编辑“︁Kubernetes资源限制范围（LimitRange）”︁（章节）

== 验证机制 ==
当创建Pod时，Kubernetes会执行以下检查：
1. 如果容器未设置请求/限制，应用默认值
2. 确保所有容器的请求 ≥ min且 ≤ max
3. 验证限制值 ≥ 请求值

=== 违规示例 ===
尝试创建超过限制的Pod会收到错误：

<syntaxhighlight lang="yaml">
apiVersion: v1
kind: Pod
metadata:
  name: invalid-pod
spec:
  containers:
  - name: nginx
    image: nginx
    resources:
      limits:
        cpu: "3"  # 超过max限制2
        memory: "3Gi"
</syntaxhighlight>

执行后会返回错误：
<pre>
Error from server (Forbidden): error when creating "pod.yaml": pods "invalid-pod" is forbidden: [maximum cpu usage per Container is 2, but limit is 3, maximum memory usage per Container is 2Gi, but limit is 3Gi]
</pre>