Skip to content

Commit

Permalink
Add deployment pic
Browse files Browse the repository at this point in the history
  • Loading branch information
tobiscr committed Jan 22, 2025
1 parent 14d26f7 commit f4bb766
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions docs/user/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,8 @@ The KIM-Snatch module introduces a [mutating admission webhook](https://kubernet

It is intercepting all pods which are scheduled in a Kyma managed namespaces. A managed namespace is by [KLM](https://github.com/kyma-project/lifecycle-manager) always labeled with `operator.kyma-project.io/managed-by: kyma`. KIM reacts only on pods which are scheduled in one of these labeled namespaces. Typical Kyma managed namespaces are `kyma-system` or, if the Kyma Istio module is used, `istio`.

![KIM Snatch Webhook](./assets/snatch-deployment.png)

Before the pod is handed over to the Kubernetes scheduler, KIM-Snatch adds a [`nodeAffinity`](https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity) to the pod's manifest. This informs the Kubernetes scheduler to prefer nodes within the Kyma worker pool for this pod.

## Limitations
Expand Down
Binary file added docs/user/assets/snatch-deployment.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit f4bb766

Please sign in to comment.