What is required to legally run an application with a core-based license in a Kubernetes environment? More specifically, how can I demonstrate that the application is restricted to no more CPU cores than the license allows?
5 Answers
On a self-managed cluster, Kubernetes' static CPU manager policy can assign exclusive CPUs to certain containers. That may help technically enforce a fixed CPU allocation, but it is not available or configurable in the same way on every managed Kubernetes service. You would still need the vendor to confirm that exclusive CPU assignment satisfies the license.
Some licenses are based on the maximum environment where the application could run, including standby and disaster-recovery systems. Others use a license server that reports current usage or automatically stops the application when it exceeds the licensed amount. Because these models vary so much, an independent audit might provide evidence, but only the vendor can confirm what they will accept.
There is no universal answer because every vendor defines and verifies core usage differently. Some require their own license server or monitoring agent, while others accept a usage report or reserve the right to perform an audit. Read the product license carefully and get written confirmation from the vendor about what evidence they accept.
Do not assume that setting a CPU limit in the deployment solves a core-based licensing requirement. A CPU limit generally controls scheduled CPU time rather than identifying dedicated physical cores. Ask the vendor or licensing reseller for explicit written guidance, especially for virtualized or shared infrastructure; otherwise you could face an audit or additional licensing fees.
Kubernetes does not normally schedule workloads to particular physical CPU cores. CPU requests and limits control scheduling and CPU time, but they do not necessarily prove that a licensed application used only a specific number of physical cores. If the vendor requires a fixed core count, you may need a dedicated node pool or dedicated hardware, with the workload constrained to those nodes.
Even a dedicated node may not be enough if the license covers every core in a cluster where the workload could potentially run. Some vendors count disaster-recovery capacity, virtualization hosts, or all eligible placement targets, so the licensing terms matter more than the Kubernetes configuration alone.