imfreedom/k8s-cluster

Lower the resources for trac

15 months ago, Gary Kramlich
5e0f351f8ee3
Lower the resources for trac

We haven't had any stability issues with trac since we redirected the issues,
so we're going to lower the resources to reflect that and hopefully bring them
down a bit more over time.
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: gemini-controller
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: gemini-controller
rules:
- apiGroups:
- gemini.fairwinds.com
resources:
- snapshotgroups
verbs:
- get
- list
- watch
- create
- update
- delete
- apiGroups:
- snapshot.storage.k8s.io
- ''
resources:
- volumesnapshots
- persistentvolumeclaims
verbs:
- get
- list
- create
- update
- delete
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs:
- get
- create
- delete
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: gemini-controller
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: gemini-controller
subjects:
- kind: ServiceAccount
name: gemini-controller
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: gemini-controller
spec:
replicas: 1
revisionHistoryLimit: 0
selector:
matchLabels:
app: gemini
template:
spec:
serviceAccountName: gemini-controller
containers:
- command:
- gemini
image: quay.io/fairwinds/gemini:1.0
imagePullPolicy: Always
name: gemini-controller
resources:
requests:
memory: 64Mi
cpu: 25m
limits:
memory: 128Mi
cpu: 100m
securityContext:
allowPrivilegeEscalation: false
privileged: false
readOnlyRootFilesystem: true
runAsNonRoot: true
capabilities:
drop:
- ALL
---