PERF(security): optimize resources via VPA

- authelia: CPU 15m/15m, memory 100Mi/144Mi
- authelia-redis: CPU 22m/32m, memory 100Mi/100Mi
- cert-manager: CPU 15m/15m, memory 100Mi/100Mi
- cert-manager-cainjector: CPU 15m/15m, memory 126Mi/248Mi
- cert-manager-webhook: CPU 15m/15m, memory 100Mi/100Mi
- external-secrets: CPU 15m/15m, memory 100Mi/109Mi
- external-secrets-cert-controller: CPU 15m/15m, memory 144Mi/297Mi
- external-secrets-webhook: CPU 15m/15m, memory 100Mi/100Mi
- falco: CPU 34m/53m, memory 93Mi/144Mi
- falcosidekick: CPU 15m/15m, memory 100Mi/100Mi
- vault: CPU 34m/53m, memory 126Mi/163Mi
This commit is contained in:
2026-01-12 01:08:45 +09:00
parent 2cfcc586be
commit ec09ea403f
5 changed files with 49 additions and 31 deletions

View File

@@ -8,12 +8,14 @@ ingress:
# Pod configuration
pod:
kind: DaemonSet
# Resource settings (VPA lowerBound/target)
resources:
requests:
cpu: 15m
memory: 194Mi
memory: 100Mi
limits:
memory: 194Mi
cpu: 15m
memory: 144Mi
extraVolumes:
- name: users-database
configMap:
@@ -195,11 +197,13 @@ redis:
image:
tag: latest
master:
# Resource settings (VPA lowerBound/upperBound)
resources:
requests:
cpu: 23m
cpu: 22m
memory: 100Mi
limits:
cpu: 32m
memory: 100Mi
# No persistence needed - using PostgreSQL