| ResourceQuota | requests/limits 总量、pods/services 数量上限 |
|---|---|
| LimitRange | defaultRequest/default/ max/min：容器未声明时兜底 |
| 行为 | 超额创建直接拒绝（403），事件里提示 quota 超限 |
| 搭配 | 配额生效后要求容器必须声明 requests/limits |
| 查看 | kubectl describe quota/limitrange -n dev |
组合示例
组合示例
apiVersion: v1
kind: ResourceQuota
metadata:
name: dev-quota
namespace: dev
spec:
hard:
requests.cpu: "8"
requests.memory: 16Gi
limits.cpu: "16"
limits.memory: 32Gi
pods: "50"
---
apiVersion: v1
kind: LimitRange
metadata:
name: dev-defaults
namespace: dev
spec:
limits:
- type: Container
default: { cpu: 500m, memory: 512Mi }
defaultRequest: { cpu: 100m, memory: 128Mi }
配额是团队自治的基础设施：没有配额，谁都能把集群资源吃光，出了事也说不清是谁的负载。