set memory limits

53ll/values.yaml.gotmpl

@@ -13,14 +13,14 @@ readinessProbe:
   enabled: false
 
 resources:
-  limits:                        
-    cpu: 500m                    
-    ephemeral-storage: 2Gi
-    memory: 250Mi
   requests:
     cpu: 10m
     ephemeral-storage: 50Mi
-    memory: 128Mi
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    ephemeral-storage: 2Gi
+    memory: 224Mi
 persistence:
   size: 1Gi
 

helmfile.d/01-infrastructure.yaml

@@ -12,6 +12,8 @@ releases:
     namespace: metallb-system
     createNamespace: true
     chart: ../metallb
+    values:
+      - ../metallb/values.yaml.gotmpl
   - name: traefik
     namespace: traefik
     createNamespace: true

immich/values.yaml.gotmpl

@@ -26,8 +26,10 @@ valkey:
     resources:
       requests:
         cpu: 10m
+        memory: 64Mi
       limits:
         cpu: 1
+        memory: 32Mi
 
 server:
   enabled: true
@@ -39,8 +41,10 @@ server:
           resources:
             requests:
               cpu: 10m
+              memory: 256Mi
             limits:
               cpu: 1
+              memory: 512Mi
   ingress:
     main:
       enabled: true
@@ -62,5 +66,7 @@ machine-learning:
           resources:
             requests:
               cpu: 10m
+              memory: 128Mi
             limits:
               cpu: 1
+              memory: 384Mi

incngrnt-web/values.yaml.gotmpl

@@ -3,6 +3,14 @@ init:
   wget:
     url: https://git.incngrnt.ca/grant/incngrnt/releases/download/v0.0.8/v0.0.8.tar
 
+resources:
+  requests:
+    cpu: 10m
+    memory: 32Mi
+  limits:
+    cpu: 500m
+    memory: 32Mi
+
 ingress:
   enabled: true
   annotations:

k8up-backup/values.yaml.gotmpl

@@ -6,3 +6,11 @@ credentials:
   key: {{ requiredEnv "HETZNER_S3_ACCESS_SECRET" }}
 
 repoPassword: {{ requiredEnv "k8UP_REPO_PASSWORD" }}
+
+resources:
+  requests:
+    cpu: 10m
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    memory: 128Mi

k8up/values.yaml.gotmpl

@@ -2,3 +2,10 @@ k8up:
   envVars:
     - name: BACKUP_GLOBAL_CONCURRENT_BACKUP_JOBS_LIMIT
       values: 1
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
+    limits:
+      cpu: 500m
+      memory: 64Mi

kgnot/values.yaml.gotmpl

@@ -13,14 +13,14 @@ readinessProbe:
   enabled: false
 
 resources:
-  limits:                        
-    cpu: 500m                    
-    ephemeral-storage: 2Gi
-    memory: 250Mi
   requests:
     cpu: 10m
     ephemeral-storage: 50Mi
-    memory: 128Mi
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    ephemeral-storage: 2Gi
+    memory: 224Mi
 
 persistence:
   size: 1Gi

mariadb/values.yaml.gotmpl

@@ -6,11 +6,11 @@ persistent:
 
 primary:
   resources:
-        limits:
-          cpu: 375m
-          ephemeral-storage: 2Gi
-          memory: 384Mi
     requests:
       cpu: 50m
       ephemeral-storage: 50Mi
-          memory: 256Mi
+      memory: 96Mi
+    limits:
+      cpu: 1
+      ephemeral-storage: 2Gi
+      memory: 192Mi

matrix-registration/values.yaml.gotmpl

@@ -3,3 +3,11 @@ serverName: goatchat.ca
 serverBaseUrl: /gate
 registrationSharedSecret: {{ requiredEnv "GOATCHAT_REGISTRATION_SHARED_SECRET" }}
 adminApiSharedSecret: {{ requiredEnv "GOATCHAT_REGISTRATION_ADMIN_API_SHARE_SECRET" }}
+
+resources:
+  requests:
+    cpu: 10m
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    memory: 64Mi 

metallb/values.yaml.gotmpl

@@ -0,0 +1,17 @@
+controller:
+  resources:
+    requests:
+      cpu: 10m
+      memory: 32Mi
+    limits:
+      cpu: 500m
+      memory: 64Mi
+
+speaker:
+  resources:
+    requests:
+      cpu: 10m
+      memory: 48Mi
+    limits:
+      cpu: 500m
+      memory: 96Mi

postgres/operator-values.yaml.gotmpl

@@ -1,2 +1,10 @@
 pgoControllerLeaseName: ''
 replicas: 1
+
+resources:
+  requests:
+    cpu: 10m
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    memory: 160Mi

postgres/values.yaml.gotmpl

@@ -1,5 +1,21 @@
 instanceSize: 50Gi
-
+instanceMemory: 1Gi
+instanceCPU: 2
+instances:
+  - name: instance1
+    resources:
+      requests:
+        cpu: 100m
+        memory: 192Mi
+      limits:
+        cpu: 2
+        memory: 256Mi
+    dataVolumeClaimSpec:
+      accessModes:
+      - "ReadWriteOnce"
+      resources:
+        requests:
+          storage: 50Gi
 patroni:
   dynamicConfiguration:
     postgresql:

rook-ceph-cluster/values.yaml.gotmpl

@@ -7,29 +7,29 @@ cephClusterSpec:
     useAllDevices: false
     deviceFilter: "^sda"
     config:
-      osd_memory_target: "1610612736"  # 1.5GB per OSD to prevent excessive memory usage
+      osd_memory_target: "1073741824"  # 1GB per OSD to maintain 70% node capacity
   resources:
     mgr:
       requests:
         cpu: 50m
-        memory: 512Mi
+        memory: 256Mi
       limits:
         cpu: "1"
-        memory: 768Mi
+        memory: 704Mi
     mon:
       requests:
         cpu: 100m
-        memory: 512Mi
+        memory: 256Mi
       limits:
         cpu: "1"
-        memory: 768Mi
+        memory: 64Mi
     osd:
       requests:
         cpu: 100m
-        memory: 1536Mi
+        memory: 896Mi
       limits:
         cpu: "1"
-        memory: 2Gi
+        memory: 1280Mi
 
 ingress:
   dashboard:
@@ -60,10 +60,10 @@ cephFileSystems:
         resources:
           requests:
             cpu: 50m
-            memory: 256Mi
+            memory: 64Mi
           limits:
             cpu: "1"
-            memory: 512Mi
+            memory: 32Mi
     storageClass:
       enabled: true
       isDefault: false

rook-ceph/values.yaml.gotmpl

@@ -4,4 +4,4 @@ resources:
     memory: 128Mi
   limits:
     cpu: 1
-    memory: 256Mi
+    memory: 300Mi

synapse/values.yaml.gotmpl

@@ -16,10 +16,10 @@ synapse:
   resources:
     requests:
       cpu: 10m
-      memory: 160Mi
+      memory: 128Mi
     limits:
       cpu: '1'
-      memory: 320Mi
+      memory: 192Mi
 
 config:
   macaroonSecretKey: {{ requiredEnv "GOATCHAT_SYNAPSE_MACAROON_SECRET_KEY" }}

tailscale/values.yaml.gotmpl

@@ -3,6 +3,14 @@ operatorConfig:
     - name: PROXY_PRIORITY_CLASS_NAME
       value: critical
 
+resources:
+  requests:
+    cpu: 10m
+    memory: 48Mi
+  limits:
+    cpu: 500m
+    memory: 64Mi
+
 oauth:
   clientId: {{ requiredEnv "TAILSCALE_OAUTH_CLIENT_ID" }}
   clientSecret: {{ requiredEnv "TAILSCALE_OAUTH_CLIENT_SECRET" }} 

traefik/values.yaml.gotmpl

@@ -7,6 +7,14 @@ deployment:
         - name: data
           mountPath: /data
 
+resources:
+  requests:
+    cpu: 50m
+    memory: 64Mi
+  limits:
+    cpu: 1
+    memory: 128Mi
+
 updateStrategy:
   type: Recreate