PERF(security): remove CPU limits for stability

- Remove CPU limits from authelia, cert-manager, external-secrets, falco, vault
- Prevents CPU throttling issues

authelia/helm-values.yaml

@@ -8,13 +8,12 @@ ingress:
 # Pod configuration
 pod:
   kind: DaemonSet
-  # Resource settings (VPA lowerBound/target)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 15m
       memory: 100Mi
     limits:
-      cpu: 15m
       memory: 144Mi
   extraVolumes:
     - name: users-database
@@ -197,13 +196,12 @@ redis:
   image:
     tag: latest
   master:
-    # Resource settings (VPA lowerBound/upperBound)
+    # Resource settings (no CPU limit for stability)
     resources:
       requests:
         cpu: 22m
         memory: 100Mi
       limits:
-        cpu: 32m
         memory: 100Mi
 
 # No persistence needed - using PostgreSQL

cert-manager/helm-values.yaml

@@ -6,24 +6,22 @@ installCRDs: true
 
 replicaCount: 1
 
-# Resource settings (VPA lowerBound/upperBound)
+# Resource settings (no CPU limit for stability)
 resources:
   requests:
     cpu: 15m
     memory: 100Mi
   limits:
-    cpu: 15m
     memory: 100Mi
 
 webhook:
   replicaCount: 1
-  # Resource settings (VPA lowerBound/upperBound)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 15m
       memory: 100Mi
     limits:
-      cpu: 15m
       memory: 100Mi
   # Affinity - Soft Anti-Affinity to spread pods across nodes
   affinity:
@@ -38,13 +36,12 @@ webhook:
 
 cainjector:
   replicaCount: 1
-  # Resource settings (VPA lowerBound/target)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 15m
       memory: 126Mi
     limits:
-      cpu: 15m
       memory: 248Mi
   # Affinity - Soft Anti-Affinity to spread pods across nodes
   affinity:

external-secrets/helm-values.yaml

@@ -4,13 +4,12 @@
 # Replica count
 replicaCount: 1
 
-# Resource settings (VPA lowerBound/target)
+# Resource settings (no CPU limit for stability)
 resources:
   requests:
     cpu: 15m
     memory: 100Mi
   limits:
-    cpu: 15m
     memory: 109Mi
 
 # 동시 실행 제한
@@ -26,13 +25,12 @@ installCRDs: false
 # Webhook 설정
 webhook:
   replicaCount: 1
-  # Resource settings (VPA lowerBound/upperBound)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 15m
       memory: 100Mi
     limits:
-      cpu: 15m
       memory: 100Mi
   # Affinity - Soft Anti-Affinity to spread pods across nodes
   affinity:
@@ -48,13 +46,12 @@ webhook:
 # CertController 설정
 certController:
   replicaCount: 1
-  # Resource settings (VPA lowerBound/target)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 15m
       memory: 144Mi
     limits:
-      cpu: 15m
       memory: 297Mi
   # Affinity - Soft Anti-Affinity to spread pods across nodes
   affinity:

falco/helm-values.yaml

@@ -122,13 +122,12 @@ falcosidekick:
   fullfqdn: false
   replicaCount: 1
 
-  # Resource settings (VPA lowerBound/upperBound)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 15m
       memory: 100Mi
     limits:
-      cpu: 15m
       memory: 100Mi
 
   config:

vault/helm-values.yaml

@@ -43,13 +43,12 @@ server:
   # Extra args to use config from secret
   extraArgs: "-config=/vault/userconfig/extraconfig-from-values.hcl"
 
-  # Resource settings (VPA lowerBound/target)
+  # Resource settings (no CPU limit for stability)
   resources:
     requests:
       cpu: 34m
       memory: 126Mi
     limits:
-      cpu: 53m
       memory: 163Mi
 
   # Ingress 설정