set memory limits

2025-12-07 15:25:24 -07:00
parent 6d604c269d
commit 708efca878
17 changed files with 133 additions and 37 deletions
--- a/53ll/values.yaml.gotmpl
+++ b/53ll/values.yaml.gotmpl
@@ -13,14 +13,14 @@ readinessProbe:
  enabled: false

 resources:
-  limits:                        
-    cpu: 500m                    
-    ephemeral-storage: 2Gi
-    memory: 250Mi
  requests:
    cpu: 10m
    ephemeral-storage: 50Mi
-    memory: 128Mi
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    ephemeral-storage: 2Gi
+    memory: 224Mi
 persistence:
  size: 1Gi

--- a/helmfile.d/01-infrastructure.yaml
+++ b/helmfile.d/01-infrastructure.yaml
@@ -12,6 +12,8 @@ releases:
    namespace: metallb-system
    createNamespace: true
    chart: ../metallb
+    values:
+      - ../metallb/values.yaml.gotmpl
  - name: traefik
    namespace: traefik
    createNamespace: true
--- a/immich/values.yaml.gotmpl
+++ b/immich/values.yaml.gotmpl
@@ -26,8 +26,10 @@ valkey:
    resources:
      requests:
        cpu: 10m
+        memory: 64Mi
      limits:
        cpu: 1
+        memory: 32Mi

 server:
  enabled: true
@@ -39,8 +41,10 @@ server:
          resources:
            requests:
              cpu: 10m
+              memory: 256Mi
            limits:
              cpu: 1
+              memory: 512Mi
  ingress:
    main:
      enabled: true
@@ -62,5 +66,7 @@ machine-learning:
          resources:
            requests:
              cpu: 10m
+              memory: 128Mi
            limits:
              cpu: 1
+              memory: 384Mi
--- a/incngrnt-web/values.yaml.gotmpl
+++ b/incngrnt-web/values.yaml.gotmpl
@@ -3,6 +3,14 @@ init:
  wget:
    url: https://git.incngrnt.ca/grant/incngrnt/releases/download/v0.0.8/v0.0.8.tar

+resources:
+  requests:
+    cpu: 10m
+    memory: 32Mi
+  limits:
+    cpu: 500m
+    memory: 32Mi
+
 ingress:
  enabled: true
  annotations:
--- a/k8up-backup/values.yaml.gotmpl
+++ b/k8up-backup/values.yaml.gotmpl
@@ -6,3 +6,11 @@ credentials:
  key: {{ requiredEnv "HETZNER_S3_ACCESS_SECRET" }}

 repoPassword: {{ requiredEnv "k8UP_REPO_PASSWORD" }}
+
+resources:
+  requests:
+    cpu: 10m
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    memory: 128Mi
--- a/k8up/values.yaml.gotmpl
+++ b/k8up/values.yaml.gotmpl
@@ -2,3 +2,10 @@ k8up:
  envVars:
    - name: BACKUP_GLOBAL_CONCURRENT_BACKUP_JOBS_LIMIT
      values: 1
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
+    limits:
+      cpu: 500m
+      memory: 64Mi
--- a/kgnot/values.yaml.gotmpl
+++ b/kgnot/values.yaml.gotmpl
@@ -13,14 +13,14 @@ readinessProbe:
  enabled: false

 resources:
-  limits:                        
-    cpu: 500m                    
-    ephemeral-storage: 2Gi
-    memory: 250Mi
  requests:
    cpu: 10m
    ephemeral-storage: 50Mi
-    memory: 128Mi
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    ephemeral-storage: 2Gi
+    memory: 224Mi

 persistence:
  size: 1Gi
--- a/mariadb/values.yaml.gotmpl
+++ b/mariadb/values.yaml.gotmpl
@@ -6,11 +6,11 @@ persistent:

 primary:
  resources:
-        limits:
-          cpu: 375m
-          ephemeral-storage: 2Gi
-          memory: 384Mi
    requests:
      cpu: 50m
      ephemeral-storage: 50Mi
-          memory: 256Mi
+      memory: 96Mi
+    limits:
+      cpu: 1
+      ephemeral-storage: 2Gi
+      memory: 192Mi
--- a/matrix-registration/values.yaml.gotmpl
+++ b/matrix-registration/values.yaml.gotmpl
@@ -3,3 +3,11 @@ serverName: goatchat.ca
 serverBaseUrl: /gate
 registrationSharedSecret: {{ requiredEnv "GOATCHAT_REGISTRATION_SHARED_SECRET" }}
 adminApiSharedSecret: {{ requiredEnv "GOATCHAT_REGISTRATION_ADMIN_API_SHARE_SECRET" }}
+
+resources:
+  requests:
+    cpu: 10m
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    memory: 64Mi 
--- a/metallb/values.yaml.gotmpl
+++ b/metallb/values.yaml.gotmpl
@@ -0,0 +1,17 @@
+controller:
+  resources:
+    requests:
+      cpu: 10m
+      memory: 32Mi
+    limits:
+      cpu: 500m
+      memory: 64Mi
+
+speaker:
+  resources:
+    requests:
+      cpu: 10m
+      memory: 48Mi
+    limits:
+      cpu: 500m
+      memory: 96Mi
--- a/postgres/operator-values.yaml.gotmpl
+++ b/postgres/operator-values.yaml.gotmpl
@@ -1,2 +1,10 @@
 pgoControllerLeaseName: ''
 replicas: 1
+
+resources:
+  requests:
+    cpu: 10m
+    memory: 64Mi
+  limits:
+    cpu: 500m
+    memory: 160Mi
--- a/postgres/values.yaml.gotmpl
+++ b/postgres/values.yaml.gotmpl
@@ -1,5 +1,21 @@
 instanceSize: 50Gi
-
+instanceMemory: 1Gi
+instanceCPU: 2
+instances:
+  - name: instance1
+    resources:
+      requests:
+        cpu: 100m
+        memory: 192Mi
+      limits:
+        cpu: 2
+        memory: 256Mi
+    dataVolumeClaimSpec:
+      accessModes:
+      - "ReadWriteOnce"
+      resources:
+        requests:
+          storage: 50Gi
 patroni:
  dynamicConfiguration:
    postgresql:
--- a/rook-ceph-cluster/values.yaml.gotmpl
+++ b/rook-ceph-cluster/values.yaml.gotmpl
@@ -7,29 +7,29 @@ cephClusterSpec:
    useAllDevices: false
    deviceFilter: "^sda"
    config:
-      osd_memory_target: "1610612736"  # 1.5GB per OSD to prevent excessive memory usage
+      osd_memory_target: "1073741824"  # 1GB per OSD to maintain 70% node capacity
  resources:
    mgr:
      requests:
        cpu: 50m
-        memory: 512Mi
+        memory: 256Mi
      limits:
        cpu: "1"
-        memory: 768Mi
+        memory: 704Mi
    mon:
      requests:
        cpu: 100m
-        memory: 512Mi
+        memory: 256Mi
      limits:
        cpu: "1"
-        memory: 768Mi
+        memory: 64Mi
    osd:
      requests:
        cpu: 100m
-        memory: 1536Mi
+        memory: 896Mi
      limits:
        cpu: "1"
-        memory: 2Gi
+        memory: 1280Mi

 ingress:
  dashboard:
@@ -60,10 +60,10 @@ cephFileSystems:
        resources:
          requests:
            cpu: 50m
-            memory: 256Mi
+            memory: 64Mi
          limits:
            cpu: "1"
-            memory: 512Mi
+            memory: 32Mi
    storageClass:
      enabled: true
      isDefault: false
--- a/rook-ceph/values.yaml.gotmpl
+++ b/rook-ceph/values.yaml.gotmpl
@@ -4,4 +4,4 @@ resources:
    memory: 128Mi
  limits:
    cpu: 1
-    memory: 256Mi
+    memory: 300Mi
--- a/synapse/values.yaml.gotmpl
+++ b/synapse/values.yaml.gotmpl
@@ -16,10 +16,10 @@ synapse:
  resources:
    requests:
      cpu: 10m
-      memory: 160Mi
+      memory: 128Mi
    limits:
      cpu: '1'
-      memory: 320Mi
+      memory: 192Mi

 config:
  macaroonSecretKey: {{ requiredEnv "GOATCHAT_SYNAPSE_MACAROON_SECRET_KEY" }}
--- a/tailscale/values.yaml.gotmpl
+++ b/tailscale/values.yaml.gotmpl
@@ -3,6 +3,14 @@ operatorConfig:
    - name: PROXY_PRIORITY_CLASS_NAME
      value: critical

+resources:
+  requests:
+    cpu: 10m
+    memory: 48Mi
+  limits:
+    cpu: 500m
+    memory: 64Mi
+
 oauth:
  clientId: {{ requiredEnv "TAILSCALE_OAUTH_CLIENT_ID" }}
  clientSecret: {{ requiredEnv "TAILSCALE_OAUTH_CLIENT_SECRET" }} 
--- a/traefik/values.yaml.gotmpl
+++ b/traefik/values.yaml.gotmpl
@@ -7,6 +7,14 @@ deployment:
        - name: data
          mountPath: /data

+resources:
+  requests:
+    cpu: 50m
+    memory: 64Mi
+  limits:
+    cpu: 1
+    memory: 128Mi
+
 updateStrategy:
  type: Recreate