Files
argocd-apps/apps/overlays/au-syd1/woodpecker/values.yaml
unkinben 2409a4d3a0 reduce CPU requests across observability, authentik, bind, woodpecker (#248)
Reduce reserved-but-unused CPU requests across several workloads (limits unchanged).

| Workload | CPU request |
|---|---|
| vmstorage (vmcluster) | 1 → 250m |
| vmagent | 500m → 250m |
| authentik server | 250m → 50m |
| authentik worker | 250m → 100m |
| bind authoritative | 100m → 20m |
| bind externaldns | 100m → 20m |
| bind resolvers | 100m → 20m |
| woodpecker agent | 100m → 50m |

Reviewed-on: #248
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
2026-07-12 18:41:08 +10:00

63 lines
1.8 KiB
YAML

agent:
replicaCount: 3
env:
WOODPECKER_MAX_WORKFLOWS: "8"
WOODPECKER_BACKEND_K8S_PRIORITY_CLASS: power
WOODPECKER_BACKEND_K8S_STORAGE_CLASS: cephrbd-fast-delete
WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 10G
WOODPECKER_BACKEND_K8S_STORAGE_RWX: false
WOODPECKER_LOG_LEVEL: debug
#extraSecretNamesForEnvFrom:
# - woodpecker-default-agent-secret
persistence:
storageClass: cephrbd-fast-delete
podAnnotations:
reloader.stakater.com/auto: "true"
resources:
requests:
cpu: 50m
limits:
memory: 128Mi
server:
statefulSet:
replicaCount: 1
env:
WOODPECKER_HOST: 'https://ci.k8s.syd1.au.unkin.net'
WOODPECKER_OPEN: "true"
WOODPECKER_ADMIN: "unkinben"
WOODPECKER_DISABLE_USER_AGENT_REGISTRATION: "true"
WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx,woodpeckerci/plugin-docker-buildx:latest-insecure"
extraSecretNamesForEnvFrom:
- woodpecker-gitea
- woodpecker-postgres-credentials
- woodpecker-database-config
persistentVolume:
storageClass: cephrbd-fast-delete
podAnnotations:
reloader.stakater.com/auto: "true"
ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
cert-manager.io/common-name: ci.k8s.syd1.au.unkin.net
cert-manager.io/private-key-size: "4096"
external-dns.alpha.kubernetes.io/hostname: ci.k8s.syd1.au.unkin.net
external-dns.alpha.kubernetes.io/target: 198.18.200.0
ingressClassName: nginx
hosts:
- host: ci.k8s.syd1.au.unkin.net
paths:
- path: /
backend:
servicePort: 80
tls:
- hosts:
- ci.k8s.syd1.au.unkin.net
secretName: ci-tls
resources:
requests:
cpu: 100m
limits:
memory: 128Mi