Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VPA: Add docs about AKS and EKS with Cilium #7655

Merged
merged 2 commits into from
Jan 8, 2025
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion vertical-pod-autoscaler/docs/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@
- [What are the parameters to VPA recommender?](#what-are-the-parameters-to-vpa-recommender)
- [What are the parameters to VPA updater?](#what-are-the-parameters-to-vpa-updater)
- [How can I configure VPA to manage only specific resources?](#how-can-i-configure-vpa-to-manage-only-specific-resources)
- [Special requirements when running in AKS?](#special-requirements-when-running-in-aks)
adrianmoisey marked this conversation as resolved.
Show resolved Hide resolved
- [Special requirements when running in EKS with Cilium?](#special-requirements-when-running-in-eks-with-cilium)
adrianmoisey marked this conversation as resolved.
Show resolved Hide resolved

### VPA restarts my pods but does not modify CPU or memory settings

Expand Down Expand Up @@ -294,4 +296,17 @@ Common use cases:

2. CPU-only VPA:
* Use controlledResources: ["cpu"] when you want to automate CPU resource allocation
* Useful when memory requirements are stable but CPU usage varies
* Useful when memory requirements are stable but CPU usage varies

### Special requirements when running in AKS?

When running a webhook in AKS, it blocks webhook requests for the kube-system namespace in order to protect the system.
See the [AKS FAQ page](https://learn.microsoft.com/en-us/azure/aks/faq#can-admission-controller-webhooks-impact-kube-system-and-internal-aks-namespaces-) for more info.

adrianmoisey marked this conversation as resolved.
Show resolved Hide resolved
The `--webhook-labels` paramater for the VPA admission-controller can be used to bypass this behaviour, if required by the user.

### Special requirements when running in EKS with Cilium?

adrianmoisey marked this conversation as resolved.
Show resolved Hide resolved
When running in EKS with Cilium, the EKS API server cannot route traffic to the overlap network. The VPA admission-controller
Pods either need to use host networking or be exposed through a service or ingress.
See the [Cilium Helm installation page](https://docs.cilium.io/en/stable/installation/k8s-install-helm/) for more info.
Loading