chore: Set resource requests and limits on every workload

argocd-apps/add-ons/authentik.yaml

@@ -39,6 +39,7 @@ spec:
           server:
             resources:
               limits:
+                cpu: 1000m
                 memory: 1Gi
               requests:
                 cpu: 100m
@@ -46,6 +47,7 @@ spec:
           worker:
             resources:
               limits:
+                cpu: 1000m
                 memory: 1Gi
               requests:
                 cpu: 50m

argocd-apps/add-ons/cert-manager.yaml

@@ -22,6 +22,29 @@ spec:
             kind: ControllerConfiguration
             featureGates:
               ExperimentalGatewayAPISupport: true
+          resources:
+            limits:
+              cpu: 200m
+              memory: 256Mi
+            requests:
+              cpu: 10m
+              memory: 64Mi
+          cainjector:
+            resources:
+              limits:
+                cpu: 200m
+                memory: 256Mi
+              requests:
+                cpu: 10m
+                memory: 64Mi
+          webhook:
+            resources:
+              limits:
+                cpu: 200m
+                memory: 128Mi
+              requests:
+                cpu: 10m
+                memory: 32Mi
       repoURL: https://charts.jetstack.io
       targetRevision: v1.21.2
     - path: add-ons/cert-manager

argocd-apps/add-ons/cnpg.yaml

@@ -18,6 +18,13 @@ spec:
         replicaCount: 1
         config:
           clusterWide: true
+        resources:
+          limits:
+            cpu: 500m
+            memory: 256Mi
+          requests:
+            cpu: 10m
+            memory: 64Mi
     repoURL: https://cloudnative-pg.github.io/charts
     targetRevision: 0.29.1
   syncPolicy:

argocd-apps/add-ons/sealed-secrets.yaml

@@ -16,6 +16,13 @@ spec:
     helm:
       values: |
         keyrenewperiod: "0"
+        resources:
+          limits:
+            cpu: 200m
+            memory: 128Mi
+          requests:
+            cpu: 10m
+            memory: 32Mi
     repoURL: https://bitnami.github.io/sealed-secrets
     targetRevision: 2.20.0
   syncPolicy:

argocd-apps/add-ons/traefik.yaml

@@ -61,6 +61,13 @@ spec:
                   - kind: Secret
                     name: wildcard-whyredfire-dpdns-org
                     group: ""
+          resources:
+            limits:
+              cpu: 1000m
+              memory: 256Mi
+            requests:
+              cpu: 50m
+              memory: 64Mi
       repoURL: https://traefik.github.io/charts
       targetRevision: 41.7.1
     - path: add-ons/traefik

argocd-apps/apps/garage.yaml

@@ -78,6 +78,7 @@ spec:
               cpu: 100m
               memory: 256Mi
             limits:
+              cpu: 1000m
               memory: 1Gi
     - path: apps/garage
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git

argocd-apps/apps/jellyfin.yaml

@@ -30,6 +30,13 @@ spec:
               enabled: true
               type: hostPath
               hostPath: /srv/media
+          resources:
+            limits:
+              cpu: 3000m
+              memory: 2Gi
+            requests:
+              cpu: 50m
+              memory: 512Mi
       repoURL: https://jellyfin.github.io/jellyfin-helm
       targetRevision: 3.2.0
     - path: apps/jellyfin