Mayne0213
5acc1c7f9e
- Update authelia memory 256Mi→194Mi - Update authelia redis cpu 10m→23m, memory 64Mi→100Mi - Update falco memory 263Mi→283Mi - Update falcosidekick cpu 10m→15m, memory 128Mi→100Mi - Update external-secrets operator cpu 5m→15m, memory 128Mi→100Mi - Update external-secrets webhook cpu 2m→15m, memory 128Mi→100Mi - Update external-secrets certController cpu 2m→15m, memory 256Mi→283Mi - Update vault cpu 35m→49m, memory 263Mi→175Mi
75 lines
1.8 KiB
YAML
75 lines
1.8 KiB
YAML
# External Secrets Operator Helm Values
|
|
# Chart: https://github.com/external-secrets/external-secrets
|
|
|
|
# Replica count
|
|
replicaCount: 1
|
|
|
|
# 리소스 제한
|
|
resources:
|
|
requests:
|
|
cpu: 15m
|
|
memory: 100Mi
|
|
limits:
|
|
memory: 100Mi
|
|
|
|
# 동시 실행 제한
|
|
concurrent: 3
|
|
|
|
# 로그 레벨
|
|
logLevel: info
|
|
|
|
# CRD 자동 설치 비활성화 (annotation 크기 제한 문제 회피)
|
|
# CRD는 이미 설치되어 있으며, 업그레이드 시 수동으로 적용 필요
|
|
installCRDs: false
|
|
|
|
# Webhook 설정
|
|
webhook:
|
|
replicaCount: 1
|
|
resources:
|
|
requests:
|
|
cpu: 15m
|
|
memory: 100Mi
|
|
limits:
|
|
memory: 100Mi
|
|
# Affinity - Soft Anti-Affinity to spread pods across nodes
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-secrets-webhook
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
# CertController 설정
|
|
certController:
|
|
replicaCount: 1
|
|
resources:
|
|
requests:
|
|
cpu: 15m
|
|
memory: 283Mi
|
|
limits:
|
|
memory: 283Mi
|
|
# Affinity - Soft Anti-Affinity to spread pods across nodes
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-secrets-cert-controller
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
# Affinity - Soft Anti-Affinity to spread pods across nodes
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-secrets
|
|
topologyKey: kubernetes.io/hostname
|