-
Notifications
You must be signed in to change notification settings - Fork 37
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Language Clean-up #2089
Language Clean-up #2089
Changes from 3 commits
61b8d93
91a30db
941d266
02e4522
36b29cc
6a1f9a9
e1e0cc3
2b77597
8ee2f07
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -18,22 +18,22 @@ done based on the instance type and storage type selected for each machine pool. | |
| | **FORMULAS FOR CALCULATION** | | ||
| --- | ------------------------------------------------------------------------------------------- | | ||
| | Machine Pool Cost = ( Number of Nodes X Instance Price ) + ( Storage Size X Storage Price ) | | ||
| | Cluster Cloud Cost = Master Pool Cost + Worker Pool Cost | | ||
| | Cluster Cloud Cost = control plane pool cost + worker pool cost | | ||
|
||
**Example 1:** | ||
|
||
Let's assume that a cluster ‘demo’ is launched with two machine pools with the following configuration: | ||
|
||
| MACHINE POOL | SIZE | INSTANCE TYPE WITH COST | ROOT DISK WITH COST | | ||
| ------------ | ---- | --------------------------- | ---------------------------- | | ||
| MASTER POOL | 3 | AWS t2.medium($0.0496/hour) | 60GB - gp2($0.00014/GB/hour) | | ||
| WORKER POOL | 3 | AWS t2.large($0.0992/hour) | 60GB - gp2($0.00014/GB/hour) | | ||
| MACHINE POOL | SIZE | INSTANCE TYPE WITH COST | ROOT DISK WITH COST | | ||
| ------------- | ---- | --------------------------- | ---------------------------- | | ||
| Control Plane | 3 | AWS t2.medium($0.0496/hour) | 60GB - gp2($0.00014/GB/hour) | | ||
| Worker Pool | 3 | AWS t2.large($0.0992/hour) | 60GB - gp2($0.00014/GB/hour) | | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🚫 [vale] reported by reviewdog 🐶 |
||
|
||
| Calculation for the above scenario | | ||
| --------------------------------------------------------------------- | | ||
| master-pool cost = ( 3 X $0.0496 ) + ( 60 X $0.00014 ) = $0.1572/hour | | ||
| worker-pool cost = ( 3 X $0.0992 ) + ( 60 X $0.00014 ) = $0.306/hour | | ||
| Cluster Cloud Cost = $0.1572 + $0.306 = $0.4632/hour | | ||
| Calculation for the above scenario | | ||
| ---------------------------------------------------------------------------- | | ||
| control-plane-pool cost = ( 3 X $0.0496 ) + ( 60 X $0.00014 ) = $0.1572/hour | | ||
| worker-pool cost = ( 3 X $0.0992 ) + ( 60 X $0.00014 ) = $0.306/hour | | ||
| Cluster Cloud Cost = $0.1572 + $0.306 = $0.4632/hour | | ||
|
||
:::info | ||
|
||
|
@@ -63,7 +63,7 @@ category. | |
|
||
**Example 2** | ||
|
||
For the cluster configuration of master-pool & worker-pool considers in example 1, | ||
For the cluster configuration of control-plane-pool and worker-pool considers in example 1, | ||
|
||
| Calculation for the example scenario | | ||
| ------------------------------------------------------------------------------- | | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -30,9 +30,9 @@ This scan examines the compliance of deployed Kubernetes security features again | |
Kubernetes Benchmarks are consensus-driven security guidelines for the Kubernetes. Different releases of the CIS | ||
benchmark cover different releases of Kubernetes. By default, Kubernetes configuration security will determine the test | ||
set based on the Kubernetes version running on the cluster being scanned. Internally, Palette leverages an open-source | ||
tool called KubeBench from Aqua Security to perform this scan. Scans are run against master and worker nodes of the | ||
Kubernetes cluster, and a combined report is made available on the UI. Users can filter the report to view only the | ||
master or worker results if required. | ||
tool called KubeBench from Aqua Security to perform this scan. Scans are run against control plane and worker nodes of | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🚫 [vale] reported by reviewdog 🐶 |
||
the Kubernetes cluster, and a combined report is made available on the UI. Users can filter the report to view only the | ||
control plane or worker results if required. | ||
|
||
All the tests in the report are marked as Scored or Not Scored. The ones marked Not Scored cannot be automatically run, | ||
and it is suggested to be tested manually. | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -65,14 +65,14 @@ available to the users to apply to their existing clusters at a time convenient | |
### Kubernetes | ||
|
||
Kubernetes components and configuration are hardened in accordance with the Kubernetes CIS Benchmark. Palette executes | ||
Kubebench, a CIS Benchmark scanner by Aqua Security, for every Kubernetes pack to ensure the master and worker nodes are | ||
configured securely. | ||
Kubebench, a CIS Benchmark scanner by Aqua Security, for every Kubernetes pack to ensure the control plane and worker | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🚫 [vale] reported by reviewdog 🐶 |
||
nodes are configured securely. | ||
|
||
### Cloud Infrastructure | ||
|
||
Palette follows security best practices recommended by the various cloud providers when provisioning and configuring the | ||
computing, network, and storage infrastructure for the Kubernetes clusters. These include practices such as isolating | ||
master and worker nodes in dedicated network domains and limiting access through the use constructs like security | ||
control plane and worker nodes in dedicated network domains and limiting access through the use constructs like security | ||
groups. | ||
|
||
:::info | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🚫 [vale] reported by reviewdog 🐶
[Google.Units] Put a nonbreaking space between the number and the unit in '60GB'.