From c72c6a322eeadc85c8e6f6b4f3306ad87f21919d Mon Sep 17 00:00:00 2001
From: Jeffrey Smeets <jeffreysmeets@jsme.be>
Date: Sat, 22 Aug 2026 16:55:50 +0200
Subject: [PATCH] infisical: add resource requests and limits to postgres and
 valkey

Both ran as BestEffort QoS, making them first in line for eviction
under node memory pressure. Requests also give the scheduler real
numbers to place them with.
---
 applications/infisical/postgres/statefulset.yaml | 6 ++++++
 applications/infisical/valkey/statefulset.yaml   | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git a/applications/infisical/postgres/statefulset.yaml b/applications/infisical/postgres/statefulset.yaml
index ff669aa..9c9cc97 100644
--- a/applications/infisical/postgres/statefulset.yaml
+++ b/applications/infisical/postgres/statefulset.yaml
@@ -53,6 +53,12 @@ spec:
               command: ["sh", "-c", "pg_isready -U $POSTGRES_USER -d $POSTGRES_DB"]
             initialDelaySeconds: 30
             periodSeconds: 15
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              memory: 512Mi
   volumeClaimTemplates:
     - metadata:
         name: data
diff --git a/applications/infisical/valkey/statefulset.yaml b/applications/infisical/valkey/statefulset.yaml
index 65c507a..9c7425c 100644
--- a/applications/infisical/valkey/statefulset.yaml
+++ b/applications/infisical/valkey/statefulset.yaml
@@ -29,6 +29,12 @@ spec:
               command: ["valkey-cli", "ping"]
             initialDelaySeconds: 5
             periodSeconds: 10
+          resources:
+            requests:
+              cpu: 50m
+              memory: 64Mi
+            limits:
+              memory: 256Mi
   volumeClaimTemplates:
     - metadata:
         name: data