CHORE(falco): disable sidekick-ui and Redis
- Use Grafana dashboard instead - Set webui.enabled: false (disables UI and Redis) - Remove ingress.yaml for falco-ui - Saves ~384Mi memory (Redis 256Mi + UI 128Mi)
This commit is contained in:
@@ -150,49 +150,9 @@ falcosidekick:
|
||||
# webhookurl: ""
|
||||
# minimumpriority: "warning"
|
||||
|
||||
# Falcosidekick Web UI
|
||||
# Falcosidekick Web UI - disabled, using Grafana dashboard instead
|
||||
webui:
|
||||
enabled: true
|
||||
replicaCount: 1
|
||||
disableauth: true # Disable basic auth - using Authelia SSO
|
||||
ttl: 21600 # 6 hours - events older than this are auto-deleted
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 2802
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
# annotations:
|
||||
# cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
# hosts:
|
||||
# - host: falco0213.kro.kr
|
||||
# paths:
|
||||
# - path: /
|
||||
# pathType: Prefix
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 30m
|
||||
memory: 128Mi
|
||||
limits:
|
||||
# cpu: removed to prevent throttling
|
||||
memory: 512Mi
|
||||
|
||||
redis:
|
||||
storageEnabled: true
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
memory: 1Gi
|
||||
customConfig:
|
||||
- maxmemory 800mb
|
||||
- maxmemory-policy allkeys-lru
|
||||
|
||||
# Authentication disabled - using Authelia SSO
|
||||
# existingSecret: falco-ui-secret
|
||||
enabled: false
|
||||
|
||||
# RBAC
|
||||
rbac:
|
||||
|
||||
@@ -1,25 +0,0 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: falco-ui-ingress
|
||||
namespace: falco
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- falco0213.kro.kr
|
||||
secretName: falco-ui-tls
|
||||
rules:
|
||||
- host: falco0213.kro.kr
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: falco-falcosidekick-ui
|
||||
port:
|
||||
number: 2802
|
||||
@@ -1,4 +1,3 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- ingress.yaml
|
||||
resources: []
|
||||
|
||||
Reference in New Issue
Block a user