Can kubeadmin user create resources past the ClusterResourceQuota hard limit?

11/24/2019

I have the following ClusterResourceQuota created in my openshift cluster:

apiVersion: quota.openshift.io/v1
kind: ClusterResourceQuota
metadata:
  name: eight-load-balancer-quota
  resourceVersion: "1158006"
spec:
  quota:
    hard:
      services.loadbalancers: "8"
  selector:
    labels:
      matchExpressions:
      - key: managed.openshift.io/storage-pv-quota-exempt
        operator: DoesNotExist

However I am able to create more than eight loadbalancers in my cluster (logged in as kubeadmin) is that as expected?

oc --kubeconfig=... describe AppliedClusterResourceQuota
Name:       eight-load-balancer-quota
Created:    2 days ago
Labels:     <none>

Label Selector: !managed.openshift.io/storage-pv-quota-exempt
AnnotationSelector: map[]
Resource        Used    Hard
--------        ----    ----
services.loadbalancers  10  8

I am not seeing any reference to this situation in the docs.

-- Nimrodshn
kubernetes
openshift
quota

0 Answers