PERF(security): adjust resources based on VPA

- Update authelia memory 256Mi→194Mi
- Update authelia redis cpu 10m→23m, memory 64Mi→100Mi
- Update falco memory 263Mi→283Mi
- Update falcosidekick cpu 10m→15m, memory 128Mi→100Mi
- Update external-secrets operator cpu 5m→15m, memory 128Mi→100Mi
- Update external-secrets webhook cpu 2m→15m, memory 128Mi→100Mi
- Update external-secrets certController cpu 2m→15m, memory 256Mi→283Mi
- Update vault cpu 35m→49m, memory 263Mi→175Mi

authelia/helm-values.yaml

@@ -15,9 +15,9 @@ pod:
   resources:
     requests:
       cpu: 15m
-      memory: 256Mi
+      memory: 194Mi
     limits:
-      memory: 256Mi
+      memory: 194Mi
   extraVolumes:
     - name: users-database
       configMap:
@@ -201,9 +201,9 @@ redis:
   master:
     resources:
       requests:
-        cpu: 10m
+        cpu: 23m
-        memory: 64Mi
+        memory: 100Mi
       limits:
-        memory: 64Mi
+        memory: 100Mi
 
 # No persistence needed - using PostgreSQL

external-secrets/helm-values.yaml

@@ -7,11 +7,10 @@ replicaCount: 1
 # 리소스 제한
 resources:
   requests:
-    cpu: 5m  # Reduced from 20m based on actual usage (1m)
+    cpu: 15m
-    memory: 128Mi
+    memory: 100Mi
   limits:
-    # cpu: removed to prevent throttling
+    memory: 100Mi
-    memory: 128Mi
 
 # 동시 실행 제한
 concurrent: 3
@@ -28,11 +27,10 @@ webhook:
   replicaCount: 1
   resources:
     requests:
-      cpu: 2m  # Reduced from 10m based on actual usage (1m)
+      cpu: 15m
-      memory: 128Mi
+      memory: 100Mi
     limits:
-      # cpu: removed to prevent throttling
+      memory: 100Mi
-      memory: 128Mi
   # Affinity - Soft Anti-Affinity to spread pods across nodes
   affinity:
     podAntiAffinity:
@@ -49,11 +47,10 @@ certController:
   replicaCount: 1
   resources:
     requests:
-      cpu: 2m  # Reduced from 10m based on actual usage (1m)
+      cpu: 15m
-      memory: 256Mi
+      memory: 283Mi
     limits:
-      # cpu: removed to prevent throttling
+      memory: 283Mi
-      memory: 256Mi
   # Affinity - Soft Anti-Affinity to spread pods across nodes
   affinity:
     podAntiAffinity:

falco/helm-values.yaml

@@ -16,10 +16,10 @@ image:
 resources:
   requests:
     cpu: 49m
-    memory: 263Mi
+    memory: 283Mi
   limits:
     cpu: null  # Disable chart default (1 core)
-    memory: 263Mi
+    memory: 283Mi
 
 # Falco configuration
 falco:
@@ -125,10 +125,10 @@ falcosidekick:
 
   resources:
     requests:
-      cpu: 10m
+      cpu: 15m
-      memory: 128Mi
+      memory: 100Mi
     limits:
-      memory: 128Mi
+      memory: 100Mi
 
   config:
     # Output to stdout/logs

vault/helm-values.yaml

@@ -46,10 +46,10 @@ server:
   # 리소스 제한
   resources:
     requests:
-      cpu: 35m
+      cpu: 49m
-      memory: 263Mi
+      memory: 175Mi
     limits:
-      memory: 263Mi
+      memory: 175Mi
 
   # Ingress 설정
   ingress: