2 Commits

Author	SHA1	Message	Date
Mayne0213	b59c5618ea	REFACTOR(resources): remove cpu limits ... - to prevent throttling Removed CPU limits from all infrastructure components while keeping memory limits for protection: - cnpg: removed 500m CPU limit - external-secrets: removed 200m, 100m CPU limits (operator, webhook, certController) - falco: removed 500m CPU limit (falcosidekick webui) - vault: removed 500m CPU limit - velero: removed 500m, 1000m CPU limits (server, node-agent) Benefits: - ✅ Prevents CPU throttling - ✅ Better performance and lower latency - ✅ More efficient resource utilization - ✅ Simpler management (only requests to tune) Memory limits are kept to prevent memory leaks and OOM issues.	2026-01-04 23:47:13 +09:00
Mayne0213	3366a6b5b8	FEAT(velero): Add Velero, Falco, ... - and CNPG infrastructure components Add three critical infrastructure components via GitOps: - Velero: Backup and disaster recovery solution - Configured with Minio S3 backend - Daily full cluster backups (30-day retention) - Hourly backups for critical namespaces (7-day retention) - Credentials managed via External Secrets from Vault - Falco: Runtime security monitoring - eBPF-based threat detection - Custom rules for container security - Falcosidekick for alert forwarding - Prometheus metrics enabled - CNPG (CloudNativePG): PostgreSQL operator - Kubernetes-native PostgreSQL management - Automated failover and backups - Will replace Bitnami PostgreSQL All components follow existing GitOps patterns: - Helm charts deployed via ArgoCD - Values managed in Git - Automated sync with selfHeal enabled	2026-01-04 23:47:13 +09:00