Skip to content

emptyDir policy requires ephemeral-storage resources for memory-backed volumes #1365

New issue
New issue
Open
#1406
Open
emptyDir policy requires ephemeral-storage resources for memory-backed volumes#1365
#1406
@chernetskyi

Description

@chernetskyi
chernetskyi
opened on Nov 6, 2025

Hello,

The rationale behind the Require Requests and Limits for emptyDir policy is preventing the backing medium overrun:

policies/other/require-emptydir-requests-limits/require-emptydir-requests-limits.yaml

Lines 14 to 18 in 12a6878

Pods which mount emptyDir volumes may be allowed to potentially overrun
the medium backing the emptyDir volume. This sample ensures that any
initContainers or containers mounting an emptyDir volume have
ephemeral-storage requests and limits set. Policy will be skipped if
the volume has already a sizeLimit set.

However, the policy considers only one medium. ephemeral-storage is the wrong resource for memory-backed (medium: Memory) volumes.

In addition, I believe this precondition is obsolete:

policies/other/require-emptydir-requests-limits/require-emptydir-requests-limits.yaml

Lines 38 to 42 in 12a6878

- key: "{{request.operation || 'BACKGROUND'}}"
operator: AnyIn
value:
- CREATE
- UPDATE

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions