crowdsec: cut lapi and appsec cpu requests so they schedule
Chart defaults set requests == limits == 500m for both. The node is at 95% of allocatable CPU in requests while actually using about 10%, so lapi sat Pending with Insufficient cpu. Requests dropped to 50m/100m with the limits left generous, since appsec runs inline on every public request.
This commit is contained in:
@@ -19,6 +19,15 @@ lapi:
|
|||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: crowdsec-secrets
|
name: crowdsec-secrets
|
||||||
key: bouncer-key
|
key: bouncer-key
|
||||||
|
# Chart default is requests == limits == 500m, which will not schedule: the
|
||||||
|
# node is at 95% of allocatable CPU in requests while actually using ~10%.
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 50m
|
||||||
|
memory: 256Mi
|
||||||
|
limits:
|
||||||
|
cpu: 500m
|
||||||
|
memory: 512Mi
|
||||||
persistentVolume:
|
persistentVolume:
|
||||||
data:
|
data:
|
||||||
enabled: true
|
enabled: true
|
||||||
@@ -42,6 +51,15 @@ agent:
|
|||||||
#=============================#
|
#=============================#
|
||||||
appsec:
|
appsec:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
# Inline on every public request, so it keeps a generous limit but a small
|
||||||
|
# request (same reason as lapi above).
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 100m
|
||||||
|
memory: 256Mi
|
||||||
|
limits:
|
||||||
|
cpu: 1000m
|
||||||
|
memory: 512Mi
|
||||||
# Hub collections installed into the AppSec pod at startup (the WAF rule sets).
|
# Hub collections installed into the AppSec pod at startup (the WAF rule sets).
|
||||||
env:
|
env:
|
||||||
- name: COLLECTIONS
|
- name: COLLECTIONS
|
||||||
|
|||||||
Reference in New Issue
Block a user