K3S-HOME/security
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

PERF(security): optimize resources via VPA

Browse Source 
- authelia: CPU 15m/15m, memory 100Mi/144Mi
- authelia-redis: CPU 22m/32m, memory 100Mi/100Mi
- cert-manager: CPU 15m/15m, memory 100Mi/100Mi
- cert-manager-cainjector: CPU 15m/15m, memory 126Mi/248Mi
- cert-manager-webhook: CPU 15m/15m, memory 100Mi/100Mi
- external-secrets: CPU 15m/15m, memory 100Mi/109Mi
- external-secrets-cert-controller: CPU 15m/15m, memory 144Mi/297Mi
- external-secrets-webhook: CPU 15m/15m, memory 100Mi/100Mi
- falco: CPU 34m/53m, memory 93Mi/144Mi
- falcosidekick: CPU 15m/15m, memory 100Mi/100Mi
- vault: CPU 34m/53m, memory 126Mi/163Mi
This commit is contained in:
Mayne0213
2026-01-12 01:08:45 +09:00
parent 2cfcc586be
commit ec09ea403f
5 changed files with 49 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
cert-manager/helm-values.yaml
View File

@@ -6,21 +6,25 @@ installCRDs: true
replicaCount: 1
# Resource settings (VPA lowerBound/upperBound)
resources:
requests:
cpu: 23m
memory: 115Mi
cpu: 15m
memory: 100Mi
limits:
memory: 115Mi
cpu: 15m
memory: 100Mi
webhook:
replicaCount: 1
# Resource settings (VPA lowerBound/upperBound)
resources:
requests:
cpu: 23m
memory: 115Mi
cpu: 15m
memory: 100Mi
limits:
memory: 115Mi
cpu: 15m
memory: 100Mi
# Affinity - Soft Anti-Affinity to spread pods across nodes
affinity:
podAntiAffinity:
@@ -34,12 +38,14 @@ webhook:
cainjector:
replicaCount: 1
# Resource settings (VPA lowerBound/target)
resources:
requests:
cpu: 23m
memory: 230Mi
cpu: 15m
memory: 126Mi
limits:
memory: 230Mi
cpu: 15m
memory: 248Mi
# Affinity - Soft Anti-Affinity to spread pods across nodes
affinity:
podAntiAffinity: