Updated requests and added cost validation scenario.

cluster-config/linkerd.yaml

@@ -879,10 +879,10 @@ spec:
             port: 9990
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "10Mi"
         securityContext:
           runAsUser: 2103
@@ -973,10 +973,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -1150,10 +1150,10 @@ spec:
             port: 9995
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -1186,10 +1186,10 @@ spec:
             port: 9996
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -1278,10 +1278,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -1433,10 +1433,10 @@ spec:
             port: 9996
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -1525,10 +1525,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -1621,10 +1621,10 @@ spec:
             - "-log-level=info"
             resources:
               limits:
-                cpu: "1"
+                cpu: "500m"
                 memory: "250Mi"
               requests:
-                cpu: "100m"
+                cpu: "50m"
                 memory: "50Mi"
             securityContext:
               runAsUser: 2103
@@ -1711,10 +1711,10 @@ spec:
             port: 9994
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -1803,10 +1803,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -2150,10 +2150,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -2341,10 +2341,10 @@ spec:
             port: 3000
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "1024Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 472
@@ -2436,10 +2436,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -2576,10 +2576,10 @@ spec:
             port: 9995
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -2671,10 +2671,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -2843,10 +2843,10 @@ spec:
             port: 9997
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -2936,10 +2936,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false
@@ -3094,10 +3094,10 @@ spec:
             port: 9998
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "50Mi"
         securityContext:
           runAsUser: 2103
@@ -3189,10 +3189,10 @@ spec:
           initialDelaySeconds: 2
         resources:
           limits:
-            cpu: "1"
+            cpu: "500m"
             memory: "250Mi"
           requests:
-            cpu: "100m"
+            cpu: "50m"
             memory: "20Mi"
         securityContext:
           allowPrivilegeEscalation: false

cluster-config/nginx-ingress.yaml

@@ -360,10 +360,10 @@ spec:
             failureThreshold: 3
           resources:
             limits:
-              cpu: 300m
+              cpu: 100m
               memory: 300Mi
             requests:
-              cpu: 300m
+              cpu: 50m
               memory: 300Mi
             
       hostNetwork: false
@@ -437,7 +437,7 @@ spec:
               cpu: 100m
               memory: 100Mi
             requests:
-              cpu: 100m
+              cpu: 50m
               memory: 100Mi
             
       nodeSelector:

deploy-app/README.md

@@ -73,7 +73,7 @@ helm init --tiller-namespace kube-system --service-account tiller-sa
 helm version
 # Install Anchore
 kubectl create ns anchore
-helm install --name anchore --namespace anchore stable/anchore-engine
+helm install anchore stable/anchore-engine --namespace anchore
 ```
 
 > Note: It may take a few minutes for all of the pods to start and for the CVE data to be loaded into the database. 

deploy-app/app.yaml

@@ -26,10 +26,10 @@ spec:
         resources:
           limits:
             memory: 250Mi
-            cpu: 250m
+            cpu: 100m
           requests:
             memory: 100Mi
-            cpu: 100m
+            cpu: 50m
       dnsPolicy: ClusterFirst
 ---
 apiVersion: v1
@@ -103,10 +103,10 @@ spec:
           resources:
             limits:
               memory: 1G
-              cpu: 1000m
+              cpu: 500m
             requests:
               memory: 500Mi
-              cpu: 500m
+              cpu: 250m
       volumes: 
         - name: fruitshare
           azureFile:

validate-scenarios/README.md

@@ -201,7 +201,14 @@ kubectl run --generator=run-pod/v1 -it --rm centosprod --image=centos -n product
 
 * View Chargeback Dashboard
 
-???
+```bash
+# Do a port-forward to see Kubecost Dashboard
+kubectl port-forward deployment/kubecost-cost-analyzer -n kubecost 9090
+# Open in Browser
+open "http://localhost:9090"
+```
+
+![Sample Kubecost Dashboard](/validate-scenarios/img/kubecost.png)
 
 ## Validate - Secrets Mgmt