forked from docs/doc-exports
qiujiandong1
ab1e53a279
Reviewed-by: Gergo-Bence Lorincz <a200452876@noreply.gitea.eco.tsi-dev.otc-service.com> Co-authored-by: qiujiandong1 <qiujiandong1@huawei.com> Co-committed-by: qiujiandong1 <qiujiandong1@huawei.com>
988 lines
90 KiB
HTML
988 lines
90 KiB
HTML
<a name="cce_10_0652"></a><a name="cce_10_0652"></a>
|
|
|
|
<h1 class="topictitle1">Managing Node Pool Configurations</h1>
|
|
<div id="body0000001513278792"><p id="cce_10_0652__p3447143816358">If the default node configurations in a cluster do not meet service requirements, you can fine-tune parameters for core components, such as kubelet, kube-proxy, and the container engine, within the node pool. Fine-tuning these parameters ensures efficient resource utilization and meet workload demands.</p>
|
|
<div class="p" id="cce_10_0652__p174173411618">The following parameters can be configured for a node pool:<ul id="cce_10_0652__ul58760307414"><li id="cce_10_0652__li1787610301046"><a href="#cce_10_0652__section54143014011">kubelet</a></li><li id="cce_10_0652__li787653010418"><a href="#cce_10_0652__section223816513111">kube-proxy</a></li><li id="cce_10_0652__li09241456846"><a href="#cce_10_0652__section942261815116">Docker (Available Only for Docker Node Pools)</a></li><li id="cce_10_0652__li1523185910420"><a href="#cce_10_0652__section67111932324">containerd (Available Only for containerd Node Pools)</a></li><li id="cce_10_0652__li48518598412"><a href="#cce_10_0652__section249014511626">Networking Components (Available Only for CCE Turbo Clusters)</a></li><li id="cce_10_0652__li1532012115513"><a href="#cce_10_0652__section1438131316315">Pod Security Groups (Available Only for CCE Turbo Clusters)</a></li><li id="cce_10_0652__li99953404235"><a href="#cce_10_0652__section1952192315133">Node Pools</a></li></ul>
|
|
</div>
|
|
<div class="section" id="cce_10_0652__section2858332152410"><h4 class="sectiontitle">Notes and Constraints</h4><ul id="cce_10_0652__ul9441337183912"><li id="cce_10_0652__li114411237143910">The configuration parameters of the default node pool (specified by <strong id="cce_10_0652__b16989233500">DefaultPool</strong>) cannot be modified.</li><li id="cce_10_0652__li1144173718394">This function is supported only in clusters of <strong id="cce_10_0652__b175166467547">v1.15 or later</strong>. It is not displayed for versions earlier than v1.15.</li></ul>
|
|
</div>
|
|
<div class="section" id="cce_10_0652__section97539111349"><h4 class="sectiontitle">Using the Console</h4><ol id="cce_10_0652__ol1382319288914"><li id="cce_10_0652__li38014448466"><span>Log in to the <span id="cce_10_0652__ph174851113565">CCE console</span> and click the cluster name to access the cluster console.</span></li><li id="cce_10_0652__li18276185084113"><span>In the navigation pane, choose <span class="uicontrol" id="cce_10_0652__uicontrol9667319135619"><b>Nodes</b></span>. Then click the <span class="uicontrol" id="cce_10_0652__uicontrol1566719197564"><b>Node Pools</b></span> tab.</span></li><li id="cce_10_0652__li1927765074118"><span>Locate the target node pool and choose <strong id="cce_10_0652__b7561838135613">More</strong> > <strong id="cce_10_0652__b35627384567">Manage</strong>.</span><p><p id="cce_10_0652__p9551817455"></p>
|
|
<p id="cce_10_0652__p1247184513"></p>
|
|
</p></li><li id="cce_10_0652__li12277135064113"><span>In the <span class="uicontrol" id="cce_10_0652__uicontrol10546427105916"><b>Manage Configurations</b></span> window, modify the node pool parameter values based on service requirements. For details about the parameters, see <a href="cce_10_0213.html#cce_10_0213__section126051117129">kube-apiserver configurations</a>.</span></li></ol>
|
|
</div>
|
|
<div class="section" id="cce_10_0652__section186921921195519"><h4 class="sectiontitle">Using an API</h4><p id="cce_10_0652__p12692115018431">You can modify the CCE cluster parameter configurations using an API. </p>
|
|
<p id="cce_10_0652__p7585132812506"><strong id="cce_10_0652__b166551319509">PUT /api/v3/projects/{project_id}/clusters/{cluster_id}/nodepools/{nodepool_id}/configuration</strong></p>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table91257276511" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row171247277517"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.5.4.1.3.1.1"><p id="cce_10_0652__p1112582765115">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="85%" id="mcps1.3.5.4.1.3.1.2"><p id="cce_10_0652__p5125182785120">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row1912412775118"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.5.4.1.3.1.1 "><p id="cce_10_0652__p17125132715511">project_id</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.5.4.1.3.1.2 "><p id="cce_10_0652__p9126827135120">Project ID. </p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row171241427115110"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.5.4.1.3.1.1 "><p id="cce_10_0652__p141261227135113">cluster_id</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.5.4.1.3.1.2 "><p id="cce_10_0652__p312732718514">Cluster ID. </p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row101244272519"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.5.4.1.3.1.1 "><p id="cce_10_0652__p4129102725117">nodepool_id</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.5.4.1.3.1.2 "><p id="cce_10_0652__p9129102712514">Node pool ID. </p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<p id="cce_10_0652__p11275352193115">The request body is as follows:</p>
|
|
<pre class="screen" id="cce_10_0652__screen13275652173111">{
|
|
"kind" : "Configuration",
|
|
"apiVersion" : "v3",
|
|
"metadata" : {
|
|
"name" : "configuration"
|
|
},
|
|
"spec" : {
|
|
"packages" : [ {
|
|
"name" : "kubelet",
|
|
"configurations" : [ {
|
|
"name" : "system-reserved-mem",
|
|
"value" : 600
|
|
}, {
|
|
"name" : "kube-reserved-mem",
|
|
"value" : 800
|
|
} ]
|
|
} ]
|
|
}
|
|
}</pre>
|
|
<p id="cce_10_0652__p12275135253116">The following parameters are modified:</p>
|
|
<ul id="cce_10_0652__ul927513522318"><li id="cce_10_0652__li72751752163111"><strong id="cce_10_0652__b2020874019150">system-reserved-mem</strong>: Set it to <strong id="cce_10_0652__b6208104015153">600</strong> MiB.</li><li id="cce_10_0652__li162756524315"><strong id="cce_10_0652__b1785905261517">kube-reserved-mem</strong>: Set it to <strong id="cce_10_0652__b2085920529158">800</strong> MiB.</li></ul>
|
|
</div>
|
|
<div class="section" id="cce_10_0652__section54143014011"><a name="cce_10_0652__section54143014011"></a><a name="section54143014011"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">kubelet</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table635330505" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row829123017017"><th align="left" class="cellrowborder" valign="top" width="13.131313131313133%" id="mcps1.3.6.2.1.7.1.1"><p id="cce_10_0652__p42911301501">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11.111111111111112%" id="mcps1.3.6.2.1.7.1.2"><p id="cce_10_0652__p1329830803">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="25.252525252525253%" id="mcps1.3.6.2.1.7.1.3"><p id="cce_10_0652__p6296301203">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="18.181818181818183%" id="mcps1.3.6.2.1.7.1.4"><p id="cce_10_0652__p12291330408">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="21.21212121212121%" id="mcps1.3.6.2.1.7.1.5"><p id="cce_10_0652__p52943012011">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11.111111111111112%" id="mcps1.3.6.2.1.7.1.6"><p id="cce_10_0652__p4272202215145">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row3309305011"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1429183014020">CPU Management Policy</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p132918305015">cpu-manager-policy</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p33015301009">CPU management policy configuration. For details, see <a href="cce_10_0551.html">CPU Scheduling</a>.</p>
|
|
<ul id="cce_10_0652__ul43018307015"><li id="cce_10_0652__li73012309017"><strong id="cce_10_0652__b1313910201128">none</strong>: disables pods from exclusively occupying CPUs. Select this value if you want a large pool of shareable CPU cores.</li><li id="cce_10_0652__li1730730101"><strong id="cce_10_0652__b1371610211629">static</strong>: enables pods to exclusively occupy CPUs. Select this value if your workload is sensitive to latency in CPU cache and scheduling.</li></ul>
|
|
<ul id="cce_10_0652__ul03063018013"><li id="cce_10_0652__li10305301808"><strong id="cce_10_0652__b10280423520">enhanced-static</strong>: allows burstable pods to preferentially use CPU cores. Select this value if your workload has huge peak-trough difference and is in the trough state most of the time.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p16307307010">Default: none</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p1330203010014">The CPU management policy does not apply to ECS (PM) node pools in CCE Turbo clusters.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p2510174311582">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row163015301208"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p18309301603">QPS for Requests to kube-apiserver</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p1630133013011">kube-api-qps</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p173073014014">Number of queries per second for communication with the API server.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p1530193010018">Default: 100</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p163014306019">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p8534124313580">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row5305308019"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1930630906">Burst for Requests to kube-apiserver</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p19301930403">kube-api-burst</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p23010302015">Maximum number of burst requests sent to the API server per second.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p73083010010">Default: 100</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p10301830907">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p13556184305817">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row130153019016"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p33017301006">Maximum Pods Managed by kubelet</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p33014306017">max-pods</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p23017309011">Maximum number of pods that can run on a node.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><ul id="cce_10_0652__ul12306301008"><li id="cce_10_0652__li43014301604">For a CCE standard cluster, the maximum number of pods is determined based on <a href="cce_10_0348.html#cce_10_0348__section16296174054019">the maximum number of pods on a node</a>.</li><li id="cce_10_0652__li230113013010">For a CCE Turbo cluster, the maximum number of pods is determined based on <a href="cce_10_0348.html#cce_10_0348__section15702175115573">the number of network interfaces on a CCE Turbo cluster node</a>.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p183015308013">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p12580174375813">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row11308301706"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p163093012020">Maximum Processes in Pod</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p83063014014">pod-pids-limit</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p16307304013">Maximum number of PIDs that can be used in each pod.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p63012301017">Default: -1, which indicates that the number of PIDs is not limited</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p13301830303">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p460314318589">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row8304309019"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p830030105">Use a Local IP Address as a Node's ClusterDNS</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p153053019018">with-local-dns</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p6307301005">The node's kubelet configuration will automatically use the default network interface's IP address as the preferred DNS address.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p173023015010">Default: false</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p4301308019">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p861954314585">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row16304301701"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p73053015011">Event QPS</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p1530153020015">event-qps</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p1030133015011">Number of events that can be generated per second.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p20303301709">Default: 5</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p5301830809">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p463316438584">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row231103014016"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p12309304013">Upper Limit for Burst Events</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p123083012019">event-burst</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p193011301011">Upper limit for burst event creation. The number of burst events can be temporarily increased to the specified value.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p030153014014">Default: 10</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p73113301906">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p1265013436581">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row133116307010"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p8315302018">Allowed Unsafe sysctls</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p123143011017">allowed-unsafe-sysctls</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p1316301702">Insecure system configuration allowed.</p>
|
|
<p id="cce_10_0652__p17311030202">Starting from <strong id="cce_10_0652__b126158491124">v1.17.17</strong>, CCE enables pod security policies for kube-apiserver. Add corresponding configurations to <strong id="cce_10_0652__b1661594919216">allowedUnsafeSysctls</strong> of a pod security policy to make the policy take effect. (This configuration is not required for clusters earlier than v1.17.17.) For details, see <a href="cce_10_0275.html#cce_10_0275__section155111941177">Example of Enabling Unsafe sysctls in a PSP</a>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p193153020017">Default: []</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p3314301803">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p566694335816">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row33233012016"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1831630606">Topology Manager Policy</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p183120301012">topology-manager-policy</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p03117301105">Set the topology management policy.</p>
|
|
<p id="cce_10_0652__p1331163016017">Valid values are as follows:</p>
|
|
<ul id="cce_10_0652__ul631830009"><li id="cce_10_0652__li183116301806"><strong id="cce_10_0652__b944811511834">restricted</strong>: kubelet accepts only pods that achieve optimal NUMA alignment on the requested resources.</li><li id="cce_10_0652__li193117301300"><strong id="cce_10_0652__b1654145316310">best-effort</strong>: kubelet preferentially selects pods that implement NUMA alignment on CPU and device resources.</li><li id="cce_10_0652__li183111301509"><strong id="cce_10_0652__b98506541932">none</strong> (default): The topology management policy is disabled.</li><li id="cce_10_0652__li183193010015"><strong id="cce_10_0652__b179471356534">single-numa-node</strong>: kubelet allows only pods that are aligned to the same NUMA node in terms of CPU and device resources.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p1432330600">Default: none</p>
|
|
</td>
|
|
<td class="cellrowborder" rowspan="2" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><div class="notice" id="cce_10_0652__note143215308012"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="cce_10_0652__p17321430603">Modifying <strong id="cce_10_0652__b62431817131010">topology-manager-policy</strong> and <strong id="cce_10_0652__b11797211107">topology-manager-scope</strong> will restart kubelet, and the resource allocation of pods will be recalculated based on the modified policy. In this case, running pods may restart or even fail to receive any resources.</p>
|
|
</div></div>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p66851843105818">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row7321301102"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p153219303010">Topology Manager Scope</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p53293016010">topology-manager-scope</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p43283017014">Configure the resource alignment granularity of the topology management policy. Valid values are as follows:</p>
|
|
<ul id="cce_10_0652__ul83211305012"><li id="cce_10_0652__li4326301007"><strong id="cce_10_0652__b6851783419">container</strong> (default)</li><li id="cce_10_0652__li183253011010"><strong id="cce_10_0652__b724712207410">pod</strong></li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p133211301005">Default: container</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p147011943135812">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row93263010014"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p432830105">Specified DNS Configuration File</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p13324301014">resolv-conf</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p11329301105">DNS resolution configuration file specified by the container</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p16327301309">Default: null</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p16321330903">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p7717104325813">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row332173013012"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1032193018019">Timeout for All Runtime Requests Except Long-running Requests</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p432130600">runtime-request-timeout</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p13328305011">Timeout interval of all runtime requests except long-running requests (pull, logs, exec, and attach).</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p143218301508">Default: 2m0s</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p173212301005">This parameter is available only in clusters of v1.21.10-r0, v1.23.8-r0, v1.25.3-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p873194355816">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row73211307019"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p123293012016">Allow kubelet to Pull Only One Image at a Time</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p63253019015">serialize-image-pulls</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p832930806">Pull an image in serial mode.</p>
|
|
<ul id="cce_10_0652__ul93214301019"><li id="cce_10_0652__li133211305015"><strong id="cce_10_0652__b14167155315019">false</strong>: recommended configuration so that an image can be pulled in parallel mode to improve pod startup.</li><li id="cce_10_0652__li1932230603"><strong id="cce_10_0652__b1214292135114">true</strong>: allows images to be pulled in serial mode.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><ul id="cce_10_0652__ul123214301015"><li id="cce_10_0652__li83217301905">Enabled by default if the cluster version is earlier than v1.21.12-r0, v1.23.11-r0, v1.27.3-r0, v1.28.1-r0, or v1.25.6-r0</li><li id="cce_10_0652__li43216301903">Disabled by default if the cluster version is v1.21.12-r0, v1.23.11-r0, v1.25.6-r0, v1.27.3-r0, v1.28.1-r0, or later</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p332103018018">This parameter is available only in clusters of v1.21.10-r0, v1.23.8-r0, v1.25.3-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p17746943125811">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row9321301308"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p13322302016">Image Repository Pull Limit per Second</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p73217301805">registry-pull-qps</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p123214302001">QPS upper limit of an image repository.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p63213011020">Default: 5</p>
|
|
<p id="cce_10_0652__p1321530402">Value range: 1 to 50</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p5325306020">This parameter is available only in clusters of v1.21.10-r0, v1.23.8-r0, v1.25.3-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p15761943195816">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row0333308019"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p332153020017">Maximum Bursty Image Pulls</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p19336307017">registry-burst</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p193312305011">Maximum number of burst image pulls.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p1033430101">Default: 10</p>
|
|
<p id="cce_10_0652__p4338305013">The value ranges from 1 to 100 and must be greater than or equal to the value of <strong id="cce_10_0652__b937264616560">registry-pull-qps</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p14331230405">This parameter is available only in clusters of v1.21.10-r0, v1.23.8-r0, v1.25.3-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p127731843205819">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row73343010014"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1033103011014">Maximum Number of Container Log Files</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p16331330004">container-log-max-files</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p193319305013">Maximum number of container log files. When the number of existing log files exceeds this value, the earliest log file will be deleted to release space for new log files.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p1533130402">Default: 10</p>
|
|
<p id="cce_10_0652__p16333301406">Value range: 2 to 100</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p53363017016">This parameter is available only in clusters of v1.23.14-r0, v1.25.9-r0, v1.27.6-r0, v1.28.4-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p19787134355815">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row5331306016"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1334301901">Maximum Container Log File Size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p11334301809">container-log-max-size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p1233163011019">Maximum size of a single container log file. When the size of a log file reaches this value, the current log file will be closed and a new log file will be created to continue logging.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p63373017014">Default: 50 (in MiB)</p>
|
|
<p id="cce_10_0652__p1033430108">Value range: 1 to 4096 (in MiB)</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p153343015018">This parameter is available only in clusters of v1.23.14-r0, v1.25.9-r0, v1.27.6-r0, v1.28.4-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p11802104310586">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row33383020016"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p933163016019">Upper Limit for Image Garbage Collection</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p19337301017">image-gc-high-threshold</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p233930308">When the kubelet disk usage reaches this value, kubelet starts to collect image garbage.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p203310301004">Default: 80</p>
|
|
<p id="cce_10_0652__p133130703">Value range: 1 to 100</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p93313306013">To disable image garbage collection, set this parameter to <strong id="cce_10_0652__b41913181364">100</strong>.</p>
|
|
<p id="cce_10_0652__p16336308018">This parameter is available only in clusters of v1.23.14-r0, v1.25.9-r0, v1.27.6-r0, v1.28.4-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p9816154319580">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1433130301"><td class="cellrowborder" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p12338301604">Lower Limit for Image Garbage Collection</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p2331830507">image-gc-low-threshold</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p163333012020">Image garbage collection stops when the disk usage drops below the specified threshold.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p13317301304">Default: 70</p>
|
|
<p id="cce_10_0652__p193314306016">Value range: 1 to 100</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p83323017010">The value of this parameter cannot be greater than the upper limit for image garbage collection.</p>
|
|
<p id="cce_10_0652__p3331730909">This parameter is available only in clusters of v1.23.14-r0, v1.25.9-r0, v1.27.6-r0, v1.28.4-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p98301143205812">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row13337302015"><td class="cellrowborder" rowspan="2" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p33313018017">Node Memory Reservation</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p11335301807">system-reserved-mem</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p1733430408">Reserved system memory for OS system daemons like sshd and udev.</p>
|
|
</td>
|
|
<td class="cellrowborder" rowspan="2" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p93383019012">Default: automatically calculated, which varies depending on node flavors. For details, see <a href="cce_10_0178.html">Node Resource Reservation Rules</a>.</p>
|
|
</td>
|
|
<td class="cellrowborder" rowspan="2" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p6331330608">The <strong id="cce_10_0652__b20607195613431">kube-reserved-mem</strong> and <strong id="cce_10_0652__b2981758134315">system-reserved-mem</strong> combined cannot exceed 50% of the minimum node's memory flavor in the node pool.</p>
|
|
<p id="cce_10_0652__p9331430704"></p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p6845743115817">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1533230308"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p3331630705">kube-reserved-mem</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p153314301503">Reserved Kubernetes memory for Kubernetes daemons like kubelet and container runtime.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p58603436587">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1034123016018"><td class="cellrowborder" rowspan="6" valign="top" width="13.131313131313133%" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p14331030708">Hard Eviction</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p20331301306">memory.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.252525252525253%" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p17336301100">Available memory on a node.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="18.181818181818183%" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p9338306014">The value is fixed at 100 MiB.</p>
|
|
</td>
|
|
<td class="cellrowborder" rowspan="12" valign="top" width="21.21212121212121%" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p334730806">For details, see <a href="https://kubernetes.io/docs/concepts/scheduling-eviction/node-pressure-eviction/" target="_blank" rel="noopener noreferrer">Node-pressure Eviction</a>.</p>
|
|
<div class="notice" id="cce_10_0652__note1134133015010"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="cce_10_0652__p7347308011"><strong id="cce_10_0652__b169519733816">Exercise caution</strong> when modifying an eviction configuration item. Improper configuration may cause pods to be frequently evicted or fail to be evicted when the node is overloaded.</p>
|
|
</div></div>
|
|
<p id="cce_10_0652__p173433016019">kubelet can identify the following specific file system identifiers:</p>
|
|
<ul id="cce_10_0652__ul1634103018015"><li id="cce_10_0652__li1034930701"><strong id="cce_10_0652__b17191838123916">nodefs</strong>: main file system of a node. It is used for emptyDir volumes that are not supported by memory, local disk volumes, and log storage. For example, <strong id="cce_10_0652__b1239852204216">nodefs</strong> contains <strong id="cce_10_0652__b741565516427">/var/lib/kubelet/</strong>.</li><li id="cce_10_0652__li1734133014010"><strong id="cce_10_0652__b18918115154315">imagefs</strong>: file system partition used by a container engine.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.111111111111112%" headers="mcps1.3.6.2.1.7.1.6 "><p id="cce_10_0652__p10876114318584">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row133410303019"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p19349306014">nodefs.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p93420303010">Percentage of the available capacity in the filesystem used by kubelet.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p12344301208">Default: 10%</p>
|
|
<p id="cce_10_0652__p6343302006">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p4889104319584">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row134143013012"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p19341304019">nodefs.inodesFree</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p4341301010">Percentage of available inodes in the filesystem used by kubelet.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p734730602">Default: 5%</p>
|
|
<p id="cce_10_0652__p1734173019012">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p19904743185818">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row163420307010"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p534133018013">imagefs.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p103414301203">Percentage of the available capacity in the filesystem used by container runtimes to store resources such as images.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p12345301206">Default: 10%</p>
|
|
<p id="cce_10_0652__p173411303015">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p139191043155815">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1134530908"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p0343308019">imagefs.inodesFree</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p18346301102">Percentage of available inodes in the filesystem used by container runtimes to store resources such as images.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p18343304011">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p13348301507">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p99331343175817">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1346301008"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p15347301804">pid.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p1034123018017">Percentage of allocatable PIDs reserved for pods.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p133453012014">Default: 10%</p>
|
|
<p id="cce_10_0652__p03414307016">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p1594844325820">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1335173012018"><td class="cellrowborder" rowspan="6" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1734153018016">Soft Eviction</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p23453016020">memory.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p2342302016">Available memory on a node.</p>
|
|
<p id="cce_10_0652__p93413015015">The value must be greater than the hard eviction value of the same parameter, and the eviction grace period (<strong id="cce_10_0652__b610714217013">evictionSoftGracePeriod</strong>) must be configured accordingly.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p10341230201">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p63453011010">Value range: 100 to 1000000 (in MiB)</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.5 "><p id="cce_10_0652__p18962043195815">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row63511301405"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1035123018011">nodefs.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p16356304017">Percentage of the available capacity in the filesystem used by kubelet.</p>
|
|
<p id="cce_10_0652__p13533010019">The value must be greater than the hard eviction value of the same parameter, and the eviction grace period (<strong id="cce_10_0652__b16944144815015">evictionSoftGracePeriod</strong>) must be configured accordingly.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p103511309013">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p203516301708">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p13977184311585">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row735163018017"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p435113014018">nodefs.inodesFree</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p435530803">Percentage of available inodes in the filesystem used by kubelet.</p>
|
|
<p id="cce_10_0652__p93553014011">The value must be greater than the hard eviction value of the same parameter, and the eviction grace period (<strong id="cce_10_0652__b139469488011">evictionSoftGracePeriod</strong>) must be configured accordingly.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p1359301205">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p7351730304">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p189921343185820">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row23513301203"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p12351430206">imagefs.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p8351730506">Percentage of the available capacity in the filesystem used by container runtimes to store resources such as images.</p>
|
|
<p id="cce_10_0652__p12351301807">The value must be greater than the hard eviction value of the same parameter, and the eviction grace period (<strong id="cce_10_0652__b594712481403">evictionSoftGracePeriod</strong>) must be configured accordingly.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p3351530403">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p133512307011">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p6654417587">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row7352301404"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1435123016012">imagefs.inodesFree</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p13519301900">Percentage of available inodes in the filesystem used by container runtimes to store resources such as images.</p>
|
|
<p id="cce_10_0652__p7357307013">The value must be greater than the hard eviction value of the same parameter, and the eviction grace period (<strong id="cce_10_0652__b69481548803">evictionSoftGracePeriod</strong>) must be configured accordingly.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p7358302010">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p9351930201">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p1420134416585">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row535153011011"><td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.1 "><p id="cce_10_0652__p1351930800">pid.available</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.2 "><p id="cce_10_0652__p535123016013">Percentage of allocatable PIDs reserved for pods.</p>
|
|
<p id="cce_10_0652__p83563010017">The value must be greater than the hard eviction value of the same parameter, and the eviction grace period (<strong id="cce_10_0652__b16949148807">evictionSoftGracePeriod</strong>) must be configured accordingly.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.3 "><p id="cce_10_0652__p93515301508">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p1435143012015">Value range: 1% to 99%</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.6.2.1.7.1.4 "><p id="cce_10_0652__p934444155820">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
<div class="section" id="cce_10_0652__section223816513111"><a name="cce_10_0652__section223816513111"></a><a name="section223816513111"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">kube-proxy</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table723125716" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row62301853118"><th align="left" class="cellrowborder" valign="top" width="13%" id="mcps1.3.7.2.1.7.1.1"><p id="cce_10_0652__p7230051912">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11%" id="mcps1.3.7.2.1.7.1.2"><p id="cce_10_0652__p92301756117">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="39%" id="mcps1.3.7.2.1.7.1.3"><p id="cce_10_0652__p323011519114">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="13%" id="mcps1.3.7.2.1.7.1.4"><p id="cce_10_0652__p172304517114">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="13%" id="mcps1.3.7.2.1.7.1.5"><p id="cce_10_0652__p1823005918">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11%" id="mcps1.3.7.2.1.7.1.6"><p id="cce_10_0652__p1126518585">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row152301654116"><td class="cellrowborder" valign="top" width="13%" headers="mcps1.3.7.2.1.7.1.1 "><p id="cce_10_0652__p182303520112">Minimum Connection Tracking Entries</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.7.2.1.7.1.2 "><p id="cce_10_0652__p22301854120">conntrack-min</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="39%" headers="mcps1.3.7.2.1.7.1.3 "><p id="cce_10_0652__p18230251816">The minimum number of connection tracking entries that can be reserved in a Linux conntrack table. It guarantees that the system maintains a fixed number of connection tracking entries at all times, even when the actual number of connections is low. This prevents performance overhead associated with dynamically allocating or releasing resources.</p>
|
|
<p id="cce_10_0652__p82301651014">To obtain the value, run the following command:</p>
|
|
<pre class="screen" id="cce_10_0652__screen923055117">sysctl net.nf_conntrack_max</pre>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="13%" headers="mcps1.3.7.2.1.7.1.4 "><p id="cce_10_0652__p132301151110">Default: 131072</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="13%" headers="mcps1.3.7.2.1.7.1.5 "><p id="cce_10_0652__p1623095613">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.7.2.1.7.1.6 "><p id="cce_10_0652__p103914554584">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1023145714"><td class="cellrowborder" valign="top" width="13%" headers="mcps1.3.7.2.1.7.1.1 "><p id="cce_10_0652__p1823035710">Wait Time for a Closed TCP Connection</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.7.2.1.7.1.2 "><p id="cce_10_0652__p12231125111">conntrack-tcp-timeout-close-wait</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="39%" headers="mcps1.3.7.2.1.7.1.3 "><p id="cce_10_0652__p112311859112">Wait time of a closed TCP connection</p>
|
|
<p id="cce_10_0652__p82311951211">To obtain the value, run the following command:</p>
|
|
<pre class="screen" id="cce_10_0652__screen202316517112">sysctl net.netfilter.nf_conntrack_tcp_timeout_close_wait</pre>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="13%" headers="mcps1.3.7.2.1.7.1.4 "><p id="cce_10_0652__p3231657113">Default: 1h0m0s</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="13%" headers="mcps1.3.7.2.1.7.1.5 "><p id="cce_10_0652__p92311756116">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.7.2.1.7.1.6 "><p id="cce_10_0652__p458155545819">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
<div class="section" id="cce_10_0652__section942261815116"><a name="cce_10_0652__section942261815116"></a><a name="section942261815116"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">Docker (Available Only for Docker Node Pools)</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table13421518319" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row24179181811"><th align="left" class="cellrowborder" valign="top" width="12%" id="mcps1.3.8.2.1.7.1.1"><p id="cce_10_0652__p841718185117">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="12%" id="mcps1.3.8.2.1.7.1.2"><p id="cce_10_0652__p041761815118">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="26%" id="mcps1.3.8.2.1.7.1.3"><p id="cce_10_0652__p64171181413">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="16%" id="mcps1.3.8.2.1.7.1.4"><p id="cce_10_0652__p19417191817117">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="23%" id="mcps1.3.8.2.1.7.1.5"><p id="cce_10_0652__p174172181818">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11%" id="mcps1.3.8.2.1.7.1.6"><p id="cce_10_0652__p9624151599">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row141716188110"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.1 "><p id="cce_10_0652__p4417818918">Native Umask</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.2 "><p id="cce_10_0652__p741718181611">native-umask</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.8.2.1.7.1.3 "><p id="cce_10_0652__p1941781814115">The default value <strong id="cce_10_0652__b2520113711373">normal</strong> indicates that the umask value of the started container is <strong id="cce_10_0652__b1044795233719">0022</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.8.2.1.7.1.4 "><p id="cce_10_0652__p34171718511">Default: normal</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.8.2.1.7.1.5 "><p id="cce_10_0652__p141716181619">The parameter value cannot be changed.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.8.2.1.7.1.6 "><p id="cce_10_0652__p1662495185917">N/A</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row641712181414"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.1 "><p id="cce_10_0652__p144171189115">Base Size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.2 "><p id="cce_10_0652__p164171181312">docker-base-size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.8.2.1.7.1.3 "><p id="cce_10_0652__p1941791816119">Maximum data space that can be used by each container.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.8.2.1.7.1.4 "><p id="cce_10_0652__p154172181119">Default: 0</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.8.2.1.7.1.5 "><p id="cce_10_0652__p341731820118">The parameter value cannot be changed.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.8.2.1.7.1.6 "><p id="cce_10_0652__p1862455115915">N/A</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row74171718319"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.1 "><p id="cce_10_0652__p194171181914">Insecure Image Source Address</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.2 "><p id="cce_10_0652__p341731816117">insecure-registry</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.8.2.1.7.1.3 "><p id="cce_10_0652__p741712181812">Whether an insecure image source address can be used.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.8.2.1.7.1.4 "><p id="cce_10_0652__p1417111816114">false</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.8.2.1.7.1.5 "><p id="cce_10_0652__p1741710183110">The parameter value cannot be changed.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.8.2.1.7.1.6 "><p id="cce_10_0652__p1462413514595">N/A</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1841716187117"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.1 "><p id="cce_10_0652__p641710181617">Maximum Container Corefile Size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.2 "><p id="cce_10_0652__p10417418216">limitcore</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.8.2.1.7.1.3 "><p id="cce_10_0652__p1341721811114">Maximum size of a core file in a container. The unit is byte.</p>
|
|
<p id="cce_10_0652__p141718181112">If not specified, the value is <strong id="cce_10_0652__b212116198918">infinity</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.8.2.1.7.1.4 "><p id="cce_10_0652__p441710185115">Default: 5368709120</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.8.2.1.7.1.5 "><p id="cce_10_0652__p114179181611">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.8.2.1.7.1.6 "><p id="cce_10_0652__p143211528125916">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row14185181310"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.1 "><p id="cce_10_0652__p1541761818116">Maximum Handles in a Container</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.2 "><p id="cce_10_0652__p1741714182018">default-ulimit-nofile</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.8.2.1.7.1.3 "><p id="cce_10_0652__p124174181818">Maximum number of handles that can be used in a container.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.8.2.1.7.1.4 "><p id="cce_10_0652__p1141716185111">Default: {soft}:{hard}</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.8.2.1.7.1.5 "><p id="cce_10_0652__p94174181712">The value cannot exceed the value of the kernel parameter <strong id="cce_10_0652__b27102334919">nr_open</strong> and cannot be a negative number.</p>
|
|
<p id="cce_10_0652__p124179181219">You can run the following command to obtain the kernel parameter <strong id="cce_10_0652__b1035183619919">nr_open</strong>:</p>
|
|
<pre class="screen" id="cce_10_0652__screen1441701814114">sysctl -a | grep nr_open</pre>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.8.2.1.7.1.6 "><p id="cce_10_0652__p1834372815595">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1541861815117"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.1 "><p id="cce_10_0652__p1341814189119">Image Pull Timeout</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.8.2.1.7.1.2 "><p id="cce_10_0652__p74189181214">image-pull-progress-timeout</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.8.2.1.7.1.3 "><p id="cce_10_0652__p114189181814">If the image fails to be pulled before the timeout, the image pull will be canceled.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.8.2.1.7.1.4 "><p id="cce_10_0652__p19418218115">Default: 1m0s</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.8.2.1.7.1.5 "><p id="cce_10_0652__p1441811188112">This parameter is supported in v1.25.3-r0 and later.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.8.2.1.7.1.6 "><p id="cce_10_0652__p53631628115918">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
<div class="section" id="cce_10_0652__section67111932324"><a name="cce_10_0652__section67111932324"></a><a name="section67111932324"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">containerd (Available Only for containerd Node Pools)</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table77101732229" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row1070973218216"><th align="left" class="cellrowborder" valign="top" width="12%" id="mcps1.3.9.2.1.7.1.1"><p id="cce_10_0652__p17096321420">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="12%" id="mcps1.3.9.2.1.7.1.2"><p id="cce_10_0652__p107097321622">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="26%" id="mcps1.3.9.2.1.7.1.3"><p id="cce_10_0652__p87093322218">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="16%" id="mcps1.3.9.2.1.7.1.4"><p id="cce_10_0652__p1570963212212">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="23%" id="mcps1.3.9.2.1.7.1.5"><p id="cce_10_0652__p370919321523">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11%" id="mcps1.3.9.2.1.7.1.6"><p id="cce_10_0652__p124881154115916">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row1170915321921"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p670911321926">Maximum Container Corefile Size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p157098328217">limitcore</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p17097324213">Maximum size of a core file in a container. The unit is byte.</p>
|
|
<p id="cce_10_0652__p1970910327218">If not specified, the value is <strong id="cce_10_0652__b1552785294">infinity</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p270913321223">Default: 5368709120</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p770915321525">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p124881854185918">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1470911326211"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p1870933218214">Maximum Handles in a Container</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p77091321324">default-ulimit-nofile</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p17709732426">Maximum number of handles that can be used in a container.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p16709103210210">Default: 1048576</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p0709143213210">The value cannot exceed the value of the kernel parameter <strong id="cce_10_0652__b7301143015102">nr_open</strong> and cannot be a negative number.</p>
|
|
<p id="cce_10_0652__p77092327210">You can run the following command to obtain the kernel parameter <strong id="cce_10_0652__b1913133606">nr_open</strong>:</p>
|
|
<pre class="screen" id="cce_10_0652__screen870919321321">sysctl -a | grep nr_open</pre>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p1747665914591">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row2709332529"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p187099324219">Image Pull Timeout</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p1570933211214">image-pull-progress-timeout</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p57091323213">If the image fails to be pulled before the timeout, the image pull will be canceled.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p27091432928">Default: 1m0s</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p970953219214">This parameter is supported in v1.25.3-r0 and later.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p85010593593">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row117091732227"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p17709203213218">Verification on Insure Skips</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p0709203211216">Verification on Insure Skips</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p3709332524">Whether to skip repository certificate verification.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p37097323211">Default: false</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p1770973219210">The parameter value cannot be changed.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p11488195419599">N/A</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row570914321527"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p970973214216">Maximum Number of Concurrent Requests for Downloading an Image at a Time</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p147095321423">max-concurrent-downloads</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p12709532727">This parameter specifies the maximum number of concurrent requests for downloading an image at a time.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p207091932421">Default: 3</p>
|
|
<p id="cce_10_0652__p1470913218219">Value range: 1 to 20</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p1709832720">If this parameter is set to a large value, the network performance of other services on the node may be affected or the disk I/O and CPU usage may increase.</p>
|
|
<p id="cce_10_0652__p670903217214">This parameter is available only in clusters of v1.23.14-r0, v1.25.9-r0, v1.27.6-r0, v1.28.4-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p157841479012">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row570973215215"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p16709173217216">Maximum Container Log Line Size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p1770913327213">max-container-log-line-size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p167091432625">Maximum log line size of a container, in the unit of bytes. The log lines exceeding the limit will be split into multiple lines.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p770910321526">Default: 16384</p>
|
|
<p id="cce_10_0652__p9709103211210">Value range: 1 to 2097152</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p2070903211213">A larger value will lead to more containerd memory consumption.</p>
|
|
<p id="cce_10_0652__p270963218216">This parameter is available only in clusters of v1.23.14-r0, v1.25.9-r0, v1.27.6-r0, v1.28.4-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p11806177905">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row18801432219"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p870913321210">Base Size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p15709032828">container-base-size</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p11709332324">Maximum data space that can be used by each container.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p1870910326215">Default: 0</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><p id="cce_10_0652__p1170915325211">The parameter value cannot be changed.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p1648845425918">N/A</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row1371012326215"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p20709232229">Substitute Image Repository</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p27095324211">registry-mirrors</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p1270933220216">You can configure one or multiple substitute image repositories to be selected when obtaining images from the container runtime.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p8709173214215">If you do not specify this parameter, the <strong id="cce_10_0652__b17519152015383">docker.io</strong> image repository will be used by default, and the SWR image repository will be used as a substitute.</p>
|
|
<p id="cce_10_0652__p1870910324218">An image repository must be an IP address or domain name. A substitute image repository must be an IP address or domain name starting with <strong id="cce_10_0652__b117421354174312">http://</strong> or <strong id="cce_10_0652__b646025704311">https://</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><ul id="cce_10_0652__ul1470993215216"><li id="cce_10_0652__li97091332128">Add local image repositories for faster image pulling.</li><li id="cce_10_0652__li157099329217">Configure multiple image repositories for higher fault tolerance and availability.</li></ul>
|
|
<p id="cce_10_0652__p07097323214">This parameter is available only in clusters of v1.23.17-r0, v1.25.12-r0, v1.27.9-r0, v1.28.7-r0, v1.29.3-r0, or later versions.</p>
|
|
<div class="notice" id="cce_10_0652__note177107321124"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="cce_10_0652__p117107321021">If the image repository or its substitute is configured incorrectly, containers may not be able to pull the necessary image.</p>
|
|
</div></div>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p17488125435916">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row47108321023"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.1 "><p id="cce_10_0652__p1871016321925">Certificate Authentication Skipped Image Repository</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.9.2.1.7.1.2 "><p id="cce_10_0652__p157104321528">insecure-registries</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26%" headers="mcps1.3.9.2.1.7.1.3 "><p id="cce_10_0652__p1971023219211">When you specify image repositories, you can bypass security certificate-based authentication. This is typically done to connect to an insecure or self-signed image repository.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.9.2.1.7.1.4 "><p id="cce_10_0652__p871023214215">This parameter is left blank by default.</p>
|
|
<p id="cce_10_0652__p157108323212">Enter an IP address or domain name.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23%" headers="mcps1.3.9.2.1.7.1.5 "><ul id="cce_10_0652__ul37105329214"><li id="cce_10_0652__li15710203211215">Use this function only in development or test environments, not in production environments.</li><li id="cce_10_0652__li371033212216">Enable this option only when using a self-signed certificate or when attempting to access a private image repository that cannot obtain an authorized certificate.</li></ul>
|
|
<p id="cce_10_0652__p1571016327215">This parameter is available only in clusters of v1.23.17-r0, v1.25.12-r0, v1.27.9-r0, v1.28.7-r0, v1.29.3-r0, or later versions.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.9.2.1.7.1.6 "><p id="cce_10_0652__p1488554205918">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
<div class="section" id="cce_10_0652__section249014511626"><a name="cce_10_0652__section249014511626"></a><a name="section249014511626"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">Networking Components (Available Only for CCE Turbo Clusters)</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table1049016519210" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row7489175111216"><th align="left" class="cellrowborder" valign="top" width="12.871287128712872%" id="mcps1.3.10.2.1.7.1.1"><p id="cce_10_0652__p7489125111214">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="10.891089108910892%" id="mcps1.3.10.2.1.7.1.2"><p id="cce_10_0652__p15489751328">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="25.742574257425744%" id="mcps1.3.10.2.1.7.1.3"><p id="cce_10_0652__p17489115116216">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="15.841584158415841%" id="mcps1.3.10.2.1.7.1.4"><p id="cce_10_0652__p448985120214">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="23.762376237623762%" id="mcps1.3.10.2.1.7.1.5"><p id="cce_10_0652__p54897511123">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="10.891089108910892%" id="mcps1.3.10.2.1.7.1.6"><p id="cce_10_0652__p175286408019">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row144901851425"><td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.10.2.1.7.1.1 "><p id="cce_10_0652__p1048915514216">Node Pool Container ENI Pre-binding</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.2 "><p id="cce_10_0652__p144899512020">enable-node-nic-configuration</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.10.2.1.7.1.3 "><p id="cce_10_0652__p3489115110211">Whether to enable network interface pre-binding in a node pool.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.841584158415841%" headers="mcps1.3.10.2.1.7.1.4 "><p id="cce_10_0652__p1149019511622">Default: false</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23.762376237623762%" headers="mcps1.3.10.2.1.7.1.5 "><p id="cce_10_0652__p114901751227">After network component configuration is disabled in a node pool, the dynamic container network interface pre-binding parameter settings of the node pool are the same as those of cluster-level parameter settings.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.6 "><p id="cce_10_0652__p1752884016019">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row549017511728"><td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.10.2.1.7.1.1 "><p id="cce_10_0652__p949015511427">Network interface threshold</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.2 "><p id="cce_10_0652__p1449013513216">Network interface threshold</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.10.2.1.7.1.3 "><p id="cce_10_0652__p11490951427">Low threshold of the number of bound network interfaces: High threshold of the number of bound network interfaces</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.841584158415841%" headers="mcps1.3.10.2.1.7.1.4 "><p id="cce_10_0652__p1049016514210">Default: 0:0</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23.762376237623762%" headers="mcps1.3.10.2.1.7.1.5 "><div class="note" id="cce_10_0652__note449015111214"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="cce_10_0652__p7490105118213">This parameter is being discarded. Use the dynamic pre-binding parameters of the other four network interfaces.</p>
|
|
</div></div>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.6 "><p id="cce_10_0652__p1252813406018">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row049018511926"><td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.10.2.1.7.1.1 "><p id="cce_10_0652__p1249045110214">Minimum number of network interfaces bound to a node in a node pool</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.2 "><p id="cce_10_0652__p649020511822">nic-minimum-target</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.10.2.1.7.1.3 "><p id="cce_10_0652__p1149075120211">Minimum number of container network interfaces bound to a node.</p>
|
|
<p id="cce_10_0652__p3490125115215">The parameter value must be a positive integer. The value <strong id="cce_10_0652__b873475617716">10</strong> indicates that at least 10 container network interfaces must be bound to a node. If the number you specified exceeds the container network interface quota of the node, the network interface quota will be used.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.841584158415841%" headers="mcps1.3.10.2.1.7.1.4 "><p id="cce_10_0652__p144905511322">Default: 10</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23.762376237623762%" headers="mcps1.3.10.2.1.7.1.5 "><p id="cce_10_0652__p164908511527">Configure these parameters based on the number of pods typically running on most nodes.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.6 "><p id="cce_10_0652__p6880548302">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row5490451528"><td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.10.2.1.7.1.1 "><p id="cce_10_0652__p74901251427">Maximum number of network interfaces pre-bound to a node in a node pool</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.2 "><p id="cce_10_0652__p8490115115212">nic-maximum-target</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.10.2.1.7.1.3 "><p id="cce_10_0652__p9490105111219">After the number of network interfaces bound to a node exceeds the <strong id="cce_10_0652__b17831174914918">nic-maximum-target</strong> value, CCE will not proactively pre-bind network interfaces.</p>
|
|
<p id="cce_10_0652__p849035115215">Checking the upper limit of pre-bound container network interfaces is enabled only when the value of this parameter is greater than or equal to the minimum number of container network interfaces (<strong id="cce_10_0652__b1728134061014">nic-minimum-target</strong>) bound to a node.</p>
|
|
<p id="cce_10_0652__p5490351528">The parameter value must be a positive integer. The value <strong id="cce_10_0652__b178381921149">0</strong> indicates that checking the upper limit of pre-bound container network interfaces is disabled. If the number you specified exceeds the container network interface quota of the node, the network interface quota will be used.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.841584158415841%" headers="mcps1.3.10.2.1.7.1.4 "><p id="cce_10_0652__p8490185110218">Default: 0</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23.762376237623762%" headers="mcps1.3.10.2.1.7.1.5 "><p id="cce_10_0652__p34901951621">Configure these parameters based on the maximum number of pods running on most nodes.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.6 "><p id="cce_10_0652__p289520481302">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row0490451327"><td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.10.2.1.7.1.1 "><p id="cce_10_0652__p18490155116211">Number of network interfaces dynamically pre-bound to a node in a node pool</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.2 "><p id="cce_10_0652__p164901551622">nic-warm-target</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.10.2.1.7.1.3 "><p id="cce_10_0652__p049095114213">Extra network interfaces will be pre-bound after the <strong id="cce_10_0652__b62094501613">nic-minimum-target</strong> is used up in a pod. The value can only be a number.</p>
|
|
<p id="cce_10_0652__p349014511623">When the sum of the <strong id="cce_10_0652__b234220113182">nic-warm-target</strong> value and the number of network interfaces already bound to the node exceeds the <strong id="cce_10_0652__b43422013183">nic-maximum-target</strong> value, CCE will pre-bind the number of network interfaces specified by the difference between the <strong id="cce_10_0652__b134219110184">nic-maximum-target</strong> value and the current number of network interfaces bound to the node.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.841584158415841%" headers="mcps1.3.10.2.1.7.1.4 "><p id="cce_10_0652__p1749045111211">Default: 2</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23.762376237623762%" headers="mcps1.3.10.2.1.7.1.5 "><p id="cce_10_0652__p114907517212">Set the parameter value to the number of pods that can be scaled out instantaneously within 10 seconds on most nodes.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.6 "><p id="cce_10_0652__p1791134813020">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="cce_10_0652__row104902515211"><td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.10.2.1.7.1.1 "><p id="cce_10_0652__p19490155120217">Threshold for reclaiming the network interfaces pre-bound to a node in a node pool</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.2 "><p id="cce_10_0652__p149015115215">nic-max-above-warm-target</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.10.2.1.7.1.3 "><p id="cce_10_0652__p1490351224">Only when the difference between the number of idle network interfaces on a node and the <strong id="cce_10_0652__b420216320238">nic-warm-target</strong> value is greater than the threshold, the pre-bound network interfaces will be unbound and reclaimed. The value can only be a number.</p>
|
|
<ul id="cce_10_0652__ul1149035112210"><li id="cce_10_0652__li94908519215">A large value will speed up pod startup but slow down the unbinding of idle container network interfaces and decrease the IP address usage. <strong id="cce_10_0652__b12919142764010">Exercise caution when performing this operation.</strong></li><li id="cce_10_0652__li18490185117211">A small value will speed up the unbinding of idle container network interfaces and increase the IP address usage but will slow down pod startup, especially when a large number of pods increase instantaneously.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.841584158415841%" headers="mcps1.3.10.2.1.7.1.4 "><p id="cce_10_0652__p549095118218">Default: 2</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="23.762376237623762%" headers="mcps1.3.10.2.1.7.1.5 "><p id="cce_10_0652__p1049017516214">Set the parameter value to the difference between the number of pods that are frequently scaled on most nodes within minutes and the number of pods that are instantly scaled out on most nodes within 10 seconds.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.10.2.1.7.1.6 "><p id="cce_10_0652__p1852914011013">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
<div class="section" id="cce_10_0652__section1438131316315"><a name="cce_10_0652__section1438131316315"></a><a name="section1438131316315"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">Pod Security Groups (Available Only for CCE Turbo Clusters)</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table13381161316310" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row1538116131533"><th align="left" class="cellrowborder" valign="top" width="12%" id="mcps1.3.11.2.1.7.1.1"><p id="cce_10_0652__p18381101311318">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="12%" id="mcps1.3.11.2.1.7.1.2"><p id="cce_10_0652__p938115131231">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="38%" id="mcps1.3.11.2.1.7.1.3"><p id="cce_10_0652__p11381201312312">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11%" id="mcps1.3.11.2.1.7.1.4"><p id="cce_10_0652__p18381171315319">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="16%" id="mcps1.3.11.2.1.7.1.5"><p id="cce_10_0652__p17381191314312">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11%" id="mcps1.3.11.2.1.7.1.6"><p id="cce_10_0652__p38152057108">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row103811132312"><td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.11.2.1.7.1.1 "><p id="cce_10_0652__p43811213332">Default Pod Security Group</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12%" headers="mcps1.3.11.2.1.7.1.2 "><p id="cce_10_0652__p1938111311311">security_groups_for_nodepool</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="38%" headers="mcps1.3.11.2.1.7.1.3 "><p id="cce_10_0652__p16381131313319">You can enter the security group ID. If this parameter is not configured, the default security group of the cluster container network will be used, and a maximum of five security group IDs that are separated by semicolons (;) can be specified at a time.</p>
|
|
<p id="cce_10_0652__p838131310317">The priority of the security group is lower than that of the security group configured for <a href="cce_10_0288.html">SecurityGroups</a>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.11.2.1.7.1.4 "><p id="cce_10_0652__p538110131314">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="16%" headers="mcps1.3.11.2.1.7.1.5 "><p id="cce_10_0652__p538115136318">None</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11%" headers="mcps1.3.11.2.1.7.1.6 "><p id="cce_10_0652__p38158571017">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
<div class="section" id="cce_10_0652__section1952192315133"><a name="cce_10_0652__section1952192315133"></a><a name="section1952192315133"></a><div class="dropdownexpand"><div class="dropdowntitle" onclick="ExpandorCollapseNode(this)"><h4 class="sectiontitle">Node Pools</h4></div><div class="dropdowncontext"></div><div class="dropdowncontext">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cce_10_0652__table185218234139" frame="border" border="1" rules="all"><thead align="left"><tr id="cce_10_0652__row452192321313"><th align="left" class="cellrowborder" valign="top" width="11.881188118811881%" id="mcps1.3.12.2.1.7.1.1"><p id="cce_10_0652__p1552182301310">Item</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11.881188118811881%" id="mcps1.3.12.2.1.7.1.2"><p id="cce_10_0652__p552172318139">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="25.742574257425744%" id="mcps1.3.12.2.1.7.1.3"><p id="cce_10_0652__p25220236132">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="12.871287128712872%" id="mcps1.3.12.2.1.7.1.4"><p id="cce_10_0652__p1252523131313">Value</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="26.732673267326735%" id="mcps1.3.12.2.1.7.1.5"><p id="cce_10_0652__p4527232130">Modification</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="10.891089108910892%" id="mcps1.3.12.2.1.7.1.6"><p id="cce_10_0652__p2052123161320">Configuration Method</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="cce_10_0652__row105232316135"><td class="cellrowborder" valign="top" width="11.881188118811881%" headers="mcps1.3.12.2.1.7.1.1 "><p id="cce_10_0652__p10521623181316">Container-isolated Resource View</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.881188118811881%" headers="mcps1.3.12.2.1.7.1.2 "><p id="cce_10_0652__p1552323141316">enable-container-isolation</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.742574257425744%" headers="mcps1.3.12.2.1.7.1.3 "><p id="cce_10_0652__p145262312135">Enable this function to give each container a separate resource view. Containers only access and manage their own assigned CPUs, memory, and other resources.</p>
|
|
<p id="cce_10_0652__p19271554711"><strong id="cce_10_0652__b1520215231825">Privileged containers do not support resource isolation.</strong></p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="12.871287128712872%" headers="mcps1.3.12.2.1.7.1.4 "><p id="cce_10_0652__p35252311317">Default: false</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26.732673267326735%" headers="mcps1.3.12.2.1.7.1.5 "><p id="cce_10_0652__p76671549191516">Clusters of v1.27.16-r60, v1.28.15-r50, v1.29.15-r10, v1.30.14-r10, v1.31.10-r10, v1.32.6-r10, v1.33.5-r0, or later support this configuration, and only some <span id="cce_10_0652__ph326954215492">HCE OS 2.0</span> kernels are allowed.</p>
|
|
<ul id="cce_10_0652__ul14841219152216"><li id="cce_10_0652__li20841198223">x86: 5.10.0-182.0.0.95.r2825_235.hce2.x86_64 or later</li><li id="cce_10_0652__li128441910222">Arm: 5.10.0-182.0.0.95.r2825_235.hce2.aarch64 or later</li></ul>
|
|
<p id="cce_10_0652__p1974842102214">If the cluster version or OS kernel version does not meet the requirements, <a href="cce_10_0197.html">upgrade the cluster</a> or upgrade the OS (<a href="cce_10_0660.html">Upgrading an OS</a>).</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="10.891089108910892%" headers="mcps1.3.12.2.1.7.1.6 "><p id="cce_10_0652__p652102318139">Console/API</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div></div></div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="cce_10_0222.html">Managing Node Pools</a></div>
|
|
</div>
|
|
</div>
|
|
|