viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[ci skip] Add custom resource quota for authentik namespace

Browse source 
Authentik runs ~10 pods (3 server + 3 worker + 3 pgbouncer + outpost)
which exceeds the default tier-1-cluster quota limits. Add custom-quota
label to opt out of Kyverno-generated quotas and define a Terraform-managed
ResourceQuota with limits appropriate for authentik's workload.
This commit is contained in:
Viktor Barzin 2026-02-21 23:44:05 +00:00
parent b242b7586d
commit 9841dca9d1
No known key found for this signature in database
GPG key ID: 0EB088298288D958
1 changed files with 18 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/kubernetes/authentik/main.tf
View file

@ -14,7 +14,24 @@ resource "kubernetes_namespace" "authentik" {
metadata {
name = "authentik"
labels = {
tier = var.tier
tier = var.tier
"resource-governance/custom-quota" = "true"
}
}
}
resource "kubernetes_resource_quota" "authentik" {
metadata {
name = "authentik-quota"
namespace = kubernetes_namespace.authentik.metadata[0].name
}
spec {
hard = {
"requests.cpu" = "8"
"requests.memory" = "8Gi"
"limits.cpu" = "24"
"limits.memory" = "48Gi"
pods = "30"
}
}
}