2026-03-26 01:36:29 +00:00
18 changed files with 71 additions and 69 deletions
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -14,8 +14,8 @@ actual:
              value: 5006
          resources:
            requests:
-              cpu: 25m
-              memory: 64Mi
+              cpu: 10m
+              memory: 50Mi
          probes:
            liveness:
              enabled: true
--- a/clusters/cl01tl/helm/argo-workflows/values.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/values.yaml
@@ -30,8 +30,8 @@ argo-workflows:
    cronWorkflowWorkers: 2
    resources:
      requests:
-        cpu: 10m
-        memory: 32Mi
+        cpu: 1m
+        memory: 20Mi
    serviceMonitor:
      enabled: true
    workflowNamespaces:
@@ -76,7 +76,7 @@ argo-events:
  controller:
    resources:
      requests:
-        cpu: 10m
+        cpu: 1m
        memory: 32Mi
    metrics:
      enabled: true
@@ -86,8 +86,8 @@ argo-events:
    enabled: true
    resources:
      requests:
-        cpu: 10m
-        memory: 32Mi
+        cpu: 1m
+        memory: 20Mi
 postgres-18-cluster:
  mode: recovery
  recovery:
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -34,7 +34,7 @@ argo-cd:
    replicas: 1
    resources:
      requests:
-        cpu: 15m
+        cpu: 100m
        memory: 1Gi
    readinessProbe:
      failureThreshold: 3
@@ -77,7 +77,7 @@ argo-cd:
    enabled: true
    resources:
      requests:
-        cpu: 10m
+        cpu: 1m
        memory: 64Mi
    metrics:
      enabled: true
@@ -98,7 +98,7 @@ argo-cd:
      resources:
        requests:
          cpu: 1000m
-          memory: 64Mi
+          memory: 50Mi
    haproxy:
      enabled: true
      image:
@@ -106,8 +106,8 @@ argo-cd:
        tag: 3.3.6-alpine@sha256:744be2dca649a44d490a4c565d36968d19482dd387f1bdd44c168f4322bc6b1e
      resources:
        requests:
-          cpu: 10m
-          memory: 128Mi
+          cpu: 5m
+          memory: 90Mi
      metrics:
        enabled: true
        serviceMonitor:
@@ -138,8 +138,8 @@ argo-cd:
    replicas: 2
    resources:
     requests:
-       cpu: 10m
-       memory: 64Mi
+       cpu: 20m
+       memory: 80Mi
    metrics:
      enabled: true
      serviceMonitor:
@@ -157,8 +157,8 @@ argo-cd:
    replicas: 2
    resources:
      requests:
-        cpu: 10m
-        memory: 64Mi
+        cpu: 1m
+        memory: 50Mi
    readinessProbe:
      enabled: true
      failureThreshold: 3
@@ -182,7 +182,7 @@ argo-cd:
    resources:
      requests:
        cpu: 10m
-        memory: 64Mi
+        memory: 50Mi
    metrics:
      enabled: true
      serviceMonitor:
@@ -218,8 +218,8 @@ argo-cd:
            value: Bearer $ntfy-token
    resources:
      requests:
-        cpu: 10m
-        memory: 64Mi
+        cpu: 2m
+        memory: 50Mi
    livenessProbe:
      enabled: true
    readinessProbe:
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -18,7 +18,7 @@ audiobookshelf:
              value: America/Chicago
          resources:
            requests:
-              cpu: 10m
+              cpu: 1m
              memory: 200Mi
        apprise-api:
          image:
--- a/clusters/cl01tl/helm/authentik/values.yaml
+++ b/clusters/cl01tl/helm/authentik/values.yaml
@@ -33,7 +33,7 @@ authentik:
    replicas: 2
    resources:
      requests:
-        cpu: 100m
+        cpu: 20m
        memory: 700Mi
    livenessProbe:
      failureThreshold: 3
@@ -66,8 +66,8 @@ authentik:
    replicas: 2
    resources:
      requests:
-        cpu: 100m
-        memory: 512Mi
+        cpu: 80m
+        memory: 650Mi
    metrics:
      enabled: true
      serviceMonitor:
--- a/clusters/cl01tl/helm/backrest/values.yaml
+++ b/clusters/cl01tl/helm/backrest/values.yaml
@@ -22,8 +22,8 @@ backrest:
              value: /tmp
          resources:
            requests:
-              cpu: 10m
-              memory: 80Mi
+              cpu: 1m
+              memory: 30Mi
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -23,9 +23,11 @@ bazarr:
            - name: PGID
              value: 1000
          resources:
+            limits:
+              cpu: 100m
            requests:
-              cpu: 10m
-              memory: 256Mi
+              cpu: 1m
+              memory: 250Mi
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -15,7 +15,7 @@ blocky:
          resources:
            requests:
              cpu: 10m
-              memory: 90Mi
+              memory: 100Mi
  configMaps:
    config:
      enabled: true
--- a/clusters/cl01tl/helm/cloudnative-pg/values.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/values.yaml
@@ -3,7 +3,7 @@ cloudnative-pg:
  resources:
    requests:
      cpu: 10m
-      memory: 64Mi
+      memory: 100Mi
  monitoring:
    podMonitorEnabled: true
 plugin-barman-cloud:
@@ -12,5 +12,5 @@ plugin-barman-cloud:
    create: true
  resources:
    requests:
-      cpu: 10m
-      memory: 64Mi
+      cpu: 1m
+      memory: 20Mi
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -27,8 +27,8 @@ code-server:
                name: codeserver-password-secret
          resources:
            requests:
-              cpu: 10m
-              memory: 80Mi
+              cpu: 1m
+              memory: 50Mi
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/coredns/values.yaml
+++ b/clusters/cl01tl/helm/coredns/values.yaml
@@ -8,8 +8,8 @@ coredns:
      cpu: null
      memory: null
    requests:
-      cpu: 20m
-      memory: 32Mi
+      cpu: 30m
+      memory: 30Mi
  prometheus:
    service:
      enabled: true
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -106,7 +106,7 @@ dawarich:
                timeoutSeconds: 10
          resources:
            requests:
-              cpu: 10m
+              cpu: 20m
              memory: 750Mi
        sidekiq:
          image:
--- a/clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.yaml
+++ b/clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.yaml
@@ -5,8 +5,7 @@ description: Democratic CSI
 keywords:
  - democratic-csi-synology-iscsi
  - iscsi
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/0cc6ba65-024b-4489-952a-fc0f647fd099
+home: https://docs.alexlebens.dev/applications/democratic-csi-synology-iscsi/
 sources:
  - https://github.com/democratic-csi/democratic-csi
  - https://github.com/democratic-csi/charts/tree/master/stable/democratic-csi
--- a/clusters/cl01tl/helm/democratic-csi-synology-iscsi/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/democratic-csi-synology-iscsi/templates/external-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: driver-config-file.yaml
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/democratic-csi-synology-iscsi/config
-        metadataPolicy: None
        property: driver-config-file.yaml
--- a/clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml
+++ b/clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml
@@ -3,12 +3,13 @@ democratic-csi:
    existingConfigSecret: synology-iscsi-config-secret
    config:
      driver: synology-iscsi
+    resources:
+      requests:
+        cpu: 1m
+        memory: 128Mi
  csiDriver:
    name: "org.democratic-csi.iscsi-synology"
  controller:
-    enabled: true
-    rbac:
-      enabled: true
    replicaCount: 2
  storageClasses:
    - name: synology-iscsi-delete
--- a/clusters/cl01tl/helm/descheduler/Chart.yaml
+++ b/clusters/cl01tl/helm/descheduler/Chart.yaml
@@ -5,8 +5,7 @@ description: Descheduler
 keywords:
  - descheduler
  - kube-scheduler
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/0c38b7e4-4573-487c-82b0-4eeeb00e1276
+home: https://docs.alexlebens.dev/applications/descheduler/
 sources:
  - https://github.com/kubernetes-sigs/descheduler
  - https://github.com/kubernetes-sigs/descheduler/tree/master/charts/descheduler
--- a/clusters/cl01tl/helm/descheduler/values.yaml
+++ b/clusters/cl01tl/helm/descheduler/values.yaml
@@ -1,27 +1,22 @@
 descheduler:
  kind: Deployment
  resources:
+    limits:
+      cpu: null
+      memory: null
    requests:
      cpu: 10m
-      memory: 64Mi
-  securityContext:
-    allowPrivilegeEscalation: false
-    capabilities:
-      drop:
-        - ALL
-    privileged: false
-    readOnlyRootFilesystem: true
-    runAsNonRoot: true
-    runAsUser: 1000
+      memory: 50Mi
  deschedulingInterval: 5m
-  replicas: 1
+  replicas: 3
  leaderElection:
-    enabled: false
-  command:
-  - "/bin/descheduler"
-  cmdOptions:
-    v: 3
-  deschedulerPolicyAPIVersion: "descheduler/v1alpha2"
+    enabled: true
+    leaseDuration: 15s
+    renewDeadline: 10s
+    retryPeriod: 2s
+    resourceLock: "leases"
+    resourceName: "descheduler"
+    resourceNamespace: "descheduler"
  deschedulerPolicy:
    profiles:
      - name: default
@@ -53,13 +48,13 @@ descheduler:
          - name: LowNodeUtilization
            args:
              thresholds:
-                cpu: 30
-                memory: 30
-                pods: 50
+                cpu: 20
+                memory: 20
+                pods: 20
              targetThresholds:
-                cpu: 60
-                memory: 40
-                pods: 80
+                cpu: 50
+                memory: 50
+                pods: 60
        plugins:
          balance:
            enabled:
--- a/renovate.json
+++ b/renovate.json
@@ -73,6 +73,15 @@
      ],
      "enabled": false
    },
+    {
+      "description": "Versioning for LinuxServer images",
+      "matchPackagePatterns": [
+        "^linuxserver/",
+        "^ghcr.io/linuxserver/",
+        "^lscr.io/linuxserver/"
+      ],
+      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ls(?<revision>\\d+)$"
+    },
    {
      "description": "Label by datasource",
      "matchDatasources": [