ressources

apps/adguard/base/adguard-deployment.yaml

@@ -38,7 +38,7 @@ spec:
           mountPath: /opt/adguardhome/conf
         resources:
           limits:
-            cpu: "0.5"
+            cpu: "0.1"
             memory: "512Mi"
       volumes:
         - name: adguard-pvc

apps/dashy/base/deployment.yaml

@@ -34,7 +34,10 @@ spec:
             - name: http
               containerPort: 8080
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.1"
+              memory: "500M"
           volumeMounts:
             - name: config
               mountPath: /app/user-data

apps/emby/base/deployment.yaml

@@ -48,6 +48,8 @@ spec:
         resources:
           limits:
             gpu.intel.com/i915: 1 # requesting 1 GPU
+            cpu: "0.3"
+            memory: "2G"
         livenessProbe:
           httpGet:
             path: /web/index.html

apps/gitea/base/deployment.yaml

@@ -26,7 +26,10 @@ spec:
             - name: ssh
               containerPort: 22
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.1"
+              memory: "1G"
           volumeMounts:
             - mountPath: /data
               name: gitea

apps/immich/deployment/database.yaml

@@ -22,7 +22,10 @@ spec:
           envFrom:
             - secretRef:
                 name: immich-secret
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.2"
+              memory: "1G"
           volumeMounts:
             - mountPath: /var/lib/postgresql/data
               name: pgdata

apps/immich/deployment/redis.yaml

@@ -18,7 +18,10 @@ spec:
       containers:
         - image: registry.hub.docker.com/library/redis:6.2-alpine@sha256:84882e87b54734154586e5f8abd4dce69fe7311315e2fc6d67c29614c8de2672
           name: immich-redis
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.1"
+              memory: "250G"
           ports:
             - name: http
               containerPort: 6379

apps/immich/deployment/server.yaml

@@ -30,7 +30,10 @@ spec:
               containerPort: 3002
               hostPort: 3002
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: "2G"
           volumeMounts:
             - mountPath: /usr/src/app/upload
               name: photos
@@ -50,7 +53,10 @@ spec:
               containerPort: 3001
               hostPort: 3001
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: "2G"
           volumeMounts:
             - mountPath: /usr/src/app/upload
               name: photos

apps/kube-dashboard/base/kube-dashboard-rolebinding.yaml

@@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: dashboard-user
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: cluster-admin
-subjects:
-- kind: ServiceAccount
-  name: dashboard-user
-  namespace: kubernetes-dashboard

apps/kube-dashboard/base/kube-dashboard-serviceaccount.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: dashboard-user
-  namespace: kubernetes-dashboard

apps/kube-dashboard/base/kube-dashboard-ui-ingress.yaml

@@ -1,14 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: kubernetes-dashboard
-spec:
-  entryPoints:
-    - web-local
-    - websecure-local
-  routes:
-  - match: Host(`kubernetes-dashboard.steffenillium.de`)
-    kind: Rule
-    services:
-    - name: kubernetes-dashboard
-      port: 80

apps/kube-dashboard/base/kube-dashboard-user-secret.yaml

@@ -1,11 +0,0 @@
-# Create long-live bearer token
-# retrieve with: `kubectl get secret dashboard-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d`
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: dashboard-user
-  namespace: kubernetes-dashboard
-  annotations:
-    kubernetes.io/service-account.name: "dashboard-user"   
-type: kubernetes.io/service-account-token  

apps/kube-dashboard/kustomization.yaml

@@ -1,18 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: kubernetes-dashboard
-
-resources:
-- base/kube-dashboard-ui-ingress.yaml
-- base/kube-dashboard-user-secret.yaml
-- base/kube-dashboard-rolebinding.yaml
-- base/kube-dashboard-serviceaccount.yaml
-- https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
-
-patches:
-- path: patches/dashboard-insecure-access.yaml
-- path: patches/dashboard-insecure-service.yaml
-
-components:
-  - ../../components/local-region-selector.yaml

apps/kube-dashboard/patches/dashboard-insecure-access.yaml

@@ -1,21 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kubernetes-dashboard
-  namespace: kubernetes-dashboard
-spec:
-  selector:
-    matchLabels:
-      k8s-app: kubernetes-dashboard
-  template:
-      metadata:
-        labels:
-          k8s-app: kubernetes-dashboard
-      spec:
-        containers:
-          - name: kubernetes-dashboard
-            args:
-            # - '--auto-generate-certificates'
-            - '--namespace=kubernetes-dashboard'
-            - "--enable-insecure-login=true"
-            - "--insecure-bind-address=0.0.0.0"

apps/kube-dashboard/patches/dashboard-insecure-service.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    k8s-app: kubernetes-dashboard
-  name: kubernetes-dashboard
-  namespace: kubernetes-dashboard
-spec:
-  ports:
-  - port: 443
-    name: websecure
-    targetPort: 8443
-  - port: 80
-    name: web
-    targetPort: 9090
-  selector:
-    k8s-app: kubernetes-dashboard

apps/nextcloud/base/deployment.yaml

@@ -53,8 +53,8 @@ spec:
                   key: MYSQL_PASSWORD
           resources:
             limits:
-              cpu: "0.2"
+              cpu: "0.3"
-              memory: "2Gi"
+              memory: "1G
           ports:
             - name: mariadb
               containerPort: 3306
@@ -68,7 +68,7 @@ spec:
           resources:
             limits:
               cpu: "0.1"
-              memory: "2Gi"
+              memory: "250M"
           ports:
             - name: redis
               containerPort: 6379
@@ -97,12 +97,14 @@ spec:
             - name: nextcloud
               containerPort: 80
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: "2G"
           volumeMounts:
             - mountPath: /var/www/html
               name: nextcloud-pvc
               subPath: 99f37b73-8f14-44b2-9211-af5de21de749/html
-
             - mountPath: /var/www/html/data
               name: nextcloud-data
       restartPolicy: Always

apps/paperless/base/deployment.yaml

@@ -22,7 +22,7 @@ spec:
           resources:
             limits:
               cpu: "0.2"
-              memory: "1Gi"
+              memory: "1G"
           volumeMounts:
             - mountPath: /var/lib/postgresql/data
               name: paperless-pvc
@@ -49,7 +49,10 @@ spec:
             - name: http 
               containerPort: 8000
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.2"
+              memory: "2G"
           volumeMounts:
             - mountPath: /usr/src/paperless/data
               name: paperless-pvc
@@ -101,7 +104,7 @@ spec:
           resources:
             limits:
               cpu: "0.1"
-              memory: "1Gi"
+              memory: "250M"
       restartPolicy: Always
       volumes:
         - name: paperless-pvc

apps/sftpgo/base/deployment.yaml

@@ -50,7 +50,10 @@ spec:
         #   httpGet:
         #     path: /healthz
         #     port: telemetry
-        resources: {}
+        resources:
+            limits:
+              cpu: "0.1"
+              memory: "400M"
         securityContext: {}
         volumeMounts:
         - mountPath: /etc/sftpgo

apps/vaultwarden/base/deployment.yaml

@@ -81,7 +81,10 @@ spec:
           ports:
             - containerPort: 80
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: "0.3"
+              memory: "1G"
           volumeMounts:
             - mountPath: /data
               name: vaultwarden-pvc