From c24313154d286d7a8652f8c993636eb22500e8ab Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Thu, 8 Jan 2026 00:33:13 +0900
Subject: [PATCH] FIX(security): remove CPU limits from falco and trivy

- falco: set cpu: null to disable chart default (1 core)
- trivy: set cpu: null for operator and scan jobs (500m default)
---
 falco/helm-values.yaml | 1 +
 trivy/helm-values.yaml | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/falco/helm-values.yaml b/falco/helm-values.yaml
index 0bda0be..de4a34d 100644
--- a/falco/helm-values.yaml
+++ b/falco/helm-values.yaml
@@ -18,6 +18,7 @@ resources:
     cpu: 49m
     memory: 263Mi
   limits:
+    cpu: null  # Disable chart default (1 core)
     memory: 263Mi
 
 # Falco configuration
diff --git a/trivy/helm-values.yaml b/trivy/helm-values.yaml
index b215a88..c775f4f 100644
--- a/trivy/helm-values.yaml
+++ b/trivy/helm-values.yaml
@@ -15,6 +15,7 @@ operator:
       cpu: 50m
       memory: 256Mi
     limits:
+      cpu: null  # Disable chart default
       memory: 384Mi
 
   # 스캔 설정
@@ -60,6 +61,7 @@ trivy:
       cpu: 50m
       memory: 256Mi
     limits:
+      cpu: null  # Disable chart default (500m)
       memory: 384Mi
 
 # 스캔 작업 설정