Namespace Limits

Limits in this Fragment apply to the complete Space and are enforced through a Resource Quota.

Kubernetes Resources

LimitDescription
Max PodsThe max number of pods allowed in a namespace
Max ServicesThe max number of services allowed in a namespace
Max Persistent Volumes ClaimsThe max number of persistent volume claims allowed in a namespace
Max SecretsThe max number of secrets allowed in a namespace
Max Config MapsThe max number of config maps allowed in a namespace
Max IngressesThe max number of ingresses allowed in a namespace
Max RolesThe max number of roles allowed in a namespace
Max Role BindingsThe max number of role bindings allowed in a namespace
Max Service AccountsThe max number of service accounts allowed in a namespace

CPU

LimitDescription
Max Limit CPUThe max sum of core limits defined on all containers per namespace
Max Requests CPUThe max sum of core requests defined on all containers per namespace

Memory

LimitDescription
Max Limit MemoryThe max sum of memory limits defined on all containers per namespace
Max Requests MemoryThe max sum of memory requests defined on all containers per namespace

Storage

LimitDescription
Max Requests StorageThe max sum of all requested storage trough persistent volume claims in a namespace
Max Limit Persistent Volume ClaimThe maximum limit of requested storage per persistent volume claim
Min Limit Persistent Volume ClaimThe minimum limit of requested storage per persistent volume claim
Max Limit Ephemeral StorageThe max sum of ephemeral storage limits defined on all containers per namespace
Max Requests Ephemeral StorageThe max sum of ephemeral storage requests defined on all containers per namespace
Empty Dir Storage AllowedIf true allows pods to specify an empty dir volume (enforced by admission controller)
Empty Dir Storage Default SizeThe default size of the empty dir volume if none specified (enforced by admission controller)
Empty Dir Storage Max SizeThe maximum size allowed for empty dir volumes (enforced by admission controller)

Advanced Options

LimitDescription
Enable Limit RangeDeploys a limit range object into the space that enforces default limits and limits per container and persistent volume claim
Enable Resource QuotaDeploys a resource quota object into the space that enforces namespace limits
Max Pod ContainerThe maximum number of containers allowed per pod (Enforced by admission controller)
Max pod termination grace period in secondsThe maximum allowed number of seconds to wait if a pod should be terminated
Use Cluster Role for Service AccountUses the given cluster role to create a rolebinding for the default and user service account in the space
Enable Admission ControllerMarks the namespace for the admission controller to check for certain security problems within container specifications and enforces some limits
Skip Admission controller pod security checksIf true the admission controller skips potential security issue checks on deployed pods
Set Node Selector for podsAutomatically makes sure the following node selector is set for each deployed pod (e.g. devspace.cloud/type=limited)
Set Tolerations for podsAutomatically makes sure the following tolerations are set for each deployed pod (e.g. devspace.cloud/taint=limited)

Custom Quotas

LimitDescription
Custom resourcequota limitsCustom resource quota limits that will be appended to the spec.hard Fragment of the created resource quota (e.g. "count/customresource=10,count/customresource2=10")