clusters/cl01tl/manifests/actual/Deployment-actual.yaml

@@ -53,8 +53,8 @@ spec:
           name: main
           resources:
             requests:
-              cpu: 25m
+              cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
           volumeMounts:
             - mountPath: /data
               name: data

clusters/cl01tl/manifests/argo-workflows/Deployment-argo-workflows-argo-events-controller-manager.yaml

@@ -74,7 +74,7 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
               memory: 32Mi
       serviceAccountName: argo-workflows-argo-events-controller-manager
       volumes:

clusters/cl01tl/manifests/argo-workflows/Deployment-argo-workflows-workflow-controller.yaml

@@ -78,8 +78,8 @@ spec:
               value: "true"
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 32Mi
+              memory: 20Mi
           ports:
             - name: metrics
               containerPort: 9090

clusters/cl01tl/manifests/argo-workflows/Deployment-events-webhook.yaml

@@ -64,6 +64,6 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 32Mi
+              memory: 20Mi
       serviceAccountName: argo-workflows-argo-events-events-webhook

clusters/cl01tl/manifests/argocd/Deployment-argocd-applicationset-controller.yaml

@@ -239,7 +239,7 @@ spec:
           resources:
             requests:
               cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/argocd/Deployment-argocd-dex-server.yaml

@@ -100,7 +100,7 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
               memory: 64Mi
           securityContext:
             allowPrivilegeEscalation: false
@@ -135,7 +135,7 @@ spec:
               name: dexconfig
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
               memory: 64Mi
           securityContext:
             allowPrivilegeEscalation: false

clusters/cl01tl/manifests/argocd/Deployment-argocd-notifications-controller.yaml

@@ -105,8 +105,8 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 10m
+              cpu: 2m
-              memory: 64Mi
+              memory: 50Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/argocd/Deployment-argocd-redis-ha-haproxy.yaml

@@ -105,8 +105,8 @@ spec:
               containerPort: 9101
           resources:
             requests:
-              cpu: 10m
+              cpu: 5m
-              memory: 128Mi
+              memory: 90Mi
           volumeMounts:
             - name: data
               mountPath: /usr/local/etc/haproxy

clusters/cl01tl/manifests/argocd/Deployment-argocd-repo-server.yaml

@@ -348,8 +348,8 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64Mi
+              memory: 50Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:
@@ -370,8 +370,8 @@ spec:
           name: copyutil
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64Mi
+              memory: 50Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/argocd/Deployment-argocd-server.yaml

@@ -396,8 +396,8 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 10m
+              cpu: 20m
-              memory: 64Mi
+              memory: 80Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/argocd/StatefulSet-argocd-application-controller.yaml

@@ -341,7 +341,7 @@ spec:
             failureThreshold: 3
           resources:
             requests:
-              cpu: 15m
+              cpu: 100m
               memory: 1Gi
           securityContext:
             allowPrivilegeEscalation: false

clusters/cl01tl/manifests/argocd/StatefulSet-argocd-redis-ha-server.yaml

@@ -131,7 +131,7 @@ spec:
           resources:
             requests:
               cpu: 1000m
-              memory: 64Mi
+              memory: 50Mi
           ports:
             - name: redis
               containerPort: 6379

clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml

@@ -64,7 +64,7 @@ spec:
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
               memory: 200Mi
           volumeMounts:
             - mountPath: /mnt/store/Audiobooks

clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml

@@ -113,7 +113,7 @@ spec:
             timeoutSeconds: 3
           resources:
             requests:
-              cpu: 100m
+              cpu: 20m
               memory: 700Mi
       affinity:
         podAntiAffinity:

clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml

@@ -112,8 +112,8 @@ spec:
             timeoutSeconds: 3
           resources:
             requests:
-              cpu: 100m
+              cpu: 80m
-              memory: 512Mi
+              memory: 650Mi
       affinity:
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:

clusters/cl01tl/manifests/backrest/Deployment-backrest.yaml

@@ -49,8 +49,8 @@ spec:
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 80Mi
+              memory: 30Mi
           volumeMounts:
             - mountPath: /cache
               name: cache

clusters/cl01tl/manifests/bazarr/Deployment-bazarr.yaml

@@ -49,9 +49,11 @@ spec:
           image: ghcr.io/linuxserver/bazarr:1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
           name: main
           resources:
+            limits:
+              cpu: 100m
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 256Mi
+              memory: 250Mi
           volumeMounts:
             - mountPath: /config
               name: config

clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml

@@ -44,7 +44,7 @@ spec:
           resources:
             requests:
               cpu: 10m
-              memory: 90Mi
+              memory: 100Mi
           volumeMounts:
             - mountPath: /app/config.yml
               mountPropagation: None

clusters/cl01tl/manifests/cloudnative-pg/Deployment-cloudnative-pg-plugin-barman-cloud.yaml

@@ -50,8 +50,8 @@ spec:
               port: 9090
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64Mi
+              memory: 20Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/cloudnative-pg/Deployment-cloudnative-pg.yaml

@@ -68,7 +68,7 @@ spec:
           resources:
             requests:
               cpu: 10m
-              memory: 64Mi
+              memory: 100Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml

@@ -53,8 +53,8 @@ spec:
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 80Mi
+              memory: 50Mi
           volumeMounts:
             - mountPath: /config
               name: config

clusters/cl01tl/manifests/coredns/Deployment-coredns.yaml

@@ -58,8 +58,8 @@ spec:
           resources:
             limits: {}
             requests:
-              cpu: 20m
+              cpu: 30m
-              memory: 32Mi
+              memory: 30Mi
           ports:
             - {"containerPort": 53, "name": "udp-53", "protocol": "UDP"}
             - {"containerPort": 53, "name": "tcp-53", "protocol": "TCP"}

clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml

@@ -129,7 +129,7 @@ spec:
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 20m
               memory: 750Mi
           volumeMounts:
             - mountPath: /var/app/public

clusters/cl01tl/manifests/democratic-csi-synology-iscsi/ExternalSecret-synology-iscsi-config-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: driver-config-file.yaml
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/democratic-csi-synology-iscsi/config
-        metadataPolicy: None
         property: driver-config-file.yaml

clusters/cl01tl/manifests/descheduler/ClusterRole-descheduler.yaml

@@ -30,6 +30,13 @@ rules:
   - apiGroups: ["policy"]
     resources: ["poddisruptionbudgets"]
     verbs: ["get", "watch", "list"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["create", "update"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    resourceNames: ["descheduler"]
+    verbs: ["get", "patch", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
     verbs: ["get", "watch", "list"]

clusters/cl01tl/manifests/descheduler/ConfigMap-descheduler.yaml

@@ -42,13 +42,13 @@ data:
         name: HighNodeUtilization
       - args:
           targetThresholds:
-            cpu: 60
+            cpu: 50
-            memory: 40
+            memory: 50
-            pods: 80
+            pods: 60
           thresholds:
-            cpu: 30
+            cpu: 20
-            memory: 30
+            memory: 20
-            pods: 50
+            pods: 20
         name: LowNodeUtilization
       plugins:
         balance:

clusters/cl01tl/manifests/descheduler/Deployment-descheduler.yaml

@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 spec:
-  replicas: 1
+  replicas: 3
   selector:
     matchLabels:
       app.kubernetes.io/name: descheduler
@@ -21,7 +21,7 @@ spec:
         app.kubernetes.io/name: descheduler
         app.kubernetes.io/instance: descheduler
       annotations:
-        checksum/config: 52cdde3aae105c8d407cdec96dbaf5f9d630289083aa3d4fbf77f0d5962eda6d
+        checksum/config: b8b492edc39a8750e56e18b3d9ef6a7fee693fd63dd0d63b55b4336e63ae8dcb
     spec:
       priorityClassName: system-cluster-critical
       serviceAccountName: descheduler
@@ -35,6 +35,13 @@ spec:
             - --policy-config-file=/policy-dir/policy.yaml
             - --descheduling-interval=5m
             - --v=3
+            - --leader-elect=true
+            - --leader-elect-lease-duration=15s
+            - --leader-elect-renew-deadline=10s
+            - --leader-elect-retry-period=2s
+            - --leader-elect-resource-lock=leases
+            - --leader-elect-resource-name=descheduler
+            - --leader-elect-resource-namespace=descheduler
           ports:
             - containerPort: 10258
               protocol: TCP
@@ -48,12 +55,10 @@ spec:
             periodSeconds: 20
             timeoutSeconds: 5
           resources:
-            limits:
+            limits: {}
-              cpu: 500m
-              memory: 256Mi
             requests:
               cpu: 10m
-              memory: 64Mi
+              memory: 50Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities: