Commit Graph

13 Commits

Author SHA1 Message Date
ab5d432f5c CHORE(resources): set memory limits equal to memory requests
- Align memory limits with memory requests for guaranteed QoS class
- umami, code-server, docusaurus
- gitea, homer, mas, headlamp
2026-01-10 01:20:46 +09:00
a57e6555ea FIX(applications): correct bjw-s/app-template schema for replica and affinity
- Move replicaCount to controllers.main level
- Move affinity to controllers.main.pod level
- Fix Helm schema validation errors for docusaurus, homer, mas

FIX(applications): move replicaCount to top level for bjw-s/app-template

- Move replicaCount from controllers.main to top level
- Keep affinity in controllers.main.pod.affinity
- Fix Helm schema validation errors

FIX(applications): use replicas instead of replicaCount for bjw-s/app-template

- Change replicaCount to controllers.main.replicas
- Fix schema validation for bjw-s/app-template chart
2026-01-09 21:38:09 +09:00
fd1548c70c FEAT(applications): enable HA with replica 2 and soft anti-affinity
- Add replicaCount: 2 to docusaurus, headlamp, homer, mas, umami
- Add soft pod anti-affinity for node distribution
- Enable high availability across multiple nodes
2026-01-09 21:38:09 +09:00
a051b67030 PERF(resources): remove CPU limits - keep memory limits only
- CPU throttling prevents app startup, not crashes
- Memory OOM is the real cascading failure cause
- CPU request ensures fair scheduling
2026-01-07 23:48:31 +09:00
b5517f757a PERF(resources): increase CPU limit to VPA × 3 for startup burst
- Change CPU limit multiplier from 1.5x to 3x
- Prevents throttling during app startup
- Affected: code-server, crafty, docusaurus, gitea, headlamp,
  homer, immich, mas, umami
2026-01-07 23:35:06 +09:00
8353cf22bc FEAT(repo): add startupProbe for CPU-limited apps
- Add startupProbe to code-server, crafty, mas, umami, immich
- Configure 300s startup timeout (10s × 30 attempts)
- Set initialDelaySeconds to 0 for liveness/readiness
- Reduce immich-ml memory from 2Gi to 1Gi (node memory limit)
2026-01-07 23:25:06 +09:00
3bc0b76135 PERF(repo): apply CPU/Memory limits based on VPA
- Set CPU request to VPA recommendation
- Set CPU limit to VPA × 1.5 for burst allowance
- Set Memory limit to VPA × 1.5 to prevent OOM
- Prevent cascading failure on node failure
2026-01-07 23:07:30 +09:00
c9fdbfe8f7 REFACTOR(mas): flatten Vault paths to root level
- mas/api-keys → mas
- databases/postgresql → postgresql
2026-01-06 16:59:44 +09:00
3365fdf97b FIX(apps): update app-template chart repo URL
- Change repo URL from bjw-s to bjw-s-labs
- Fix Helm chart repository reference
2026-01-06 15:44:22 +09:00
be6723cc55 REFACTOR(apps): migrate to app-template
- docusaurus: Replace with app-template, configmap in manifests/
- homer: Replace with app-template, configMapGenerator for config.yml
- crafty: Replace with app-template, pvc/ingress/service in manifests/
- mas: Replace with app-template, rbac/external-secret in manifests/
- All apps use app-template chart v3.6.1
2026-01-06 15:42:07 +09:00
09c8ec067e FIX(mas): correct ingress middleware name
- Change middleware reference to authelia-authelia-auth
- Fix Traefik routing to Authelia SSO
2026-01-05 23:37:50 +09:00
e4de543407 CHORE(mas): remove GITEA_TOKEN
- No longer using Gitea for source control
- Migrate to GitHub
2026-01-05 16:57:26 +09:00
79e9fbaeb7 FEAT(mas): add multi-agent system application
- ArgoCD Application for mas namespace
- Deployment with privileged container, hostPID for K8s access
- RBAC: ServiceAccount, ClusterRoles (viewer/writer)
- ExternalSecrets for API keys and PostgreSQL password
- Ingress at mas0213.kro.kr with Authelia SSO
2026-01-05 16:53:39 +09:00