feat: refactor apps

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -29,7 +29,6 @@ kubelet-serving-cert-approver:
       type: deployment
       replicas: 1
       strategy: Recreate
-      revisionHistoryLimit: 3
       serviceAccount:
         name: kubelet-serving-cert-approver
       pod:
@@ -38,8 +37,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.3
-            pullPolicy: Always
+            tag: 0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d
           args:
             - serve
           env:
@@ -49,8 +47,8 @@ kubelet-serving-cert-approver:
                   fieldPath: metadata.namespace
           resources:
             requests:
-              cpu: 100m
-              memory: 128Mi
+              cpu: 1m
+              memory: 20Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:
@@ -70,8 +68,6 @@ kubelet-serving-cert-approver:
         health:
           port: 8080
           targetPort: 8080
-          protocol: HTTP
         metrics:
           port: 9090
           targetPort: 9090
-          protocol: HTTP