2026-03-26 01:39:39 +00:00
27 changed files with 65 additions and 54 deletions
--- a/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
+++ b/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
@@ -53,8 +53,8 @@ spec:
          name: main
          resources:
            requests:
-              cpu: 25m
-              memory: 64Mi
+              cpu: 10m
+              memory: 50Mi
          volumeMounts:
            - mountPath: /data
              name: data
--- a/clusters/cl01tl/manifests/argo-workflows/Deployment-argo-workflows-argo-events-controller-manager.yaml
+++ b/clusters/cl01tl/manifests/argo-workflows/Deployment-argo-workflows-argo-events-controller-manager.yaml
@@ -74,7 +74,7 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 10m
+              cpu: 1m
              memory: 32Mi
      serviceAccountName: argo-workflows-argo-events-controller-manager
      volumes:
--- a/clusters/cl01tl/manifests/argo-workflows/Deployment-argo-workflows-workflow-controller.yaml
+++ b/clusters/cl01tl/manifests/argo-workflows/Deployment-argo-workflows-workflow-controller.yaml
@@ -78,8 +78,8 @@ spec:
              value: "true"
          resources:
            requests:
-              cpu: 10m
-              memory: 32Mi
+              cpu: 1m
+              memory: 20Mi
          ports:
            - name: metrics
              containerPort: 9090
--- a/clusters/cl01tl/manifests/argo-workflows/Deployment-events-webhook.yaml
+++ b/clusters/cl01tl/manifests/argo-workflows/Deployment-events-webhook.yaml
@@ -64,6 +64,6 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 10m
-              memory: 32Mi
+              cpu: 1m
+              memory: 20Mi
      serviceAccountName: argo-workflows-argo-events-events-webhook
--- a/clusters/cl01tl/manifests/argocd/Deployment-argocd-applicationset-controller.yaml
+++ b/clusters/cl01tl/manifests/argocd/Deployment-argocd-applicationset-controller.yaml
@@ -239,7 +239,7 @@ spec:
          resources:
            requests:
              cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/argocd/Deployment-argocd-dex-server.yaml
+++ b/clusters/cl01tl/manifests/argocd/Deployment-argocd-dex-server.yaml
@@ -100,7 +100,7 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 10m
+              cpu: 1m
              memory: 64Mi
          securityContext:
            allowPrivilegeEscalation: false
@@ -135,7 +135,7 @@ spec:
              name: dexconfig
          resources:
            requests:
-              cpu: 10m
+              cpu: 1m
              memory: 64Mi
          securityContext:
            allowPrivilegeEscalation: false
--- a/clusters/cl01tl/manifests/argocd/Deployment-argocd-notifications-controller.yaml
+++ b/clusters/cl01tl/manifests/argocd/Deployment-argocd-notifications-controller.yaml
@@ -105,8 +105,8 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 2m
+              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/argocd/Deployment-argocd-redis-ha-haproxy.yaml
+++ b/clusters/cl01tl/manifests/argocd/Deployment-argocd-redis-ha-haproxy.yaml
@@ -105,8 +105,8 @@ spec:
              containerPort: 9101
          resources:
            requests:
-              cpu: 10m
-              memory: 128Mi
+              cpu: 5m
+              memory: 90Mi
          volumeMounts:
            - name: data
              mountPath: /usr/local/etc/haproxy
--- a/clusters/cl01tl/manifests/argocd/Deployment-argocd-repo-server.yaml
+++ b/clusters/cl01tl/manifests/argocd/Deployment-argocd-repo-server.yaml
@@ -348,8 +348,8 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
@@ -370,8 +370,8 @@ spec:
          name: copyutil
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/argocd/Deployment-argocd-server.yaml
+++ b/clusters/cl01tl/manifests/argocd/Deployment-argocd-server.yaml
@@ -396,8 +396,8 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 20m
+              memory: 80Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/argocd/StatefulSet-argocd-application-controller.yaml
+++ b/clusters/cl01tl/manifests/argocd/StatefulSet-argocd-application-controller.yaml
@@ -341,7 +341,7 @@ spec:
            failureThreshold: 3
          resources:
            requests:
-              cpu: 15m
+              cpu: 100m
              memory: 1Gi
          securityContext:
            allowPrivilegeEscalation: false
--- a/clusters/cl01tl/manifests/argocd/StatefulSet-argocd-redis-ha-server.yaml
+++ b/clusters/cl01tl/manifests/argocd/StatefulSet-argocd-redis-ha-server.yaml
@@ -131,7 +131,7 @@ spec:
          resources:
            requests:
              cpu: 1000m
-              memory: 64Mi
+              memory: 50Mi
          ports:
            - name: redis
              containerPort: 6379
--- a/clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml
@@ -64,7 +64,7 @@ spec:
          name: main
          resources:
            requests:
-              cpu: 10m
+              cpu: 1m
              memory: 200Mi
          volumeMounts:
            - mountPath: /mnt/store/Audiobooks
--- a/clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml
+++ b/clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml
@@ -113,7 +113,7 @@ spec:
            timeoutSeconds: 3
          resources:
            requests:
-              cpu: 100m
+              cpu: 20m
              memory: 700Mi
      affinity:
        podAntiAffinity:
--- a/clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml
+++ b/clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml
@@ -112,8 +112,8 @@ spec:
            timeoutSeconds: 3
          resources:
            requests:
-              cpu: 100m
-              memory: 512Mi
+              cpu: 80m
+              memory: 650Mi
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
--- a/clusters/cl01tl/manifests/backrest/Deployment-backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/Deployment-backrest.yaml
@@ -49,8 +49,8 @@ spec:
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 80Mi
+              cpu: 1m
+              memory: 30Mi
          volumeMounts:
            - mountPath: /cache
              name: cache
--- a/clusters/cl01tl/manifests/bazarr/Deployment-bazarr.yaml
+++ b/clusters/cl01tl/manifests/bazarr/Deployment-bazarr.yaml
@@ -49,9 +49,11 @@ spec:
          image: ghcr.io/linuxserver/bazarr:1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
          name: main
          resources:
+            limits:
+              cpu: 100m
            requests:
-              cpu: 10m
-              memory: 256Mi
+              cpu: 1m
+              memory: 250Mi
          volumeMounts:
            - mountPath: /config
              name: config
--- a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
@@ -44,7 +44,7 @@ spec:
          resources:
            requests:
              cpu: 10m
-              memory: 90Mi
+              memory: 100Mi
          volumeMounts:
            - mountPath: /app/config.yml
              mountPropagation: None
--- a/clusters/cl01tl/manifests/cloudnative-pg/Deployment-cloudnative-pg-plugin-barman-cloud.yaml
+++ b/clusters/cl01tl/manifests/cloudnative-pg/Deployment-cloudnative-pg-plugin-barman-cloud.yaml
@@ -50,8 +50,8 @@ spec:
              port: 9090
          resources:
            requests:
-              cpu: 10m
-              memory: 64Mi
+              cpu: 1m
+              memory: 20Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/cloudnative-pg/Deployment-cloudnative-pg.yaml
+++ b/clusters/cl01tl/manifests/cloudnative-pg/Deployment-cloudnative-pg.yaml
@@ -68,7 +68,7 @@ spec:
          resources:
            requests:
              cpu: 10m
-              memory: 64Mi
+              memory: 100Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
+++ b/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
@@ -53,8 +53,8 @@ spec:
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 80Mi
+              cpu: 1m
+              memory: 50Mi
          volumeMounts:
            - mountPath: /config
              name: config
--- a/clusters/cl01tl/manifests/coredns/Deployment-coredns.yaml
+++ b/clusters/cl01tl/manifests/coredns/Deployment-coredns.yaml
@@ -58,8 +58,8 @@ spec:
          resources:
            limits: {}
            requests:
-              cpu: 20m
-              memory: 32Mi
+              cpu: 30m
+              memory: 30Mi
          ports:
            - {"containerPort": 53, "name": "udp-53", "protocol": "UDP"}
            - {"containerPort": 53, "name": "tcp-53", "protocol": "TCP"}
--- a/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
@@ -129,7 +129,7 @@ spec:
          name: main
          resources:
            requests:
-              cpu: 10m
+              cpu: 20m
              memory: 750Mi
          volumeMounts:
            - mountPath: /var/app/public
--- a/clusters/cl01tl/manifests/democratic-csi-synology-iscsi/ExternalSecret-synology-iscsi-config-secret.yaml
+++ b/clusters/cl01tl/manifests/democratic-csi-synology-iscsi/ExternalSecret-synology-iscsi-config-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: driver-config-file.yaml
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/democratic-csi-synology-iscsi/config
-        metadataPolicy: None
        property: driver-config-file.yaml
--- a/clusters/cl01tl/manifests/descheduler/ClusterRole-descheduler.yaml
+++ b/clusters/cl01tl/manifests/descheduler/ClusterRole-descheduler.yaml
@@ -30,6 +30,13 @@ rules:
  - apiGroups: ["policy"]
    resources: ["poddisruptionbudgets"]
    verbs: ["get", "watch", "list"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["create", "update"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    resourceNames: ["descheduler"]
+    verbs: ["get", "patch", "delete"]
  - apiGroups: [""]
    resources: ["persistentvolumeclaims"]
    verbs: ["get", "watch", "list"]
--- a/clusters/cl01tl/manifests/descheduler/ConfigMap-descheduler.yaml
+++ b/clusters/cl01tl/manifests/descheduler/ConfigMap-descheduler.yaml
@@ -42,13 +42,13 @@ data:
        name: HighNodeUtilization
      - args:
          targetThresholds:
-            cpu: 60
-            memory: 40
-            pods: 80
+            cpu: 50
+            memory: 50
+            pods: 60
          thresholds:
-            cpu: 30
-            memory: 30
-            pods: 50
+            cpu: 20
+            memory: 20
+            pods: 20
        name: LowNodeUtilization
      plugins:
        balance:
--- a/clusters/cl01tl/manifests/descheduler/Deployment-descheduler.yaml
+++ b/clusters/cl01tl/manifests/descheduler/Deployment-descheduler.yaml
@@ -10,7 +10,7 @@ metadata:
    app.kubernetes.io/version: "0.35.1"
    app.kubernetes.io/managed-by: Helm
 spec:
-  replicas: 1
+  replicas: 3
  selector:
    matchLabels:
      app.kubernetes.io/name: descheduler
@@ -21,7 +21,7 @@ spec:
        app.kubernetes.io/name: descheduler
        app.kubernetes.io/instance: descheduler
      annotations:
-        checksum/config: 52cdde3aae105c8d407cdec96dbaf5f9d630289083aa3d4fbf77f0d5962eda6d
+        checksum/config: b8b492edc39a8750e56e18b3d9ef6a7fee693fd63dd0d63b55b4336e63ae8dcb
    spec:
      priorityClassName: system-cluster-critical
      serviceAccountName: descheduler
@@ -35,6 +35,13 @@ spec:
            - --policy-config-file=/policy-dir/policy.yaml
            - --descheduling-interval=5m
            - --v=3
+            - --leader-elect=true
+            - --leader-elect-lease-duration=15s
+            - --leader-elect-renew-deadline=10s
+            - --leader-elect-retry-period=2s
+            - --leader-elect-resource-lock=leases
+            - --leader-elect-resource-name=descheduler
+            - --leader-elect-resource-namespace=descheduler
          ports:
            - containerPort: 10258
              protocol: TCP
@@ -48,12 +55,10 @@ spec:
            periodSeconds: 20
            timeoutSeconds: 5
          resources:
-            limits:
-              cpu: 500m
-              memory: 256Mi
+            limits: {}
            requests:
              cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: