Automated Manifest Update (#5140)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `5c9cfc0` (on `5c9cfc0c8948631232da6b34fd2422cd6a6b6aeb`)
- **Charts Updated**: `actual,argo-workflows,argocd,audiobookshelf,authentik,backrest,bazarr,blocky,cloudnative-pg,code-server,coredns,dawarich,democratic-csi-synology-iscsi,descheduler`

Reviewed-on: #5140
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/descheduler/ClusterRole-descheduler.yaml

@@ -30,6 +30,13 @@ rules:
   - apiGroups: ["policy"]
     resources: ["poddisruptionbudgets"]
     verbs: ["get", "watch", "list"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["create", "update"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    resourceNames: ["descheduler"]
+    verbs: ["get", "patch", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["get", "watch", "list"]

clusters/cl01tl/manifests/descheduler/ConfigMap-descheduler.yaml

@@ -42,13 +42,13 @@ data:
         name: HighNodeUtilization
       - args:
           targetThresholds:
-            cpu: 60
-            memory: 40
-            pods: 80
+            cpu: 50
+            memory: 50
+            pods: 60
           thresholds:
-            cpu: 30
-            memory: 30
-            pods: 50
+            cpu: 20
+            memory: 20
+            pods: 20
         name: LowNodeUtilization
       plugins:
         balance:

clusters/cl01tl/manifests/descheduler/Deployment-descheduler.yaml

@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 spec:
-  replicas: 1
+  replicas: 3
   selector:
     matchLabels:
       app.kubernetes.io/name: descheduler
@@ -21,7 +21,7 @@ spec:
         app.kubernetes.io/name: descheduler
         app.kubernetes.io/instance: descheduler
       annotations:
-        checksum/config: 52cdde3aae105c8d407cdec96dbaf5f9d630289083aa3d4fbf77f0d5962eda6d
+        checksum/config: b8b492edc39a8750e56e18b3d9ef6a7fee693fd63dd0d63b55b4336e63ae8dcb
     spec:
       priorityClassName: system-cluster-critical
       serviceAccountName: descheduler
@@ -35,6 +35,13 @@ spec:
             - --policy-config-file=/policy-dir/policy.yaml
             - --descheduling-interval=5m
             - --v=3
+            - --leader-elect=true
+            - --leader-elect-lease-duration=15s
+            - --leader-elect-renew-deadline=10s
+            - --leader-elect-retry-period=2s
+            - --leader-elect-resource-lock=leases
+            - --leader-elect-resource-name=descheduler
+            - --leader-elect-resource-namespace=descheduler
           ports:
             - containerPort: 10258
               protocol: TCP
@@ -48,12 +55,10 @@ spec:
             periodSeconds: 20
             timeoutSeconds: 5
           resources:
-            limits:
-              cpu: 500m
-              memory: 256Mi
+            limits: {}
             requests:
               cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities: