clusters/cl01tl/helm/actual/values.yaml

@@ -14,8 +14,8 @@ actual:
               value: 5006
           resources:
             requests:
-              cpu: 25m
+              cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
           probes:
             liveness:
               enabled: true

clusters/cl01tl/helm/argo-workflows/values.yaml

@@ -30,8 +30,8 @@ argo-workflows:
     cronWorkflowWorkers: 2
     resources:
       requests:
-        cpu: 10m
+        cpu: 1m
-        memory: 32Mi
+        memory: 20Mi
     serviceMonitor:
       enabled: true
     workflowNamespaces:
@@ -76,7 +76,7 @@ argo-events:
   controller:
     resources:
       requests:
-        cpu: 10m
+        cpu: 1m
         memory: 32Mi
     metrics:
       enabled: true
@@ -86,8 +86,8 @@ argo-events:
     enabled: true
     resources:
       requests:
-        cpu: 10m
+        cpu: 1m
-        memory: 32Mi
+        memory: 20Mi
 postgres-18-cluster:
   mode: recovery
   recovery:

clusters/cl01tl/helm/argocd/values.yaml

@@ -34,7 +34,7 @@ argo-cd:
     replicas: 1
     resources:
       requests:
-        cpu: 15m
+        cpu: 100m
         memory: 1Gi
     readinessProbe:
       failureThreshold: 3
@@ -77,7 +77,7 @@ argo-cd:
     enabled: true
     resources:
       requests:
-        cpu: 10m
+        cpu: 1m
         memory: 64Mi
     metrics:
       enabled: true
@@ -98,7 +98,7 @@ argo-cd:
       resources:
         requests:
           cpu: 1000m
-          memory: 64Mi
+          memory: 50Mi
     haproxy:
       enabled: true
       image:
@@ -106,8 +106,8 @@ argo-cd:
         tag: 3.3.6-alpine@sha256:744be2dca649a44d490a4c565d36968d19482dd387f1bdd44c168f4322bc6b1e
       resources:
         requests:
-          cpu: 10m
+          cpu: 5m
-          memory: 128Mi
+          memory: 90Mi
       metrics:
         enabled: true
         serviceMonitor:
@@ -138,8 +138,8 @@ argo-cd:
     replicas: 2
     resources:
      requests:
-       cpu: 10m
+       cpu: 20m
-       memory: 64Mi
+       memory: 80Mi
     metrics:
       enabled: true
       serviceMonitor:
@@ -157,8 +157,8 @@ argo-cd:
     replicas: 2
     resources:
       requests:
-        cpu: 10m
+        cpu: 1m
-        memory: 64Mi
+        memory: 50Mi
     readinessProbe:
       enabled: true
       failureThreshold: 3
@@ -182,7 +182,7 @@ argo-cd:
     resources:
       requests:
         cpu: 10m
-        memory: 64Mi
+        memory: 50Mi
     metrics:
       enabled: true
       serviceMonitor:
@@ -218,8 +218,8 @@ argo-cd:
             value: Bearer $ntfy-token
     resources:
       requests:
-        cpu: 10m
+        cpu: 2m
-        memory: 64Mi
+        memory: 50Mi
     livenessProbe:
       enabled: true
     readinessProbe:

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -18,7 +18,7 @@ audiobookshelf:
               value: America/Chicago
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
               memory: 200Mi
         apprise-api:
           image:

clusters/cl01tl/helm/authentik/values.yaml

@@ -33,7 +33,7 @@ authentik:
     replicas: 2
     resources:
       requests:
-        cpu: 100m
+        cpu: 20m
         memory: 700Mi
     livenessProbe:
       failureThreshold: 3
@@ -66,8 +66,8 @@ authentik:
     replicas: 2
     resources:
       requests:
-        cpu: 100m
+        cpu: 80m
-        memory: 512Mi
+        memory: 650Mi
     metrics:
       enabled: true
       serviceMonitor:

clusters/cl01tl/helm/backrest/values.yaml

@@ -22,8 +22,8 @@ backrest:
               value: /tmp
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 80Mi
+              memory: 30Mi
   service:
     main:
       controller: main

clusters/cl01tl/helm/bazarr/values.yaml

@@ -23,9 +23,11 @@ bazarr:
             - name: PGID
               value: 1000
           resources:
+            limits:
+              cpu: 100m
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 256Mi
+              memory: 250Mi
   service:
     main:
       controller: main

clusters/cl01tl/helm/blocky/values.yaml

@@ -15,7 +15,7 @@ blocky:
           resources:
             requests:
               cpu: 10m
-              memory: 90Mi
+              memory: 100Mi
   configMaps:
     config:
       enabled: true

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -3,7 +3,7 @@ cloudnative-pg:
   resources:
     requests:
       cpu: 10m
-      memory: 64Mi
+      memory: 100Mi
   monitoring:
     podMonitorEnabled: true
 plugin-barman-cloud:
@@ -12,5 +12,5 @@ plugin-barman-cloud:
     create: true
   resources:
     requests:
-      cpu: 10m
+      cpu: 1m
-      memory: 64Mi
+      memory: 20Mi

clusters/cl01tl/helm/code-server/values.yaml

@@ -27,8 +27,8 @@ code-server:
                 name: codeserver-password-secret
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 80Mi
+              memory: 50Mi
   service:
     main:
       controller: main

clusters/cl01tl/helm/coredns/values.yaml

@@ -8,8 +8,8 @@ coredns:
       cpu: null
       memory: null
     requests:
-      cpu: 20m
+      cpu: 30m
-      memory: 32Mi
+      memory: 30Mi
   prometheus:
     service:
       enabled: true

clusters/cl01tl/helm/dawarich/values.yaml

@@ -106,7 +106,7 @@ dawarich:
                 timeoutSeconds: 10
           resources:
             requests:
-              cpu: 10m
+              cpu: 20m
               memory: 750Mi
         sidekiq:
           image:

clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.yaml

@@ -5,8 +5,7 @@ description: Democratic CSI
 keywords:
   - democratic-csi-synology-iscsi
   - iscsi
-  - kubernetes
+home: https://docs.alexlebens.dev/applications/democratic-csi-synology-iscsi/
-home: https://wiki.alexlebens.dev/s/0cc6ba65-024b-4489-952a-fc0f647fd099
 sources:
   - https://github.com/democratic-csi/democratic-csi
   - https://github.com/democratic-csi/charts/tree/master/stable/democratic-csi

clusters/cl01tl/helm/democratic-csi-synology-iscsi/templates/external-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: driver-config-file.yaml
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/democratic-csi-synology-iscsi/config
-        metadataPolicy: None
         property: driver-config-file.yaml

clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml

@@ -3,12 +3,13 @@ democratic-csi:
     existingConfigSecret: synology-iscsi-config-secret
     config:
       driver: synology-iscsi
+    resources:
+      requests:
+        cpu: 1m
+        memory: 128Mi
   csiDriver:
     name: "org.democratic-csi.iscsi-synology"
   controller:
-    enabled: true
-    rbac:
-      enabled: true
     replicaCount: 2
   storageClasses:
     - name: synology-iscsi-delete

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -5,8 +5,7 @@ description: Descheduler
 keywords:
   - descheduler
   - kube-scheduler
-  - kubernetes
+home: https://docs.alexlebens.dev/applications/descheduler/
-home: https://wiki.alexlebens.dev/s/0c38b7e4-4573-487c-82b0-4eeeb00e1276
 sources:
   - https://github.com/kubernetes-sigs/descheduler
   - https://github.com/kubernetes-sigs/descheduler/tree/master/charts/descheduler

clusters/cl01tl/helm/descheduler/values.yaml

@@ -1,27 +1,22 @@
 descheduler:
   kind: Deployment
   resources:
+    limits:
+      cpu: null
+      memory: null
     requests:
       cpu: 10m
-      memory: 64Mi
+      memory: 50Mi
-  securityContext:
-    allowPrivilegeEscalation: false
-    capabilities:
-      drop:
-        - ALL
-    privileged: false
-    readOnlyRootFilesystem: true
-    runAsNonRoot: true
-    runAsUser: 1000
   deschedulingInterval: 5m
-  replicas: 1
+  replicas: 3
   leaderElection:
-    enabled: false
+    enabled: true
-  command:
+    leaseDuration: 15s
-  - "/bin/descheduler"
+    renewDeadline: 10s
-  cmdOptions:
+    retryPeriod: 2s
-    v: 3
+    resourceLock: "leases"
-  deschedulerPolicyAPIVersion: "descheduler/v1alpha2"
+    resourceName: "descheduler"
+    resourceNamespace: "descheduler"
   deschedulerPolicy:
     profiles:
       - name: default
@@ -53,13 +48,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 30
+                cpu: 20
-                memory: 30
+                memory: 20
-                pods: 50
+                pods: 20
               targetThresholds:
-                cpu: 60
+                cpu: 50
-                memory: 40
+                memory: 50
-                pods: 80
+                pods: 60
         plugins:
           balance:
             enabled:

renovate.json

@@ -73,6 +73,15 @@
       ],
       "enabled": false
     },
+    {
+      "description": "Versioning for LinuxServer images",
+      "matchPackagePatterns": [
+        "^linuxserver/",
+        "^ghcr.io/linuxserver/",
+        "^lscr.io/linuxserver/"
+      ],
+      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ls(?<revision>\\d+)$"
+    },
     {
       "description": "Label by datasource",
       "matchDatasources": [