crowdsec: cut lapi and appsec cpu requests so they schedule

Chart defaults set requests == limits == 500m for both. The node is at 95% of
allocatable CPU in requests while actually using about 10%, so lapi sat Pending
with Insufficient cpu. Requests dropped to 50m/100m with the limits left
generous, since appsec runs inline on every public request.
This commit is contained in:
2026-08-26 17:05:56 +02:00
parent dcb127e9e8
commit 16e265239b
+18
View File
@@ -19,6 +19,15 @@ lapi:
secretKeyRef: secretKeyRef:
name: crowdsec-secrets name: crowdsec-secrets
key: bouncer-key key: bouncer-key
# Chart default is requests == limits == 500m, which will not schedule: the
# node is at 95% of allocatable CPU in requests while actually using ~10%.
resources:
requests:
cpu: 50m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
persistentVolume: persistentVolume:
data: data:
enabled: true enabled: true
@@ -42,6 +51,15 @@ agent:
#=============================# #=============================#
appsec: appsec:
enabled: true enabled: true
# Inline on every public request, so it keeps a generous limit but a small
# request (same reason as lapi above).
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 1000m
memory: 512Mi
# Hub collections installed into the AppSec pod at startup (the WAF rule sets). # Hub collections installed into the AppSec pod at startup (the WAF rule sets).
env: env:
- name: COLLECTIONS - name: COLLECTIONS