Actionable Insights
7 min
explore actionable insights that assist in gaining a deep understanding of cluster resource consumption and version maintenance, enabling an optimized cloud service inventory introduction provides actionable insights so that as a site reliability engineer (sre), you can manage your container resources effectively these insights allow you to identify which clusters might require updates due to unsupported kubernetes, openshift versions, or those nearing end of support you can also pinpoint containers that are either under or over utilizing resources by comparing actual consumption against allocated memory and cpu usage calculations for optimal resource utilization as you direct your devops team to establish a baseline for memory and cpu usage, you can rely on the algorithm, which uses cpu request and limit, memory request and limit and historical data, to inform you of required resource adjustments as described in the following limited examples optimal memory limit recommendations for containers metrics include memory requests, limits, frequency of out of memory kills, and usage history action sre reviews and adjusts values as needed optimal cpu limit recommendations for containers metrics include cpu requests, limits, and consumption history action sre adjusts node sizing and plans vm migrations for load balancing utilization rules containers are underutilized if cpu or memory usage is less than 50% of the requested amount containers are overutilized if experiencing frequent out of memory issues or if memory usage exceeds 90% of the set limit upscaling is considered if cpu usage exceeds 90% of the set limit for significant periods containers lacking cpu limit or request settings are flagged accordingly while generating capacity & utilization insights, the ml models consider lesser buffers for lower environments and more buffers for higher environments as follows dev 20% uat 30% pre prod – 40% prod – 50% note a minimum of 7 days of usage data is required for generating accurate insights container replicas are grouped under their deployment names for resource usage analysis actionable insights page select any tile within the actionable insights widget on the main dashboard to navigate to the actionable insights page the data displayed on this page depends on which tile you select from the dashboard if, for example, you select security & compliance, the page will display data associated with resources that have exceeded warning or comprise thresholds for security and compliance concerns the page contains the following elements bread crumbs for efficient navigation header to identify your current location in the bridge kyndryl portal a dropdown list enabling you to select either the default data view or a filtered view that you saved filter by providers , connections , applications and environments , insights type , insights category , kubernetes and openshift click apply to view only data relevant to your current requirement click save view to save the filtered view for a later time, providing a relevant name when prompted if you further filter data, you can update the current view by clicking update view click delete to delete the saved view insights summary, which displays four of tiles that navigate to insight details within four classes security & compliance performance reliability optimization insight type filter that enables filtering by specific insights within the current insight class severity filter that enables filtering by severity level an insights table that provides data generated for each cluster, for the current insights class (security & compliance, performance, reliability and optimization supported insights insights for containers and clusters running kubernetes or openshift enable preemptive action insights are listed within the context of four insight classes security and compliance performance reliability optimization supported insights include the following security & compliance k8s version reached end of life need immediate action k8s version crossed end of support k8s version crossed support life, now only on maintenance support k8s version extended support k8s version on extended support k8s version nearing end of support low priority, can wait till it is critical namespace without network policy namespaces that are not secured with network policies performance cpu running out cpu usage with respect to limits is above 90% and is forecasted to go above limits in the next 7 days cpu over utilized cpu usage with respect to limits is above 90% but not running out memory over utilized memory usage with respect to limits is above 90% but not running out reliability pod fail crashloop pod is in crashloop back off state and crashing memory running out memory usage with respect to limits is above 90% and is forecasted to go above limits in the next 7 days pod fail pending pod is in pending state and not up pod fail restart pod has restarts, but not in crash loop back off or pending singleton design pods with one replica pvc over utilized persistent volume claim is more than 20% of what is provisioned pvc running out based on the current persistent volume claim usage trend, provisioned pvc will run out in seven days optimization high risk minimal cpu memory utilized cpu and memory usage with respect to requests is below 10% cpu and memory limits not set minimal usage cpu and memory limits are not set and cpu and memory usage with respect to requests is below 10% cpu requests limits not set cpu requests and limits are not set memory requests limits not set memory requests and limits are not set cpu limits not set cpu limits is not set and the usage with respect to request is above 50% cpu limit not set under utilized cpu limits not set minimal usage cpu limits are not set and cpu and memory usage with respect to requests is below 10% memory limits not set minimal usage memory limits are not set and cpu and memory usage with respect to requests is below 10% memory limit not set under utilized memory limits not set memory limits is not set and the usage with respect to request is above 50% cpu under utilized cpu usage with respect to requests is below 50% memory underutilized inactive volume the number of clusters with volumes not currently in use (not mounted or actively transferring data) but still properly recognized and managed by the system orphaned volume the number of clusters with volumes that have lost association with its parent controller or application for example, the pod or pvc was deleted, but the actual storage remains pvc underutilized persistent volume claim is less than 20% of what is provisioned hpa recommended recommended minimum and maximum replicas with optimal configuration recommendation (details page) network usage growth high growth rate is above 25% medium growth rate is 10% 25% actionable insight details pages the resource name in the actionable insights table, is a link to a page containing details for the insights data for that cluster in an expanded form the details page presents various meta data such as insight type, severity, application, recommended configuration, current configuration and current usage chart all data is pulled dynamically and presented in near real time the type of data varies with the current insight class container cluster management landing page docid\ cjhid0ahx0pppqu 7lskw survey kubernetes and openshift clusters, using valuable insights that enable optimization of your container deployments insights details on unsupported & nearing end of support kubernetes or openshift clusters docid 5huuwxsxvgjq5i9dqpl i explore insights of managing container clusters running kubernetes or openshift versions that are either unsupported or approaching the end of active support