Node Resource Interface

Jan 1, 0001

Definition

The Node Resource Interface (NRI) is a framework designed to manage and allocate resources for nodes within a distributed system, such as a Kubernetes cluster. It provides a standardized way to interact with node-level resources, enabling efficient resource management and scheduling. The NRI ensures that resources like CPU, memory, and storage are allocated according to the policies and requirements defined by the cluster administrator.

Secure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: secure-pod
spec:
  containers:
  - name: secure-container
    image: secure-image:latest
    resources:
      requests:
        memory: "256Mi"
        cpu: "500m"
      limits:
        memory: "512Mi"
        cpu: "1"
  securityContext:
    runAsNonRoot: true
    capabilities:
      drop:
      - ALL

Insecure Settings Example

apiVersion: v1
kind: Pod
metadata:
  name: insecure-pod
spec:
  containers:
  - name: insecure-container
    image: insecure-image:latest
    resources:
      requests:
        memory: "128Mi"
        cpu: "250m"
      # No limits defined, leading to potential resource exhaustion
  securityContext:
    runAsNonRoot: false
    capabilities:
      add:
      - NET_ADMIN