Commit Graph

5 Commits

Author SHA1 Message Date
31007c5586 PERF(resources): remove CPU limits - keep memory limits only
- CPU throttling prevents app startup, not crashes
- Memory OOM is the real cascading failure cause
- CPU request ensures fair scheduling
2026-01-07 23:48:43 +09:00
1cd89f6bae REFACTOR(falco): remove CPU limit
- Set cpu: null to override chart default (1 core)
- Prevents CPU throttling under high load
2026-01-05 00:40:26 +09:00
bce1bdf12b FIX(trivy): fix Trivy resource limits
- Operator: add 512Mi memory limit
- Scan jobs: increase memory limit 500M -> 768Mi
- Reduce concurrent scan jobs 3 -> 2
2026-01-05 00:40:26 +09:00
589b98a875 REFACTOR(trivy): remove Trivy scan job CPU limit
- Remove CPU limit to prevent throttling
- Optimize scan job performance
2026-01-05 00:40:26 +09:00
8da74949b8 FEAT(trivy): add trivy operator
- for container vulnerability scanning
- Add Trivy Operator Helm chart (v0.31.0)
- Configure ServiceMonitor for Prometheus integration
- Enable vulnerability, config audit, and RBAC scanners
- Use Longhorn storage class for Trivy DB
- Exclude kube-system namespaces from scanning
2026-01-04 23:41:39 +09:00