From 2409a4d3a0f1bf9c5bfec54e980e1f1becf27337 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 12 Jul 2026 18:41:08 +1000
Subject: [PATCH] reduce CPU requests across observability, authentik, bind,
 woodpecker (#248)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reduce reserved-but-unused CPU requests across several workloads (limits unchanged).

| Workload | CPU request |
|---|---|
| vmstorage (vmcluster) | 1 → 250m |
| vmagent | 500m → 250m |
| authentik server | 250m → 50m |
| authentik worker | 250m → 100m |
| bind authoritative | 100m → 20m |
| bind externaldns | 100m → 20m |
| bind resolvers | 100m → 20m |
| woodpecker agent | 100m → 50m |

Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/248
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
---
 apps/base/bind-internal/authoritative/cluster.yaml | 2 +-
 apps/base/bind-internal/externaldns/cluster.yaml   | 2 +-
 apps/base/bind-internal/resolvers/cluster.yaml     | 2 +-
 apps/base/observability/vmagent.yaml               | 2 +-
 apps/base/observability/vmcluster.yaml             | 2 +-
 apps/overlays/au-syd1/authentik/values.yaml        | 4 ++--
 apps/overlays/au-syd1/woodpecker/values.yaml       | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/apps/base/bind-internal/authoritative/cluster.yaml b/apps/base/bind-internal/authoritative/cluster.yaml
index 639d780..3096cbd 100644
--- a/apps/base/bind-internal/authoritative/cluster.yaml
+++ b/apps/base/bind-internal/authoritative/cluster.yaml
@@ -31,7 +31,7 @@ spec:
       external-dns.alpha.kubernetes.io/hostname: bind-authoritative-primary.k8s.syd1.au.unkin.net
   resources:
     requests:
-      cpu: 100m
+      cpu: 20m
       memory: 128Mi
     limits:
       cpu: "1"
diff --git a/apps/base/bind-internal/externaldns/cluster.yaml b/apps/base/bind-internal/externaldns/cluster.yaml
index 5b2a0ca..07adf5f 100644
--- a/apps/base/bind-internal/externaldns/cluster.yaml
+++ b/apps/base/bind-internal/externaldns/cluster.yaml
@@ -23,7 +23,7 @@ spec:
     type: ClusterIP
   resources:
     requests:
-      cpu: 100m
+      cpu: 20m
       memory: 128Mi
     limits:
       cpu: "1"
diff --git a/apps/base/bind-internal/resolvers/cluster.yaml b/apps/base/bind-internal/resolvers/cluster.yaml
index e6c8231..cfefc58 100644
--- a/apps/base/bind-internal/resolvers/cluster.yaml
+++ b/apps/base/bind-internal/resolvers/cluster.yaml
@@ -23,7 +23,7 @@ spec:
     - 1.1.1.1
   resources:
     requests:
-      cpu: 100m
+      cpu: 20m
       memory: 128Mi
     limits:
       cpu: "1"
diff --git a/apps/base/observability/vmagent.yaml b/apps/base/observability/vmagent.yaml
index efe229c..7027954 100644
--- a/apps/base/observability/vmagent.yaml
+++ b/apps/base/observability/vmagent.yaml
@@ -16,7 +16,7 @@ spec:
     - url: http://vminsert-main.observability.svc.cluster.local:8480/insert/0/prometheus/
   resources:
     requests:
-      cpu: 500m
+      cpu: 250m
       memory: 512Mi
     limits:
       cpu: "1"
diff --git a/apps/base/observability/vmcluster.yaml b/apps/base/observability/vmcluster.yaml
index c44be59..9c54f3a 100644
--- a/apps/base/observability/vmcluster.yaml
+++ b/apps/base/observability/vmcluster.yaml
@@ -23,7 +23,7 @@ spec:
               storage: 200Gi
     resources:
       requests:
-        cpu: "1"
+        cpu: 250m
         memory: 2Gi
       limits:
         cpu: "2"
diff --git a/apps/overlays/au-syd1/authentik/values.yaml b/apps/overlays/au-syd1/authentik/values.yaml
index cd4d5c2..067c12e 100644
--- a/apps/overlays/au-syd1/authentik/values.yaml
+++ b/apps/overlays/au-syd1/authentik/values.yaml
@@ -83,7 +83,7 @@ server:
       cpu: "2"
       memory: 2Gi
     requests:
-      cpu: 250m
+      cpu: 50m
       memory: 512Mi
 
 worker:
@@ -95,7 +95,7 @@ worker:
       cpu: "2"
       memory: 2Gi
     requests:
-      cpu: 250m
+      cpu: 100m
       memory: 512Mi
 
 postgresql:
diff --git a/apps/overlays/au-syd1/woodpecker/values.yaml b/apps/overlays/au-syd1/woodpecker/values.yaml
index c89853b..fd16b7e 100644
--- a/apps/overlays/au-syd1/woodpecker/values.yaml
+++ b/apps/overlays/au-syd1/woodpecker/values.yaml
@@ -15,7 +15,7 @@ agent:
     reloader.stakater.com/auto: "true"
   resources:
     requests:
-      cpu: 100m
+      cpu: 50m
     limits:
       memory: 128Mi