Files
storage/cnpg/helm-values.yaml
Mayne0213 46bb39ed9e PERF(storage): optimize resources via VPA
- cnpg: CPU 15m/15m, memory 100Mi/100Mi
- minio: CPU 48m/104m, memory 126Mi/183Mi
- pgweb: CPU 15m/15m, memory 100Mi/100Mi
- velero: CPU 10m/14m, memory 50Mi/50Mi
- velero-node-agent: CPU 15m/15m, memory 100Mi/100Mi
- zot: CPU 15m/15m, memory 100Mi/248Mi
2026-01-12 01:08:45 +09:00

96 lines
1.9 KiB
YAML

# CloudNativePG Operator Helm Values
# Chart: https://github.com/cloudnative-pg/charts
# Operator image
image:
repository: ghcr.io/cloudnative-pg/cloudnative-pg
tag: 1.25.1
pullPolicy: IfNotPresent
# Replica count for operator
replicaCount: 1
# Resource settings (VPA lowerBound/target)
resources:
requests:
cpu: 15m
memory: 100Mi
limits:
cpu: 15m
memory: 100Mi
# RBAC
rbac:
create: true
# Service Account
serviceAccount:
create: true
name: cnpg-operator
# Monitoring
monitoring:
# Enable Prometheus PodMonitor
podMonitorEnabled: true
# Grafana Dashboard auto-creation disabled due to ConfigMap size limit
# Dashboard can be manually imported from Grafana.com (ID: 20417)
# https://grafana.com/grafana/dashboards/20417-cloudnativepg/
grafanaDashboard:
create: false
# Webhook configuration
webhook:
port: 9443
mutating:
create: true
validating:
create: true
# Operator configuration
config:
# Data checksums for PostgreSQL
data:
INHERITED_ANNOTATIONS: "cert-manager.io/*, argocd.argoproj.io/*"
INHERITED_LABELS: "app.kubernetes.io/*"
# Monitoring queries interval
MONITORING_QUERIES_CONFIGMAP: ""
MONITORING_QUERIES_SECRET: ""
# CRD configuration
crds:
create: true
# Node selector
nodeSelector: {}
# Tolerations
tolerations: []
# High priority for critical database operator
priorityClassName: high-priority
# Affinity - Soft Anti-Affinity to spread pods across nodes
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
podAffinityTerm:
labelSelector:
matchLabels:
app.kubernetes.io/name: cloudnative-pg
topologyKey: kubernetes.io/hostname
# Security context
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 10001
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault