ressources

2024-05-14 20:47:55 +02:00 · 2024-05-14 20:47:55 +02:00 · 92bb894ef6
commit 92bb894ef6
parent 9013439194
18 changed files with 48 additions and 115 deletions
--- a/apps/adguard/base/adguard-deployment.yaml
+++ b/apps/adguard/base/adguard-deployment.yaml
@ -38,7 +38,7 @@ spec:
          mountPath: /opt/adguardhome/conf
        resources:
          limits:
-            cpu: "0.5"
+            cpu: "0.1"
            memory: "512Mi"
      volumes:
        - name: adguard-pvc
--- a/apps/dashy/base/deployment.yaml
+++ b/apps/dashy/base/deployment.yaml
@ -34,7 +34,10 @@ spec:
            - name: http
              containerPort: 8080
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.1"
+              memory: "500M"
          volumeMounts:
            - name: config
              mountPath: /app/user-data
--- a/apps/emby/base/deployment.yaml
+++ b/apps/emby/base/deployment.yaml
@ -48,6 +48,8 @@ spec:
        resources:
          limits:
            gpu.intel.com/i915: 1 # requesting 1 GPU
+            cpu: "0.3"
+            memory: "2G"
        livenessProbe:
          httpGet:
            path: /web/index.html
--- a/apps/gitea/base/deployment.yaml
+++ b/apps/gitea/base/deployment.yaml
@ -26,7 +26,10 @@ spec:
            - name: ssh
              containerPort: 22
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.1"
+              memory: "1G"
          volumeMounts:
            - mountPath: /data
              name: gitea
--- a/apps/immich/deployment/database.yaml
+++ b/apps/immich/deployment/database.yaml
@ -22,7 +22,10 @@ spec:
          envFrom:
            - secretRef:
                name: immich-secret
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.2"
+              memory: "1G"
          volumeMounts:
            - mountPath: /var/lib/postgresql/data
              name: pgdata
--- a/apps/immich/deployment/redis.yaml
+++ b/apps/immich/deployment/redis.yaml
@ -18,7 +18,10 @@ spec:
      containers:
        - image: registry.hub.docker.com/library/redis:6.2-alpine@sha256:84882e87b54734154586e5f8abd4dce69fe7311315e2fc6d67c29614c8de2672
          name: immich-redis
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.1"
+              memory: "250G"
          ports:
            - name: http
              containerPort: 6379
--- a/apps/immich/deployment/server.yaml
+++ b/apps/immich/deployment/server.yaml
@ -30,7 +30,10 @@ spec:
              containerPort: 3002
              hostPort: 3002
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: "2G"
          volumeMounts:
            - mountPath: /usr/src/app/upload
              name: photos
@ -50,7 +53,10 @@ spec:
              containerPort: 3001
              hostPort: 3001
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: "2G"
          volumeMounts:
            - mountPath: /usr/src/app/upload
              name: photos
--- a/apps/kube-dashboard/base/kube-dashboard-rolebinding.yaml
+++ b/apps/kube-dashboard/base/kube-dashboard-rolebinding.yaml
@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: dashboard-user
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
- kind: ServiceAccount
-  name: dashboard-user
-  namespace: kubernetes-dashboard
--- a/apps/kube-dashboard/base/kube-dashboard-serviceaccount.yaml
+++ b/apps/kube-dashboard/base/kube-dashboard-serviceaccount.yaml
@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: dashboard-user
-  namespace: kubernetes-dashboard
--- a/apps/kube-dashboard/base/kube-dashboard-ui-ingress.yaml
+++ b/apps/kube-dashboard/base/kube-dashboard-ui-ingress.yaml
@ -1,14 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: kubernetes-dashboard
-spec:
-  entryPoints:
-    - web-local
-    - websecure-local
-  routes:
-  - match: Host(`kubernetes-dashboard.steffenillium.de`)
-    kind: Rule
-    services:
-    - name: kubernetes-dashboard
-      port: 80
--- a/apps/kube-dashboard/base/kube-dashboard-user-secret.yaml
+++ b/apps/kube-dashboard/base/kube-dashboard-user-secret.yaml
@ -1,11 +0,0 @@
-# Create long-live bearer token
-# retrieve with: `kubectl get secret dashboard-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d`
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: dashboard-user
-  namespace: kubernetes-dashboard
-  annotations:
-    kubernetes.io/service-account.name: "dashboard-user"   
-type: kubernetes.io/service-account-token  
--- a/apps/kube-dashboard/kustomization.yaml
+++ b/apps/kube-dashboard/kustomization.yaml
@ -1,18 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: kubernetes-dashboard
-
-resources:
- base/kube-dashboard-ui-ingress.yaml
- base/kube-dashboard-user-secret.yaml
- base/kube-dashboard-rolebinding.yaml
- base/kube-dashboard-serviceaccount.yaml
- https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
-
-patches:
- path: patches/dashboard-insecure-access.yaml
- path: patches/dashboard-insecure-service.yaml
-
-components:
-  - ../../components/local-region-selector.yaml
--- a/apps/kube-dashboard/patches/dashboard-insecure-access.yaml
+++ b/apps/kube-dashboard/patches/dashboard-insecure-access.yaml
@ -1,21 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kubernetes-dashboard
-  namespace: kubernetes-dashboard
-spec:
-  selector:
-    matchLabels:
-      k8s-app: kubernetes-dashboard
-  template:
-      metadata:
-        labels:
-          k8s-app: kubernetes-dashboard
-      spec:
-        containers:
-          - name: kubernetes-dashboard
-            args:
-            # - '--auto-generate-certificates'
-            - '--namespace=kubernetes-dashboard'
-            - "--enable-insecure-login=true"
-            - "--insecure-bind-address=0.0.0.0"
--- a/apps/kube-dashboard/patches/dashboard-insecure-service.yaml
+++ b/apps/kube-dashboard/patches/dashboard-insecure-service.yaml
@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    k8s-app: kubernetes-dashboard
-  name: kubernetes-dashboard
-  namespace: kubernetes-dashboard
-spec:
-  ports:
-  - port: 443
-    name: websecure
-    targetPort: 8443
-  - port: 80
-    name: web
-    targetPort: 9090
-  selector:
-    k8s-app: kubernetes-dashboard
--- a/apps/nextcloud/base/deployment.yaml
+++ b/apps/nextcloud/base/deployment.yaml
@ -53,8 +53,8 @@ spec:
                  key: MYSQL_PASSWORD
          resources:
            limits:
-              cpu: "0.2"
-              memory: "2Gi"
+              cpu: "0.3"
+              memory: "1G
          ports:
            - name: mariadb
              containerPort: 3306
@ -68,7 +68,7 @@ spec:
          resources:
            limits:
              cpu: "0.1"
-              memory: "2Gi"
+              memory: "250M"
          ports:
            - name: redis
              containerPort: 6379
@ -97,12 +97,14 @@ spec:
            - name: nextcloud
              containerPort: 80
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: "2G"
          volumeMounts:
            - mountPath: /var/www/html
              name: nextcloud-pvc
              subPath: 99f37b73-8f14-44b2-9211-af5de21de749/html
-
            - mountPath: /var/www/html/data
              name: nextcloud-data
      restartPolicy: Always
--- a/apps/paperless/base/deployment.yaml
+++ b/apps/paperless/base/deployment.yaml
@ -22,7 +22,7 @@ spec:
          resources:
            limits:
              cpu: "0.2"
-              memory: "1Gi"
+              memory: "1G"
          volumeMounts:
            - mountPath: /var/lib/postgresql/data
              name: paperless-pvc
@ -49,7 +49,10 @@ spec:
            - name: http 
              containerPort: 8000
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.2"
+              memory: "2G"
          volumeMounts:
            - mountPath: /usr/src/paperless/data
              name: paperless-pvc
@ -101,7 +104,7 @@ spec:
          resources:
            limits:
              cpu: "0.1"
-              memory: "1Gi"
+              memory: "250M"
      restartPolicy: Always
      volumes:
        - name: paperless-pvc
--- a/apps/sftpgo/base/deployment.yaml
+++ b/apps/sftpgo/base/deployment.yaml
@ -50,7 +50,10 @@ spec:
        #   httpGet:
        #     path: /healthz
        #     port: telemetry
-        resources: {}
+        resources:
+            limits:
+              cpu: "0.1"
+              memory: "400M"
        securityContext: {}
        volumeMounts:
        - mountPath: /etc/sftpgo
--- a/apps/vaultwarden/base/deployment.yaml
+++ b/apps/vaultwarden/base/deployment.yaml
@ -81,7 +81,10 @@ spec:
          ports:
            - containerPort: 80
              protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.3"
+              memory: "1G"
          volumeMounts:
            - mountPath: /data
              name: vaultwarden-pvc