Remove all CPU limits cluster-wide to eliminate CFS throttling

CPU limits cause CFS throttling even when nodes have idle capacity.
Move to a request-only CPU model: keep CPU requests for scheduling
fairness but remove all CPU limits. Memory limits stay (incompressible).

Changes across 108 files:
- Kyverno LimitRange policy: remove cpu from default/max in all 6 tiers
- Kyverno ResourceQuota policy: remove limits.cpu from all 5 tiers
- Custom ResourceQuotas: remove limits.cpu from 8 namespace quotas
- Custom LimitRanges: remove cpu from default/max (nextcloud, onlyoffice)
- RBAC module: remove cpu_limits variable and quota reference
- Freedify factory: remove cpu_limit variable and limits reference
- 86 deployment files: remove cpu from all limits blocks
- 6 Helm values files: remove cpu under limits sections
This commit is contained in:
Viktor Barzin 2026-03-14 08:51:45 +00:00 committed by Viktor Barzin
parent 1eccf0363e
commit 28ac1382d1
108 changed files with 602 additions and 428 deletions

View file

@ -1,30 +1,30 @@
variable "tls_secret_name" {
type = string
type = string
sensitive = true
}
variable "webhook_handler_secret" {
type = string
type = string
sensitive = true
}
variable "webhook_handler_fb_verify_token" {
type = string
type = string
sensitive = true
}
variable "webhook_handler_fb_page_token" {
type = string
type = string
sensitive = true
}
variable "webhook_handler_fb_app_secret" {
type = string
type = string
sensitive = true
}
variable "webhook_handler_git_user" { type = string }
variable "webhook_handler_git_token" {
type = string
type = string
sensitive = true
}
variable "webhook_handler_ssh_key" {
type = string
type = string
sensitive = true
}
@ -131,7 +131,6 @@ resource "kubernetes_deployment" "webhook_handler" {
name = "webhook-handler"
resources {
limits = {
cpu = "100m"
memory = "256Mi"
}
requests = {