FIX(velero): increase memory limit to fix plugin startup

- Increase memory request from 50Mi to 128Mi - Increase memory limit from 50Mi to 256Mi - Fixes AWS plugin timeout/killed error loop
PERF(storage): remove CPU limits for stability
2026-01-12 03:08:45 +09:00 · 2026-01-12 02:17:00 +09:00 · 2026-01-12 01:08:45 +09:00 · 2026-01-11 22:36:38 +09:00 · 2026-01-11 22:12:51 +09:00 · 2026-01-10 20:43:32 +09:00
17 changed files with 49 additions and 46 deletions
--- a/application.yaml
+++ b/application.yaml
@@ -9,7 +9,7 @@ spec:
  project: default

  source:
-    repoURL: https://github.com/K3S-HOME/storage.git
+    repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    path: .

--- a/cnpg/argocd.yaml
+++ b/cnpg/argocd.yaml
@@ -14,7 +14,7 @@ spec:
    helm:
      valueFiles:
      - $values/cnpg/helm-values.yaml
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    ref: values
  destination:
--- a/cnpg/helm-values.yaml
+++ b/cnpg/helm-values.yaml
@@ -10,13 +10,13 @@ image:
 # Replica count for operator
 replicaCount: 1

-# Resource requests for operator
+# Resource settings (no CPU limit for stability)
 resources:
  requests:
    cpu: 15m
-    memory: 121Mi
+    memory: 100Mi
  limits:
-    memory: 121Mi
+    memory: 100Mi

 # RBAC
 rbac:
--- a/minio/argocd.yaml
+++ b/minio/argocd.yaml
@@ -14,10 +14,10 @@ spec:
    helm:
      valueFiles:
      - $values/minio/helm-values.yaml
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    ref: values
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    path: minio
  destination:
--- a/minio/helm-values.yaml
+++ b/minio/helm-values.yaml
@@ -32,13 +32,13 @@ existingSecret: minio-root-password
 rootUserSecretKey: root-user
 rootPasswordSecretKey: root-password

-# Resources
+# Resource settings (no CPU limit for stability)
 resources:
  requests:
-    memory: 175Mi
-    cpu: 15m
+    cpu: 48m
+    memory: 126Mi
  limits:
-    memory: 175Mi
+    memory: 183Mi

 # Service
 service:
--- a/minio/manifests/secret.yaml
+++ b/minio/manifests/secret.yaml
@@ -14,19 +14,19 @@ spec:
  data:
    - secretKey: root-user
      remoteRef:
-        key: minio
+        key: storage/minio
        property: ROOT_USER
    - secretKey: root-password
      remoteRef:
-        key: minio
+        key: storage/minio
        property: ROOT_PASSWORD
    - secretKey: rootUser
      remoteRef:
-        key: minio
+        key: storage/minio
        property: ROOT_USER
    - secretKey: rootPassword
      remoteRef:
-        key: minio
+        key: storage/minio
        property: ROOT_PASSWORD
 ---
 apiVersion: external-secrets.io/v1
@@ -49,28 +49,28 @@ spec:
    data:
      - secretKey: AWS_ACCESS_KEY_ID
        remoteRef:
-          key: minio-s3-credentials
+          key: storage/minio-s3-credentials
          property: AWS_ACCESS_KEY_ID
          conversionStrategy: Default
          decodingStrategy: None
          metadataPolicy: None
      - secretKey: AWS_SECRET_ACCESS_KEY
        remoteRef:
-          key: minio-s3-credentials
+          key: storage/minio-s3-credentials
          property: AWS_SECRET_ACCESS_KEY
          conversionStrategy: Default
          decodingStrategy: None
          metadataPolicy: None
      - secretKey: AWS_REGION
        remoteRef:
-          key: minio-s3-credentials
+          key: storage/minio-s3-credentials
          property: AWS_REGION
          conversionStrategy: Default
          decodingStrategy: None
          metadataPolicy: None
      - secretKey: AWS_S3_ENDPOINT
        remoteRef:
-          key: minio-s3-credentials
+          key: storage/minio-s3-credentials
          property: AWS_S3_ENDPOINT
          conversionStrategy: Default
          decodingStrategy: None
--- a/pgweb/argocd.yaml
+++ b/pgweb/argocd.yaml
@@ -14,10 +14,10 @@ spec:
    helm:
      valueFiles:
      - $values/pgweb/helm-values.yaml
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    ref: values
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    path: pgweb
  destination:
--- a/pgweb/helm-values.yaml
+++ b/pgweb/helm-values.yaml
@@ -20,6 +20,7 @@ controllers:
              secretKeyRef:
                name: pgweb-password
                key: database-url
+        # Resource settings (no CPU limit for stability)
        resources:
          requests:
            cpu: 15m
--- a/pgweb/manifests/secret.yaml
+++ b/pgweb/manifests/secret.yaml
@@ -14,13 +14,13 @@ spec:
  data:
    - secretKey: database-url
      remoteRef:
-        key: pgweb
+        key: storage/pgweb
        property: DATABASE_URL
    - secretKey: auth-user
      remoteRef:
-        key: pgweb
+        key: storage/pgweb
        property: AUTH_USER
    - secretKey: auth-password
      remoteRef:
-        key: pgweb
+        key: storage/pgweb
        property: AUTH_PASSWORD
--- a/postgresql/argocd/postgresql.yaml
+++ b/postgresql/argocd/postgresql.yaml
@@ -9,7 +9,7 @@ spec:
  project: default

  source:
-    repoURL: https://github.com/K3S-HOME/storage.git
+    repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    path: postgresql

--- a/postgresql/manifests/secret.yaml
+++ b/postgresql/manifests/secret.yaml
@@ -19,7 +19,7 @@ spec:
  data:
    - secretKey: password
      remoteRef:
-        key: postgresql
+        key: storage/postgresql
        property: PASSWORD

 ---
@@ -44,5 +44,5 @@ spec:
  data:
    - secretKey: password
      remoteRef:
-        key: postgresql
+        key: storage/postgresql
        property: PASSWORD
--- a/velero/argocd.yaml
+++ b/velero/argocd.yaml
@@ -20,10 +20,10 @@ spec:
    helm:
      valueFiles:
      - $values/velero/helm-values.yaml
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    ref: values
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    path: velero
    kustomize: {}
--- a/velero/helm-values.yaml
+++ b/velero/helm-values.yaml
@@ -13,13 +13,13 @@ image:
 # Replica count (Velero does not support multiple replicas)
 replicaCount: 1

-# Resource requests (VPA recommendation: 11m CPU)
+# Resource settings (no CPU limit for stability)
 resources:
  requests:
-    cpu: 11m
-    memory: 75Mi
+    cpu: 10m
+    memory: 128Mi
  limits:
-    memory: 75Mi
+    memory: 256Mi

 # Init containers for plugins
 initContainers:
@@ -37,6 +37,7 @@ deployNodeAgent: true
 nodeAgent:
  podVolumePath: /var/lib/kubelet/pods
  privileged: false
+  # Resource settings (no CPU limit for stability)
  resources:
    requests:
      cpu: 15m
--- a/velero/manifests/secret.yaml
+++ b/velero/manifests/secret.yaml
@@ -21,11 +21,11 @@ spec:
  data:
    - secretKey: minioAccessKey
      remoteRef:
-        key: minio
+        key: storage/minio
        property: ROOT_USER
    - secretKey: minioSecretKey
      remoteRef:
-        key: minio
+        key: storage/minio
        property: ROOT_PASSWORD

 ---
@@ -45,9 +45,9 @@ spec:
  data:
    - secretKey: username
      remoteRef:
-        key: velero
+        key: storage/velero
        property: UI_USERNAME
    - secretKey: password
      remoteRef:
-        key: velero
+        key: storage/velero
        property: UI_PASSWORD
--- a/zot/argocd.yaml
+++ b/zot/argocd.yaml
@@ -14,10 +14,10 @@ spec:
    helm:
      valueFiles:
      - $values/zot/helm-values.yaml
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    ref: values
-  - repoURL: https://github.com/K3S-HOME/storage.git
+  - repoURL: https://github0213.com/K3S-HOME/storage.git
    targetRevision: main
    path: zot
  destination:
--- a/zot/helm-values.yaml
+++ b/zot/helm-values.yaml
@@ -32,12 +32,13 @@ controllers:
                port: 5000
              initialDelaySeconds: 5
              periodSeconds: 10
+        # Resource settings (no CPU limit for stability)
        resources:
          requests:
            cpu: 15m
-            memory: 121Mi
+            memory: 100Mi
          limits:
-            memory: 121Mi
+            memory: 248Mi
 service:
  zot:
    controller: zot
--- a/zot/manifests/secret.yaml
+++ b/zot/manifests/secret.yaml
@@ -14,7 +14,7 @@ spec:
  data:
  - secretKey: htpasswd
    remoteRef:
-      key: zot
+      key: storage/zot
      property: HTPASSWD
 ---
 apiVersion: external-secrets.io/v1
@@ -41,11 +41,11 @@ spec:
  data:
  - secretKey: client_id
    remoteRef:
-      key: zot
+      key: storage/zot
      property: OIDC_CLIENT_ID
  - secretKey: client_secret
    remoteRef:
-      key: zot
+      key: storage/zot
      property: OIDC_CLIENT_SECRET
 ---
 apiVersion: external-secrets.io/v1
@@ -72,9 +72,9 @@ spec:
  data:
  - secretKey: hashKey
    remoteRef:
-      key: zot
+      key: storage/zot
      property: SESSION_HASH_KEY
  - secretKey: encryptKey
    remoteRef:
-      key: zot
+      key: storage/zot
      property: SESSION_BLOCK_KEY
Author	SHA1	Message	Date
Mayne0213	17bffa5f04	FIX(velero): increase memory limit to fix plugin startup - Increase memory request from 50Mi to 128Mi - Increase memory limit from 50Mi to 256Mi - Fixes AWS plugin timeout/killed error loop	2026-01-12 03:08:45 +09:00
Mayne0213	3088cde155	PERF(storage): remove CPU limits for stability - Remove CPU limits from storage components - Prevents CPU throttling issues	2026-01-12 02:17:00 +09:00
Mayne0213	46bb39ed9e	PERF(storage): optimize resources via VPA - cnpg: CPU 15m/15m, memory 100Mi/100Mi - minio: CPU 48m/104m, memory 126Mi/183Mi - pgweb: CPU 15m/15m, memory 100Mi/100Mi - velero: CPU 10m/14m, memory 50Mi/50Mi - velero-node-agent: CPU 15m/15m, memory 100Mi/100Mi - zot: CPU 15m/15m, memory 100Mi/248Mi	2026-01-12 01:08:45 +09:00
Mayne0213	38cf6abc0b	refactor: update Vault secret paths to new categorized structure - minio: minio → storage/minio, minio-s3-credentials → storage/minio-s3-credentials - pgweb: pgweb → storage/pgweb - postgresql: postgresql → storage/postgresql - velero: minio → storage/minio, velero → storage/velero - zot: zot → storage/zot Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-11 22:36:38 +09:00
Mayne0213	e9b509d15f	PERF(zot): increase memory to 256Mi - Double memory request from 121Mi to 256Mi - Double memory limit from 121Mi to 256Mi - Fix OOM during image push operations	2026-01-11 22:12:51 +09:00
Mayne0213	d38634bbb7	migrate: change repoURLs from GitHub to Gitea Update all ArgoCD Application references to use Gitea (github0213.com) instead of GitHub for K3S-HOME/storage repository. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-10 20:43:32 +09:00