PERF(security): optimize resources via VPA

- authelia: CPU 15m/15m, memory 100Mi/144Mi
- authelia-redis: CPU 22m/32m, memory 100Mi/100Mi
- cert-manager: CPU 15m/15m, memory 100Mi/100Mi
- cert-manager-cainjector: CPU 15m/15m, memory 126Mi/248Mi
- cert-manager-webhook: CPU 15m/15m, memory 100Mi/100Mi
- external-secrets: CPU 15m/15m, memory 100Mi/109Mi
- external-secrets-cert-controller: CPU 15m/15m, memory 144Mi/297Mi
- external-secrets-webhook: CPU 15m/15m, memory 100Mi/100Mi
- falco: CPU 34m/53m, memory 93Mi/144Mi
- falcosidekick: CPU 15m/15m, memory 100Mi/100Mi
- vault: CPU 34m/53m, memory 126Mi/163Mi
This commit is contained in:
2026-01-12 01:08:45 +09:00
parent 2cfcc586be
commit ec09ea403f
5 changed files with 49 additions and 31 deletions

View File

@@ -4,13 +4,14 @@
# Replica count
replicaCount: 1
# 리소스 제한 (20% increase from original)
# Resource settings (VPA lowerBound/target)
resources:
requests:
cpu: 5m
memory: 154Mi
cpu: 15m
memory: 100Mi
limits:
memory: 154Mi
cpu: 15m
memory: 109Mi
# 동시 실행 제한
concurrent: 3
@@ -25,12 +26,14 @@ installCRDs: false
# Webhook 설정
webhook:
replicaCount: 1
# Resource settings (VPA lowerBound/upperBound)
resources:
requests:
cpu: 2m
memory: 154Mi
cpu: 15m
memory: 100Mi
limits:
memory: 154Mi
cpu: 15m
memory: 100Mi
# Affinity - Soft Anti-Affinity to spread pods across nodes
affinity:
podAntiAffinity:
@@ -45,12 +48,14 @@ webhook:
# CertController 설정
certController:
replicaCount: 1
# Resource settings (VPA lowerBound/target)
resources:
requests:
cpu: 2m
memory: 307Mi
cpu: 15m
memory: 144Mi
limits:
memory: 307Mi
cpu: 15m
memory: 297Mi
# Affinity - Soft Anti-Affinity to spread pods across nodes
affinity:
podAntiAffinity: