openshift-docs/modules/installation-azure-limits.adoc

// Module included in the following assemblies:
//
// * installing/installing_azure/installing-azure-account.adoc
// * installing/installing_azure/installing-azure-user-infra.adoc
// * installing/installing_azure_stack_hub/installing-azure-stack-hub-user-infra.adoc
// * installing/installing_azure_stack_hub/installing-azure-stack-hub-account.adoc
// * installing/installing_azure/installing-restricted-networks-azure-user-provisioned.adoc

ifeval::["{context}" == "installing-azure-stack-hub-user-infra"]
:ash:
:cp: Azure Stack Hub
:upi:
endif::[]
ifeval::["{context}" == "installing-azure-stack-hub-account"]
:ash:
:upi:
:cp: Azure Stack Hub
endif::[]
ifeval::["{context}" == "installing-azure-user-infra"]
:cp: Azure
:upi:
endif::[]
ifeval::["{context}" == "installing-azure-account"]
:cp: Azure
endif::[]
ifeval::["{context}" == "installing-restricted-networks-azure-user-provisioned"]
:cp: Azure
endif::[]

:_mod-docs-content-type: REFERENCE
[id="installation-azure-limits_{context}"]
= {cp} account limits

ifndef::ash[]
The {product-title} cluster uses a number of Microsoft {cp} components, and the default link:https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits[Azure subscription and service limits, quotas, and constraints] affect your ability to install {product-title} clusters.

[IMPORTANT]
====
Default limits vary by offer category types, such as Free Trial and Pay-As-You-Go, and by series, such as Dv2, F, and G. For example, the default for Enterprise Agreement subscriptions is 350 cores.

Check the limits for your subscription type and if necessary, increase quota limits for your account before you install a default
cluster on Azure.
====
endif::ash[]
ifdef::ash[]
The {product-title} cluster uses a number of Microsoft Azure Stack Hub components, and the default link:https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-quota-types?view=azs-2102[Quota types in Azure Stack Hub] affect your ability to install {product-title} clusters.
endif::ash[]

The following table summarizes the {cp} components whose limits can impact your
ability to install and run {product-title} clusters.

ifndef::ash[]
[cols="2a,3a,3a,8a",options="header"]
|===
|Component |Number of components required by default| Default {cp} limit |Description
endif::ash[]
ifdef::ash[]
[cols="2a,3a,8a",options="header"]
|===
|Component |Number of components required by default |Description
endif::ash[]

|vCPU
ifndef::ash[]
ifndef::upi[]
|44
endif::upi[]
ifdef::upi[]
|40
endif::upi[]
|20 per region
ifndef::upi[]
|A default cluster requires 44 vCPUs, so you must increase the account limit.
endif::upi[]
ifdef::upi[]
|A default cluster requires 40 vCPUs, so you must increase the account limit.
endif::upi[]

By default, each cluster creates the following instances:

* One bootstrap machine, which is removed after installation
* Three control plane machines
* Three compute machines

ifndef::upi[]
Because the bootstrap and control plane machines use `Standard_D8s_v3` virtual
machines, which use 8 vCPUs, and the compute machines use `Standard_D4s_v3`
virtual machines, which use 4 vCPUs, a default cluster requires 44 vCPUs.
The bootstrap node VM, which uses 8 vCPUs, is used only during installation.
endif::upi[]
ifdef::upi[]
Because the bootstrap machine uses `Standard_D4s_v3` machines, which use 4 vCPUs,
the control plane machines use `Standard_D8s_v3` virtual
machines, which use 8 vCPUs, and the worker machines use `Standard_D4s_v3`
virtual machines, which use 4 vCPUs, a default cluster requires 40 vCPUs.
The bootstrap node VM, which uses 4 vCPUs, is used only during installation.
endif::upi[]
endif::ash[]
ifdef::ash[]
|56
|A default cluster requires 56 vCPUs, so you must increase the account limit.

By default, each cluster creates the following instances:

* One bootstrap machine, which is removed after installation
* Three control plane machines
* Three compute machines

Because the bootstrap, control plane, and worker machines use `Standard_DS4_v2` virtual machines, which use 8 vCPUs, a default cluster requires 56 vCPUs. The bootstrap node VM is used only during installation.
endif::ash[]

To deploy more worker nodes, enable autoscaling, deploy large workloads, or use
a different instance type, you must further increase the vCPU limit for your
account to ensure that your cluster can deploy the machines that you require.

ifndef::ash[]
|OS Disk
|7
|
|Each cluster machine must have a minimum of 100 GB of storage and 300 IOPS.
[NOTE]
====
Faster storage is recommended for production clusters and clusters with intensive workloads. For more information about optimizing storage for performance, see the page titled "Optimizing storage" in the "Scalability and performance" section.
====
endif::ash[]

|VNet
| 1
ifndef::ash[]
| 1000 per region
endif::ash[]
| Each default cluster requires one Virtual Network (VNet), which contains two
subnets.

|Network interfaces
|7
ifndef::ash[]
|65,536 per region
endif::ash[]
|Each default cluster requires seven network interfaces. If you create more
machines or your deployed workloads create load balancers, your cluster uses
more network interfaces.

|Network security groups
|2
ifndef::ash[]
|5000
endif::ash[]
| Each cluster creates network security groups for each subnet in the VNet.
The default cluster creates network
security groups for the control plane and for the compute node subnets:

[horizontal]
 `controlplane`:: Allows the control plane machines to be reached on port 6443
 from anywhere
`node`:: Allows worker nodes to be reached from the internet on ports 80 and 443

|Network load balancers
| 3
ifndef::ash[]
| 1000 per region
endif::ash[]
|Each cluster creates the following
link:https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview[load balancers]:

[horizontal]
`default`:: Public IP address that load balances requests to ports 80 and 443 across worker machines
`internal`:: Private IP address that load balances requests to ports 6443 and 22623 across control plane machines
`external`:: Public IP address that load balances requests to port 6443 across control plane machines

If your applications create more Kubernetes `LoadBalancer` service objects,
your cluster uses more load balancers.

|Public IP addresses
ifndef::ash[]
|3
|
|Each of the two public load balancers uses a public IP address. The bootstrap
machine also uses a public IP address so that you can SSH into the
machine to troubleshoot issues during installation. The IP address for the
bootstrap node is used only during installation.
endif::ash[]
ifdef::ash[]
|2
|The public load balancer uses a public IP address. The bootstrap
machine also uses a public IP address so that you can SSH into the
machine to troubleshoot issues during installation. The IP address for the
bootstrap node is used only during installation.
endif::ash[]

|Private IP addresses
|7
ifndef::ash[]
|
endif::ash[]
|The internal load balancer, each of the three control plane machines, and each
of the three worker machines each use a private IP address.

ifndef::ash[]
|Spot VM vCPUs (optional)
|0

If you configure spot VMs, your cluster must have two spot VM vCPUs for every compute node.
|20 per region
|This is an optional component. To use spot VMs, you must increase the Azure default limit to at least twice the number of compute nodes in your cluster.
[NOTE]
====
Using spot VMs for control plane nodes is not recommended.
====
endif::ash[]
|===

To increase an account limit, file a support request on the Azure portal. For more information, see link:https://learn.microsoft.com/en-us/azure/deployment-environments/how-to-request-quota-increase[Request a quota limit increase for Azure Deployment Environments resources].

ifeval::["{context}" == "installing-azure-stack-hub-user-infra"]
:!ash:
:!cp: Azure Stack Hub
:!upi:
endif::[]
ifeval::["{context}" == "installing-azure-stack-hub-account"]
:!ash:
:!cp: Azure Stack Hub
:!upi:
endif::[]
ifeval::["{context}" == "installing-azure-user-infra"]
:!cp: Azure
:!upi:
endif::[]
ifeval::["{context}" == "installing-azure-account"]
:!cp: Azure
endif::[]
ifeval::["{context}" == "installing-restricted-networks-azure-user-provisioned"]
:!cp: Azure
endif::[]