feat(resources): improve requests and limits

cluster/components/kyverno/values.yaml

@@ -1,10 +1,16 @@
 admissionController:
   replicas: 3
+  resources:
+    limits:
+      memory: 256Mi
+    requests:
+      cpu: 50m
+      memory: 256Mi
 backgroundController:
   replicas: 2
   resources:
     limits:
-      memory: 512Mi
+      memory: 128Mi
     requests:
       cpu: 100m
       memory: 128Mi

cluster/components/networking/ingress-nginx/values.yaml

@@ -55,9 +55,9 @@ controller:
   resources:
     requests:
       cpu: 1
-      memory: 1Gi
+      memory: 2Gi
     limits:
-      memory: 1Gi
+      memory: 2Gi
 defaultBackend:
   enabled: true
   image:

cluster/components/observability/grafana/values.yaml

@@ -1,4 +1,10 @@
 replicas: 2
+resources:
+  limits:
+    memory: 512Mi
+  requests:
+    cpu: 50m
+    memory: 512Mi
 priorityClassName: lsh-system-critical
 env:
   # GF_EXPLORE_ENABLED: true

cluster/components/observability/loki/values.yaml

@@ -12,6 +12,12 @@ monitoring:
 write:
   persistence:
     size: 5Gi
+  resources:
+    limits:
+      memory: 1.5Gi
+    requests:
+      cpu: 80m
+      memory: 1.5Gi
 read:
   legacyReadTarget: false
   persistence:
@@ -22,6 +28,12 @@ read:
   extraVolumes:
     - name: rules
       emptyDir: {}
+  resources:
+    limits:
+      memory: 512Mi
+    requests:
+      cpu: 50m
+      memory: 512Mi
 backend:
   persistence:
     size: 5Gi
@@ -36,6 +48,12 @@ backend:
         name: loki-alerting-rules
     - name: scratch
       emptyDir: {}
+  resources:
+    limits:
+      memory: 200Mi
+    requests:
+      cpu: 40m
+      memory: 200Mi
 gateway:
   enabled: true
   autoscaling: 
@@ -54,6 +72,12 @@ gateway:
       - secretName: loki-${CLUSTER_DOMAIN/./-}-tls
         hosts:
           - loki.${CLUSTER_DOMAIN}
+  resources:
+    limits:
+      memory: 200Mi
+    requests:
+      cpu: 10m
+      memory: 200Mi
 loki:
   structuredConfig:
     auth_enabled: true

cluster/components/observability/prometheus-stack/values.yaml

@@ -57,11 +57,13 @@ prometheus:
     #   - hosts:
     #     - "thanos-sidecar.${CLUSTER_DOMAIN}"
     #     secretName: "thanos-sidecar-${CLUSTER_DOMAIN/./-}-tls"
-  resources:
-    requests:
-      cpu: 1000m
-      memory: 1000Mi
   prometheusSpec:
+    resources:
+      requests:
+        cpu: 1000m
+        memory: 4000Mi
+      limits:
+        memory: 4000Mi
     ## Name of the external label used to denote replica name
     replicaExternalLabelName: __replica__ # must match with thanos value `.query.replicaLabel[0]`
     podMonitorSelectorNilUsesHelmValues: false

cluster/components/observability/promtail/values.yaml

@@ -1,4 +1,10 @@
 config:
   clients:
   - tenant_id: 1
-    url: http://loki-gateway/loki/api/v1/push
+    url: http://loki-gateway/loki/api/v1/push
+resources:
+  limits:
+    memory: 128Mi
+  requests:
+    cpu: 100m
+    memory: 128Mi