diff --git a/clusters/cl01tl/manifests/houndarr/Deployment-houndarr.yaml b/clusters/cl01tl/manifests/houndarr/Deployment-houndarr.yaml index aadb385e6..78ebbe11c 100644 --- a/clusters/cl01tl/manifests/houndarr/Deployment-houndarr.yaml +++ b/clusters/cl01tl/manifests/houndarr/Deployment-houndarr.yaml @@ -45,13 +45,12 @@ spec: value: "true" - name: HOUNDARR_TRUSTED_PROXIES value: 10.96.0.0/12 - image: ghcr.io/av1155/houndarr:v1.6.5 - imagePullPolicy: IfNotPresent + image: ghcr.io/av1155/houndarr:v1.6.5@sha256:f3adbd745094919166bafcd9b428738d1087f651b1562adeaba44ff975827d87 name: main resources: requests: - cpu: 10m - memory: 128Mi + cpu: 1m + memory: 60Mi volumeMounts: - mountPath: /data name: data diff --git a/clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml b/clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml index c68e3ac13..62ae196e1 100644 --- a/clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml +++ b/clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml @@ -23,7 +23,7 @@ spec: name: houndarr namespace: houndarr port: 80 - weight: 100 + weight: 1 matches: - path: type: PathPrefix diff --git a/clusters/cl01tl/manifests/immich/Deployment-immich.yaml b/clusters/cl01tl/manifests/immich/Deployment-immich.yaml index 17a79866a..908085eaa 100644 --- a/clusters/cl01tl/manifests/immich/Deployment-immich.yaml +++ b/clusters/cl01tl/manifests/immich/Deployment-immich.yaml @@ -36,7 +36,7 @@ spec: containers: - env: - name: TZ - value: US/Central + value: America/Chicago - name: IMMICH_TELEMETRY_INCLUDE value: all - name: IMMICH_CONFIG_FILE @@ -70,8 +70,7 @@ spec: secretKeyRef: key: password name: immich-postgresql-18-cluster-app - image: ghcr.io/immich-app/immich-server:v2.6.3 - imagePullPolicy: IfNotPresent + image: ghcr.io/immich-app/immich-server:v2.6.3@sha256:0cc1f82953d9598eb9e9dd11cbde1f50fe54f9c46c4506b089e8ad7bfc9d1f0c livenessProbe: failureThreshold: 3 httpGet: @@ -95,7 +94,7 @@ spec: requests: cpu: 10m gpu.intel.com/i915: 1 - memory: 512Mi + memory: 500Mi startupProbe: failureThreshold: 30 httpGet: diff --git a/clusters/cl01tl/manifests/immich/ExternalSecret-immich-config-secret.yaml b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-config-secret.yaml index 58410a93d..c2aa80b10 100644 --- a/clusters/cl01tl/manifests/immich/ExternalSecret-immich-config-secret.yaml +++ b/clusters/cl01tl/manifests/immich/ExternalSecret-immich-config-secret.yaml @@ -14,8 +14,5 @@ spec: data: - secretKey: immich.json remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cl01tl/immich/config - metadataPolicy: None property: immich.json diff --git a/clusters/cl01tl/manifests/immich/HTTPRoute-immich.yaml b/clusters/cl01tl/manifests/immich/HTTPRoute-immich.yaml index 70c15a3d4..b8475cbe9 100644 --- a/clusters/cl01tl/manifests/immich/HTTPRoute-immich.yaml +++ b/clusters/cl01tl/manifests/immich/HTTPRoute-immich.yaml @@ -23,7 +23,7 @@ spec: name: immich namespace: immich port: 2283 - weight: 100 + weight: 1 matches: - path: type: PathPrefix diff --git a/clusters/cl01tl/manifests/intel-device-plugin/Deployment-inteldeviceplugins-controller-manager.yaml b/clusters/cl01tl/manifests/intel-device-plugin/Deployment-inteldeviceplugins-controller-manager.yaml index fbc0e751b..1dc119a1b 100644 --- a/clusters/cl01tl/manifests/intel-device-plugin/Deployment-inteldeviceplugins-controller-manager.yaml +++ b/clusters/cl01tl/manifests/intel-device-plugin/Deployment-inteldeviceplugins-controller-manager.yaml @@ -26,7 +26,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: "intel/intel-deviceplugin-operator:0.35.0" + image: "intel/intel-deviceplugin-operator:0.35.0@sha256:d7eeac081bd17e58d8d4d542f3cb33d67cc1bdab314b09ad591e8eacb51dd5ec" imagePullPolicy: IfNotPresent livenessProbe: httpGet: @@ -46,12 +46,10 @@ spec: name: webhook-server protocol: TCP resources: - limits: - cpu: 100m - memory: 120Mi + limits: {} requests: - cpu: 100m - memory: 100Mi + cpu: 10m + memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: diff --git a/clusters/cl01tl/manifests/intel-device-plugin/GpuDevicePlugin-gpudeviceplugin.yaml b/clusters/cl01tl/manifests/intel-device-plugin/GpuDevicePlugin-gpudeviceplugin.yaml index e42d4ac8f..97a3c7f74 100644 --- a/clusters/cl01tl/manifests/intel-device-plugin/GpuDevicePlugin-gpudeviceplugin.yaml +++ b/clusters/cl01tl/manifests/intel-device-plugin/GpuDevicePlugin-gpudeviceplugin.yaml @@ -4,7 +4,7 @@ metadata: name: gpudeviceplugin annotations: null spec: - image: "intel/intel-gpu-plugin:0.35.0" + image: "intel/intel-gpu-plugin:0.35.0@sha256:34697f9c286857da986381595ac2a693524a83c831955247dae47dfda4d2f526" logLevel: 2 sharedDevNum: 5 enableMonitoring: true diff --git a/clusters/cl01tl/manifests/intel-device-plugin/NodeFeatureRule-intel-dp-gpu-device.yaml b/clusters/cl01tl/manifests/intel-device-plugin/NodeFeatureRule-intel-dp-gpu-device.yaml new file mode 100644 index 000000000..bdb1c31ca --- /dev/null +++ b/clusters/cl01tl/manifests/intel-device-plugin/NodeFeatureRule-intel-dp-gpu-device.yaml @@ -0,0 +1,31 @@ +apiVersion: nfd.k8s-sigs.io/v1alpha1 +kind: NodeFeatureRule +metadata: + name: intel-dp-gpu-device +spec: + rules: + - name: "intel.gpu" + labels: + "intel.feature.node.kubernetes.io/gpu": "true" + matchFeatures: + - feature: pci.device + matchExpressions: + vendor: {op: In, value: ["8086"]} + class: {op: In, value: ["0300", "0380"]} + matchAny: + - matchFeatures: + - feature: kernel.loadedmodule + matchExpressions: + i915: {op: Exists} + - matchFeatures: + - feature: kernel.enabledmodule + matchExpressions: + i915: {op: Exists} + - matchFeatures: + - feature: kernel.loadedmodule + matchExpressions: + xe: {op: Exists} + - matchFeatures: + - feature: kernel.enabledmodule + matchExpressions: + xe: {op: Exists} diff --git a/clusters/cl01tl/manifests/intel-device-plugin/NodeFeatureRule-intel-gpu-platform-labeling.yaml b/clusters/cl01tl/manifests/intel-device-plugin/NodeFeatureRule-intel-gpu-platform-labeling.yaml new file mode 100644 index 000000000..3f9956996 --- /dev/null +++ b/clusters/cl01tl/manifests/intel-device-plugin/NodeFeatureRule-intel-gpu-platform-labeling.yaml @@ -0,0 +1,190 @@ +apiVersion: nfd.k8s-sigs.io/v1alpha1 +kind: NodeFeatureRule +metadata: + name: intel-gpu-platform-labeling +spec: + rules: + - labelsTemplate: | + {{ range .pci.device }}gpu.intel.com/device-id.{{ .class }}-{{ .device }}.present=true + {{ end }} + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0300" + - "0380" + vendor: + op: In + value: + - "8086" + name: intel.gpu.generic.deviceid + - labelsTemplate: gpu.intel.com/device-id.0300-{{ (index .pci.device 0).device }}.count={{ len .pci.device }} + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0300" + vendor: + op: In + value: + - "8086" + name: intel.gpu.generic.count.300 + - labelsTemplate: gpu.intel.com/device-id.0380-{{ (index .pci.device 0).device }}.count={{ len .pci.device }} + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0380" + vendor: + op: In + value: + - "8086" + name: intel.gpu.generic.count.380 + - labels: + gpu.intel.com/product: "Max_1100" + labelsTemplate: "gpu.intel.com/device.count={{ len .pci.device }}" + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0380" + vendor: + op: In + value: + - "8086" + device: + op: In + value: + - "0bda" + name: intel.gpu.max.1100 + - labels: + gpu.intel.com/product: "Max_1550" + labelsTemplate: "gpu.intel.com/device.count={{ len .pci.device }}" + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0380" + vendor: + op: In + value: + - "8086" + device: + op: In + value: + - "0bd5" + name: intel.gpu.max.1550 + - labels: + gpu.intel.com/family: "Max_Series" + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0380" + vendor: + op: In + value: + - "8086" + device: + op: In + value: + - "0bda" + - "0bd5" + - "0bd9" + - "0bdb" + - "0bd7" + - "0bd6" + - "0bd0" + name: intel.gpu.max.series + - labels: + gpu.intel.com/family: "Flex_Series" + gpu.intel.com/product: "Flex_170" + labelsTemplate: "gpu.intel.com/device.count={{ len .pci.device }}" + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0380" + vendor: + op: In + value: + - "8086" + device: + op: In + value: + - "56c0" + name: intel.gpu.flex.170 + - labels: + gpu.intel.com/family: "Flex_Series" + gpu.intel.com/product: "Flex_140" + labelsTemplate: "gpu.intel.com/device.count={{ len .pci.device }}" + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0380" + vendor: + op: In + value: + - "8086" + device: + op: In + value: + - "56c1" + name: intel.gpu.flex.140 + - labels: + gpu.intel.com/family: "A_Series" + matchFeatures: + - feature: pci.device + matchExpressions: + class: + op: In + value: + - "0300" + vendor: + op: In + value: + - "8086" + device: + op: In + value: + - "56a6" + - "56a5" + - "56a1" + - "56a0" + - "5694" + - "5693" + - "5692" + - "5691" + - "5690" + - "56b3" + - "56b2" + - "56a4" + - "56a3" + - "5697" + - "5696" + - "5695" + - "56b1" + - "56b0" + - "56a2" + - "56ba" + - "56bc" + - "56bd" + - "56bb" + name: intel.gpu.a.series