viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove all CPU limits cluster-wide to eliminate CFS throttling

Browse source 
CPU limits cause CFS throttling even when nodes have idle capacity.
Move to a request-only CPU model: keep CPU requests for scheduling
fairness but remove all CPU limits. Memory limits stay (incompressible).

Changes across 108 files:
- Kyverno LimitRange policy: remove cpu from default/max in all 6 tiers
- Kyverno ResourceQuota policy: remove limits.cpu from all 5 tiers
- Custom ResourceQuotas: remove limits.cpu from 8 namespace quotas
- Custom LimitRanges: remove cpu from default/max (nextcloud, onlyoffice)
- RBAC module: remove cpu_limits variable and quota reference
- Freedify factory: remove cpu_limit variable and limits reference
- 86 deployment files: remove cpu from all limits blocks
- 6 Helm values files: remove cpu under limits sections
This commit is contained in:
Viktor Barzin 2026-03-14 08:51:45 +00:00
parent 120f83ce93
commit b00f810d3d
108 changed files with 609 additions and 435 deletions
Download patch file Download diff file Expand all files Collapse all files

29
stacks/immich/main.tf
View file

@ -1,17 +1,17 @@
variable "tls_secret_name" {
type = string
type = string
sensitive = true
}
variable "immich_postgresql_password" {
type = string
type = string
sensitive = true
}
variable "immich_frame_api_key" {
type = string
type = string
sensitive = true
}
variable "homepage_credentials" {
type = map(any)
type = map(any)
sensitive = true
}
@ -249,7 +249,6 @@ resource "kubernetes_deployment" "immich_server" {
memory = "256Mi"
}
limits = {
cpu = "2"
memory = "2Gi"
}
}
@ -382,7 +381,6 @@ resource "kubernetes_deployment" "immich-postgres" {
memory = "256Mi"
}
limits = {
cpu = "1"
memory = "1Gi"
}
}
@ -522,7 +520,6 @@ resource "kubernetes_deployment" "immich-machine-learning" {
memory = "1Gi"
}
limits = {
cpu = "2"
memory = "4Gi"
"nvidia.com/gpu" = "1"
}
@ -589,16 +586,16 @@ module "ingress-immich" {
skip_default_rate_limit = true
extra_middlewares = ["traefik-immich-rate-limit@kubernetescrd"]
extra_annotations = {
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/description" = "Photos library"
"gethomepage.dev/icon" = "immich.png"
"gethomepage.dev/name" = "Immich"
"gethomepage.dev/group" = "Media & Entertainment"
"gethomepage.dev/widget.type" = "immich"
"gethomepage.dev/widget.url" = "http://immich-server.immich.svc.cluster.local:2283"
"gethomepage.dev/enabled" = "true"
"gethomepage.dev/description" = "Photos library"
"gethomepage.dev/icon" = "immich.png"
"gethomepage.dev/name" = "Immich"
"gethomepage.dev/group" = "Media & Entertainment"
"gethomepage.dev/widget.type" = "immich"
"gethomepage.dev/widget.url" = "http://immich-server.immich.svc.cluster.local:2283"
"gethomepage.dev/widget.version" = "2"
"gethomepage.dev/pod-selector" = ""
"gethomepage.dev/widget.key" = var.homepage_credentials["immich"]["token"]
"gethomepage.dev/pod-selector" = ""
"gethomepage.dev/widget.key" = var.homepage_credentials["immich"]["token"]
}
}