Skip to content

Commit 0f96d97

Browse files
authored
Align prod-p02 kyverno config with prd-rh01 one (#7666)
Kyverno was tuned on rh01 where is we have the highest load so align the configuration of p02 with rh01. The main reason is to address ongoing issues where background controller is getting OOMKilled but also to get all other fixes/tuning done on rh01. Signed-off-by: Hugo Ares <[email protected]>
1 parent a29299d commit 0f96d97

File tree

1 file changed

+14
-6
lines changed

1 file changed

+14
-6
lines changed

components/kyverno/production/stone-prod-p02/kyverno-helm-values.yaml

Lines changed: 14 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,13 +21,15 @@ admissionController:
2121
drop:
2222
- "ALL"
2323
container:
24+
extraArgs:
25+
leaderElectionRetryPeriod: 5s
2426
resources:
2527
requests:
26-
cpu: 4000m
27-
memory: 2Gi
28+
cpu: 6000m
29+
memory: 4Gi
2830
limits:
29-
cpu: 4000m
30-
memory: 2Gi
31+
cpu: 6000m
32+
memory: 4Gi
3133
securityContext:
3234
allowPrivilegeEscalation: false
3335
readOnlyRootFilesystem: true
@@ -43,13 +45,17 @@ admissionController:
4345
secure: false
4446
backgroundController:
4547
replicas: 3
48+
extraArgs:
49+
clientRateLimitBurst: 2000
50+
clientRateLimitQPS: 2000
51+
leaderElectionRetryPeriod: 5s
4652
resources:
4753
requests:
4854
cpu: 6000m
49-
memory: 2Gi
55+
memory: 4Gi
5056
limits:
5157
cpu: 6000m
52-
memory: 2Gi
58+
memory: 4Gi
5359
securityContext:
5460
allowPrivilegeEscalation: false
5561
readOnlyRootFilesystem: true
@@ -72,6 +78,8 @@ cleanupController:
7278
limits:
7379
cpu: 500m
7480
memory: 128Mi
81+
extraArgs:
82+
leaderElectionRetryPeriod: 5s
7583
securityContext:
7684
allowPrivilegeEscalation: false
7785
readOnlyRootFilesystem: true

0 commit comments

Comments
 (0)