Commit Graph

18 Commits

Author SHA1 Message Date
fcb0413aff PERF(applications): optimize resources via VPA
- code-server: CPU 15m/15m, memory 225Mi/225Mi
- docusaurus: CPU 10m/16m, memory 50Mi/50Mi
- headlamp: CPU 15m/15m, memory 100Mi/100Mi
- homer: CPU 10m/12m, memory 50Mi/50Mi
- mas: CPU 15m/15m, memory 144Mi/203Mi
- umami: CPU 15m/15m, memory 271Mi/323Mi
2026-01-12 01:08:46 +09:00
f812dcc75f refactor: update Vault secret paths to new categorized structure
- code-server: code-server → applications/code-server
- mas: mas → applications/mas, postgresql → storage/postgresql
- umami: umami → applications/umami
- headlamp: authelia → security/authelia

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-11 22:36:11 +09:00
58455b689f migrate: change repoURLs from GitHub to Gitea
Update all ArgoCD Application references to use Gitea (github0213.com)
instead of GitHub for K3S-HOME/applications repository.
Also update docusaurus to use gitea-creds for Image Updater write-back.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-10 20:43:26 +09:00
84312ce9e4 PERF(applications): adjust resources based on VPA
- Update homer cpu 15m→11m, memory 100Mi→50Mi
- Update code-server memory 512Mi→215Mi
- Update docusaurus cpu 10m→15m
- Update gitea cpu 15m→63m, memory 200Mi→237Mi
- Update umami memory 384Mi→283Mi
- Update mas memory 150Mi→175Mi
2026-01-10 14:35:21 +09:00
886e4e36c0 PERF(apps): reduce replicas to 1
- Reduce Homer replicas from 2 to 1
- Reduce MAS replicas from 2 to 1
2026-01-10 13:15:55 +09:00
ab5d432f5c CHORE(resources): set memory limits equal to memory requests
- Align memory limits with memory requests for guaranteed QoS class
- umami, code-server, docusaurus
- gitea, homer, mas, headlamp
2026-01-10 01:20:46 +09:00
a57e6555ea FIX(applications): correct bjw-s/app-template schema for replica and affinity
- Move replicaCount to controllers.main level
- Move affinity to controllers.main.pod level
- Fix Helm schema validation errors for docusaurus, homer, mas

FIX(applications): move replicaCount to top level for bjw-s/app-template

- Move replicaCount from controllers.main to top level
- Keep affinity in controllers.main.pod.affinity
- Fix Helm schema validation errors

FIX(applications): use replicas instead of replicaCount for bjw-s/app-template

- Change replicaCount to controllers.main.replicas
- Fix schema validation for bjw-s/app-template chart
2026-01-09 21:38:09 +09:00
fd1548c70c FEAT(applications): enable HA with replica 2 and soft anti-affinity
- Add replicaCount: 2 to docusaurus, headlamp, homer, mas, umami
- Add soft pod anti-affinity for node distribution
- Enable high availability across multiple nodes
2026-01-09 21:38:09 +09:00
a051b67030 PERF(resources): remove CPU limits - keep memory limits only
- CPU throttling prevents app startup, not crashes
- Memory OOM is the real cascading failure cause
- CPU request ensures fair scheduling
2026-01-07 23:48:31 +09:00
b5517f757a PERF(resources): increase CPU limit to VPA × 3 for startup burst
- Change CPU limit multiplier from 1.5x to 3x
- Prevents throttling during app startup
- Affected: code-server, crafty, docusaurus, gitea, headlamp,
  homer, immich, mas, umami
2026-01-07 23:35:06 +09:00
8353cf22bc FEAT(repo): add startupProbe for CPU-limited apps
- Add startupProbe to code-server, crafty, mas, umami, immich
- Configure 300s startup timeout (10s × 30 attempts)
- Set initialDelaySeconds to 0 for liveness/readiness
- Reduce immich-ml memory from 2Gi to 1Gi (node memory limit)
2026-01-07 23:25:06 +09:00
3bc0b76135 PERF(repo): apply CPU/Memory limits based on VPA
- Set CPU request to VPA recommendation
- Set CPU limit to VPA × 1.5 for burst allowance
- Set Memory limit to VPA × 1.5 to prevent OOM
- Prevent cascading failure on node failure
2026-01-07 23:07:30 +09:00
c9fdbfe8f7 REFACTOR(mas): flatten Vault paths to root level
- mas/api-keys → mas
- databases/postgresql → postgresql
2026-01-06 16:59:44 +09:00
3365fdf97b FIX(apps): update app-template chart repo URL
- Change repo URL from bjw-s to bjw-s-labs
- Fix Helm chart repository reference
2026-01-06 15:44:22 +09:00
be6723cc55 REFACTOR(apps): migrate to app-template
- docusaurus: Replace with app-template, configmap in manifests/
- homer: Replace with app-template, configMapGenerator for config.yml
- crafty: Replace with app-template, pvc/ingress/service in manifests/
- mas: Replace with app-template, rbac/external-secret in manifests/
- All apps use app-template chart v3.6.1
2026-01-06 15:42:07 +09:00
09c8ec067e FIX(mas): correct ingress middleware name
- Change middleware reference to authelia-authelia-auth
- Fix Traefik routing to Authelia SSO
2026-01-05 23:37:50 +09:00
e4de543407 CHORE(mas): remove GITEA_TOKEN
- No longer using Gitea for source control
- Migrate to GitHub
2026-01-05 16:57:26 +09:00
79e9fbaeb7 FEAT(mas): add multi-agent system application
- ArgoCD Application for mas namespace
- Deployment with privileged container, hostPID for K8s access
- RBAC: ServiceAccount, ClusterRoles (viewer/writer)
- ExternalSecrets for API keys and PostgreSQL password
- Ingress at mas0213.kro.kr with Authelia SSO
2026-01-05 16:53:39 +09:00