What is Kubernetes Resource Scope?

Question

Accepted Answer

**Resource Scope** — control which resources are available per namespace.

```yaml
apiVersion: v1
kind: ResourceQuota
metadata:
  name: compute-quota
  namespace: production
spec:
  hard:
    requests.cpu: "16"
    requests.memory: "32Gi"
    limits.cpu: "32"
    limits.memory: "64Gi"
    pods: "50"
    services: "20"
    persistentvolumeclaims: "10"
    secrets: "50"
    configmaps: "50"
    count/deployments.apps: "10"
    count/jobs.batch: "5"
    requests.nvidia.com/gpu: "4"
  scopeSelector:
    matchExpressions:
    - scopeName: PriorityClass
      operator: In
      values: ["high-priority"]
---
# LimitRange for defaults
apiVersion: v1
kind: LimitRange
metadata:
  name: default-limits
  namespace: production
spec:
  limits:
  - type: Container
    default:
      cpu: "500m"
      memory: "256Mi"
    defaultRequest:
      cpu: "100m"
      memory: "128Mi"
    max:
      cpu: "4"
      memory: "4Gi"
    min:
      cpu: "50m"
      memory: "64Mi"
    maxLimitRequestRatio:
      cpu: "10"
      memory: "4"
  - type: Pod
    max:
      cpu: "8"
      memory: "8Gi"
  - type: PersistentVolumeClaim
    max:
      storage: "100Gi"
    min:
      storage: "1Gi"
```

```bash
# Commands
kubectl get resourcequota -n production
kubectl describe resourcequota compute-quota -n production
kubectl get limitrange -n production
kubectl describe limitrange default-limits -n production

# Check quota usage
kubectl get resourcequota -n production -o json | jq '.items[].status.used'

# Test quota (will fail if exceeded)
kubectl run test --image=nginx --namespace=production --replicas=100
```

**Scope Types:**
- NotTerminating: exclude Pods with active deadlines.
- Terminating: only Pods with active deadlines.
- BestEffort: only Pods with no requests/limits.
- NotBestEffort: only Pods with requests/limits.
- PriorityClass: filter by priority.

DevOps: What is Kubernetes Resource Scope?