Mayne0213
cbf00275e8
- Add replicaCount: 2 to authelia, external-secrets, falco - Add soft pod anti-affinity for node distribution - Configure affinity for all security components
80 lines
2.0 KiB
YAML
80 lines
2.0 KiB
YAML
# External Secrets Operator Helm Values
|
|
# Chart: https://github.com/external-secrets/external-secrets
|
|
|
|
# Replica count
|
|
replicaCount: 2
|
|
|
|
# 리소스 제한
|
|
resources:
|
|
requests:
|
|
cpu: 5m # Reduced from 20m based on actual usage (1m)
|
|
memory: 64Mi
|
|
limits:
|
|
# cpu: removed to prevent throttling
|
|
memory: 256Mi
|
|
|
|
# Webhook 설정
|
|
webhook:
|
|
replicaCount: 2
|
|
resources:
|
|
requests:
|
|
cpu: 2m # Reduced from 10m based on actual usage (1m)
|
|
memory: 32Mi
|
|
limits:
|
|
# cpu: removed to prevent throttling
|
|
memory: 128Mi
|
|
|
|
# CertController 설정
|
|
certController:
|
|
replicaCount: 2
|
|
resources:
|
|
requests:
|
|
cpu: 2m # Reduced from 10m based on actual usage (1m)
|
|
memory: 32Mi
|
|
limits:
|
|
# cpu: removed to prevent throttling
|
|
memory: 128Mi
|
|
|
|
# 동시 실행 제한
|
|
concurrent: 3
|
|
|
|
# 로그 레벨
|
|
logLevel: info
|
|
|
|
# CRD 자동 설치 비활성화 (annotation 크기 제한 문제 회피)
|
|
# CRD는 이미 설치되어 있으며, 업그레이드 시 수동으로 적용 필요
|
|
installCRDs: false
|
|
|
|
# Affinity - Soft Anti-Affinity to spread pods across nodes
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-secrets
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
webhook:
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-secrets-webhook
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
certController:
|
|
affinity:
|
|
podAntiAffinity:
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
|
- weight: 100
|
|
podAffinityTerm:
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: external-secrets-cert-controller
|
|
topologyKey: kubernetes.io/hostname
|