23019da8e5
After node2 OOM incident, right-size memory across the cluster by setting requests=limits based on max_over_time(container_memory_working_set_bytes[7d]) with 1.3x headroom. Eliminates ~37Gi overcommit gap. Categories: - Safe equalization (50 containers): set req=lim where max7d well within target - Limit increases (8 containers): raise limits for services spiking above current - No Prometheus data (12 containers): conservatively set lim=req - Exception: nextcloud keeps req=256Mi/lim=8Gi due to Apache memory spikes Also increased dbaas namespace quota from 12Gi to 16Gi to accommodate mysql 4Gi limits across 3 replicas.
152 lines
3 KiB
HCL
Executable file
152 lines
3 KiB
HCL
Executable file
variable "tls_secret_name" {}
|
|
variable "name" {}
|
|
variable "tag" {
|
|
default = "latest"
|
|
}
|
|
variable "tier" { type = string }
|
|
variable "protected" {
|
|
type = bool
|
|
default = false
|
|
}
|
|
variable "listenbrainz_token" {
|
|
type = string
|
|
default = null
|
|
sensitive = true
|
|
}
|
|
variable "genius_token" {
|
|
type = string
|
|
default = null
|
|
sensitive = true
|
|
}
|
|
variable "dab_visitor_id" {
|
|
type = string
|
|
default = null
|
|
}
|
|
variable "dab_session" {
|
|
type = string
|
|
default = null
|
|
}
|
|
variable "gemini_api_key" {
|
|
type = string
|
|
default = null
|
|
sensitive = true
|
|
}
|
|
variable "memory_limit" {
|
|
type = string
|
|
default = "128Mi"
|
|
}
|
|
variable "cpu_request" {
|
|
type = string
|
|
default = "15m"
|
|
}
|
|
variable "memory_request" {
|
|
type = string
|
|
default = "128Mi"
|
|
}
|
|
variable "extra_annotations" {
|
|
type = map(string)
|
|
default = {}
|
|
}
|
|
|
|
|
|
resource "kubernetes_deployment" "freedify" {
|
|
metadata {
|
|
name = "music-${var.name}"
|
|
namespace = "freedify"
|
|
labels = {
|
|
app = "music-${var.name}"
|
|
tier = var.tier
|
|
}
|
|
}
|
|
spec {
|
|
replicas = 1
|
|
strategy {
|
|
type = "RollingUpdate"
|
|
}
|
|
selector {
|
|
match_labels = {
|
|
app = "music-${var.name}"
|
|
}
|
|
}
|
|
template {
|
|
metadata {
|
|
annotations = {
|
|
"diun.enable" = "true"
|
|
"diun.include_tags" = "^${var.tag}$"
|
|
}
|
|
labels = {
|
|
app = "music-${var.name}"
|
|
}
|
|
}
|
|
spec {
|
|
container {
|
|
image = "viktorbarzin/freedify:${var.tag}"
|
|
name = "freedify"
|
|
|
|
port {
|
|
container_port = 8000
|
|
}
|
|
env {
|
|
name = "LISTENBRAINZ_TOKEN"
|
|
value = var.listenbrainz_token
|
|
}
|
|
env {
|
|
name = "GENIUS_ACCESS_TOKEN"
|
|
value = var.genius_token
|
|
}
|
|
env {
|
|
name = "DAB_SESSION"
|
|
value = var.dab_session
|
|
}
|
|
env {
|
|
name = "DAB_VISITOR_ID"
|
|
value = var.dab_visitor_id
|
|
}
|
|
env {
|
|
name = "GEMINI_API_KEY"
|
|
value = var.gemini_api_key
|
|
}
|
|
resources {
|
|
limits = {
|
|
memory = var.memory_limit
|
|
}
|
|
requests = {
|
|
cpu = var.cpu_request
|
|
memory = var.memory_request
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
resource "kubernetes_service" "freedify" {
|
|
metadata {
|
|
name = "music-${var.name}"
|
|
namespace = "freedify"
|
|
labels = {
|
|
app = "music-${var.name}"
|
|
}
|
|
}
|
|
|
|
spec {
|
|
selector = {
|
|
app = "music-${var.name}"
|
|
}
|
|
port {
|
|
name = "http"
|
|
port = 80
|
|
target_port = 8000
|
|
}
|
|
}
|
|
}
|
|
|
|
module "ingress" {
|
|
source = "../../../modules/kubernetes/ingress_factory"
|
|
namespace = "freedify"
|
|
name = "music-${var.name}"
|
|
tls_secret_name = var.tls_secret_name
|
|
protected = var.protected
|
|
extra_annotations = var.extra_annotations
|
|
}
|