Workload Functions
PDB Operator classifies workloads into three functions, each with different PDB behavior.
Functions
| Function | Description | PDB Behavior |
|---|---|---|
core | Standard application workloads | Normal availability class applied |
management | Infrastructure and management workloads | Normal availability class applied |
security | Security-critical workloads (auth, certificates, firewalls) | Automatic availability class boosting |
Setting the Function
Via Policy Selector
Target workloads by function in the policy's workload selector:
spec:
workloadSelector:
workloadFunctions:
- security
Via Deployment Annotation
Set the function directly on a deployment:
metadata:
annotations:
pdboperator.io/workload-function: "security"
Security Boosting
When a workload's function is security, its availability class is automatically boosted:
non-critical(20%) becomesstandard(50%)standard(50%) becomeshigh-availability(75%)high-availabilityandmission-criticalremain unchanged
This ensures security workloads always have higher protection without requiring manual configuration.
Related
- Availability Classes: the full boosting table and class definitions
- Annotations Reference: setting workload function via annotations
- Policy Examples: policies targeting specific workload functions