185\u5b58\u7684pod\u9700\u8981\u7533\u8bf7requests\u5185\u7684\u5185\u5b58\u8d44\u6e90\u6216\u8005\u9700\u8981\u90e8\u7f72pod\u5230\u8fd9\u4e2a\u8282\u70b9\u4e0a\uff0c\u90a3\u4e48kubernetes\u53ef\u80fd\u4f1a\u6740\u6389\u8fd9\u4e2apod\uff0c\u6765\u91ca\u653e\u5185\u5b58<\/p>\n<\/li>\n<li>\n<p>\u5f53pod\u4f7f\u7528\u4e86\u8d85\u8fc7limits\u503c\u7684\u5185\u5b58\u65f6\uff0ckernel\u4f1a\u6740\u6389pod\u6240\u6709\u5bb9\u5668\u7684\u6240\u6709\u8fdb\u7a0b\u4e2d\u4f7f\u7528\u5185\u5b58\u6700\u591a\u7684\u4e00\u4e2a\uff0c\u76f4\u5230pod\u5185\u5b58\u4f7f\u7528\u4e0d\u8d85\u8fc7limits\u4e3a\u6b62\u3002<\/p>\n<\/li>\n<li>\n<p>\u5bf9\u8c03\u5ea6\u7b56\u7565\u7684\u5f71\u54cd<\/p>\n<\/li>\n<li>\n<p>kubelet\u901a\u8fc7\u8ba1\u7b97pod\u4e2d\u6240\u6709\u5bb9\u5668\u7684requests\u7684\u603b\u548c\u6765\u51b3\u5b9a\u5bf9pod\u7684\u8c03\u5ea6<\/p>\n<\/li>\n<li>\n<p>\u4e0d\u7ba1\u662fCPU\u548c\u5185\u5b58\uff0cscheduler\u548ckubelet\u90fd\u4f1a\u786e\u4fdd\u8282\u70b9\u4e0a\u6240\u6709\u7684pod\u7684requests\u7684\u7efc\u5408\u4e0d\u4f1a\u8d85\u8fc7\u8be5\u8282\u70b9\u4e0a\u53ef\u5206\u914d\u7ed9\u5bb9\u5668\u4f7f\u7528\u7684\u8d44\u6e90\u5bb9\u91cf\u4e0a\u9650<\/p>\n<\/li>\n<li>\n<p>QoS Classes<\/p>\n<\/li>\n<\/ul>\n<pre><code>\u5728\u4e00\u4e2aover committed\u7684\u7cfb\u7edf\u4e2d\uff0c\u7531\u4e8e\u5bb9\u5668\u8d1f\u8f7d\u7684\u6ce2\u52a8\u53ef\u80fd\u5bfc\u81f4\u64cd\u4f5c\u7cfb\u7edf\u7684\u8d44\u6e90\u4e0d\u8db3\uff0c\u90a3\u4e48\u6700\u7ec8\u53ef\u80fd\u6709\u90e8\u5206container\u88ab\u6740\u6389\uff0c\u6709\u4e0b\u9762\u51e0\u4e2a\u8861\u91cfcontainer\u91cd\u8981\u6027\u7684\u7b49\u7ea7\u3002<\/code><\/pre>\n<ul>\n<li>Guaranteed(\u975e\u5e38\u53ef\u9760)<br \/>\npod\u4e2d<strong>\u6240\u6709\u5bb9\u5668\u90fd\u5b9a\u4e49\u4e86<\/strong>requests\u548climits\uff0c\u4e14<strong>requests\u548climits\u503c\u76f8\u7b49<\/strong>\u5e76<strong>\u4e0d\u4e3a0<\/strong>\uff0c\u6216\u53ea\u5b9a\u4e49limits\uff0c\u672a\u5b9a\u4e49requests(\u672a\u5b9a\u4e49requests\u65f6\uff0crequests\u548climits\u4e00\u81f4)<\/li>\n<li>Burstable(\u8f83\u53ef\u9760\u7684)\uff0c<br \/>\npod\u7684<strong>\u4e00\u90e8\u5206\u5bb9\u5668\u5728\u4e00\u79cd\u6216\u591a\u79cd\u8d44\u6e90\u7c7b\u578b\u7684\u8d44\u6e90\u914d\u7f6e\u4e2d\u5b9a\u4e49\u4e86<\/strong>requests\u548climits\uff0c\u4e14requests<strong>\u5c0f\u4e8e<\/strong>limits(\u90fd\u4e0d\u4e3a0)\uff1bpod\u4e00<strong>\u90e8\u5206\u5bb9\u5668\u672a\u5b9a\u4e49<\/strong>\u8d44\u6e90\u914d\u7f6e(requests\u548climits\u90fd\u672a\u5b9a\u4e49)<\/li>\n<li>\n<p>Best-Effort(\u4e0d\u592a\u53ef\u9760)<br \/>\npod\u4e2d<strong>\u6240\u6709\u5bb9\u5668\u90fd\u672a\u5b9a\u4e49<\/strong>requests\u548climits<\/p>\n<p><strong>TDH\u6240\u6709pod\u90fd\u662fBest-Effort<\/strong>\u3002 <\/p>\n<p>\u67e5\u770bqosclass\u7b49\u7ea7\uff1a<br \/>\n<code><code>kubectl get pod [pod\u540d] -o yaml | grep -C 5 qosClass  <\/code><\/code><\/p>\n<\/li>\n<\/ul>\n<pre><code class=\"language-shell\">  [root@ts-mjx-21 ~]# kubectl get pod inceptor-server-inceptor2-75d98bcb7b-sg579 -o yaml | grep -C 5 qosClass\n  running:\n    startedAt: 2019-08-29T10:49:06Z\n  hostIP: 172.22.21.23\n  phase: Running\n  podIP: 172.22.21.23\n  qosClass: BestEffort\n  startTime: 2019-08-29T10:49:05Z\n[root@ts-mjx-21 ~]#<\/code><\/pre>\n<ul>\n<li>\n<p>\u7279\u70b9<br \/>\n\u5f53CPU Requests\u65e0\u6cd5\u5f97\u5230\u6ee1\u8db3\u65f6\uff0c\u5bb9\u5668\u5f97\u5230\u7684CPU\u4f1a\u88ab\u538b\u7f29\u9650\u6d41<\/p>\n<p>\u5f53\u5185\u5b58\u8d44\u6e90\u4e0d\u8db3\u65f6<\/p>\n<ul>\n<li>Best-Effort\u7684pod\u4f1a\u88ab\u7b2c\u4e00\u4f18\u5148\u7ea7\u6740\u6389\u3002(\u7531\u4e8e\u6ca1\u6709\u8bbe\u7f6elimits\uff0c\u8fd9\u7c7bpod\u5728\u8d44\u6e90\u5145\u8db3\u60c5\u51b5\u4e0b\u53ef\u4ee5\u5145\u5206\u4f7f\u7528\u6240\u6709\u95f2\u7f6e\u8d44\u6e90)<\/li>\n<li>Burstable\u7684Pod\uff0c\u5f53\u7cfb\u7edf\u8d44\u6e90\u4e0d\u8db3\uff0c\u4e14\u6ca1\u6709Best-Effort pod\u53ef\u4ee5\u88ab\u6740\u6b7b\u65f6\uff0c\u8fd9\u7c7bpod\u4f1a\u88ab\u6740\u6389<\/li>\n<li>Guaranteed \u4e00\u822c\u60c5\u51b5\u4e0b\u8fd9\u7c7bpod\u4e0d\u4f1a\u88ab\u6740\u6b7b\uff0c\u4f46\u662f\u5f53\u8d44\u6e90\u7d27\u7f3a\uff0c\u53c8\u6ca1\u6709\u66f4\u4f4e\u7b49\u7ea7\u7684pod\u65f6\uff0c\u4e5f\u4f1a\u88ab\u6740\u6389<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>OOM\u8bb0\u5206\u503c<\/p>\n<p>oom\u57fa\u7840\u5206 = \u8fdb\u7a0b\u6d88\u8017\u5185\u5b58\u767e\u5206\u6bd4 * 100 * 10 (0-1000)<\/p>\n<p>oom\u6700\u7ec8\u5206 = oom\u57fa\u7840\u5206 + oom_score_adj  (0-1000)<\/p>\n<ul>\n<li>Guaranteed pod\u7684\u6700\u7ec8\u5206\u4e00\u822c\u662f0\u62161<\/li>\n<li>BestEffort pod\u7684\u6700\u7ec8\u5206\u80af\u5b9a\u662f1000<\/li>\n<li>Burstable Pod\u7684\u6700\u7ec8\u5206\u8303\u56f4\u662f2-1000<\/li>\n<\/ul>\n<p>oom_score_adj:<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<table>\n<thead>\n<tr>\n<th>QoS<\/th>\n<th>oom_score_adj<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Guaranteed<\/td>\n<td>-998<\/td>\n<\/tr>\n<tr>\n<td>Burstable<\/td>\n<td>min(max(2,1000-(1000 * memoryRequestBytes) \/ machineMenmoryCapacityBytes), 999)<\/td>\n<\/tr>\n<tr>\n<td>BestEffort<\/td>\n<td>1000<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5982\u679c\u4e00\u4e2aBurstable Pod\u7684\u67d0\u4e2a\u5bb9\u5668\u4e2d\u67d0\u4e2a\u8fdb\u7a0b\u4f7f\u7528\u7684\u5185\u5b58\u6bd4\u5bb9\u5668\u7684request\u503c\u9ad8\uff0c\u90a3\u4e48\u8fd9\u4e2a\u8fdb \u7a0b\u7684OOM\u6700\u7ec8\u5206\u6570\u4f1a\u662f1000\uff0c\u5426\u5219\u5b83\u7684OOM\u6700\u7ec8\u5206\u4f1a\u5c0f\u4e8e1000<\/p>\n<p>OOM\u7684\u7279\u6b8a\u8bb0\u5206\u89c4\u5219\uff1a<\/p>\n<ul>\n<li>kubelet\u548cdocker\u7684OOM_SCORE_ADJ\u4e3a-998<\/li>\n<li>\u5982\u679c\u914d\u7f6e\u8fdb\u7a0b\u8c03\u6574\u503cOOM_SCORE_ADJ\u4e3a-999\uff0c\u90a3\u4e48\u8fd9\u7c7b\u8fdb\u7a0b\u4e0d\u4f1a\u88abOOM Killer \u6740\u6389<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u6982\u8981\u63cf\u8ff0 \u8ba1\u7b97\u8d44\u6e90\u6982\u8ff0 \u8ba1\u7b97\u8d44\u6e90\u5206\u4e3a\u4e24\u79cd\uff1a\u8d44\u6e90\u8bf7\u6c42(requests)\u548c\u8d44\u6e90\u9650\u5236(limits)\u3002\u8d44\u6e90\u8bf7\u6c42\u8868\u793a ..<\/p>\n<div class=\"clear-fix\"><\/div>\n<p><a href=\"https:\/\/kbwp.transwarp.cn\/?p=1017\" title=\"read more...\">Read more<\/a><\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,51],"tags":[],"class_list":["post-1017","post","type-post","status-publish","format-standard","hentry","category-uncategorized","category-internal_usage"],"acf":[],"_links":{"self":[{"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=\/wp\/v2\/posts\/1017","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1017"}],"version-history":[{"count":5,"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=\/wp\/v2\/posts\/1017\/revisions"}],"predecessor-version":[{"id":11592,"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=\/wp\/v2\/posts\/1017\/revisions\/11592"}],"wp:attachment":[{"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1017"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1017"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kbwp.transwarp.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1017"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}