From f0803654c12e911d0b1ee1b5d78d5835f17dd051 Mon Sep 17 00:00:00 2001
From: Rob Watson <rob@netflux.io>
Date: Sun, 10 Sep 2023 20:44:15 +0200
Subject: [PATCH] chore: fix missing resource limits

---
 deploy/base/deploy-drone-runner.yaml |  7 +++++++
 deploy/base/deploy-invidious.yaml    | 22 ++++++++++++++++++----
 deploy/base/statefulset-gitea.yaml   | 21 +++++++++++++++++++--
 deploy/base/statefulset-synapse.yaml | 15 +++++++--------
 4 files changed, 51 insertions(+), 14 deletions(-)

diff --git a/deploy/base/deploy-drone-runner.yaml b/deploy/base/deploy-drone-runner.yaml
index eddcf5e..4bf8338 100644
--- a/deploy/base/deploy-drone-runner.yaml
+++ b/deploy/base/deploy-drone-runner.yaml
@@ -50,3 +50,10 @@ spec:
               key: logs-debug
         - name: DRONE_RESOURCE_REQUEST_CPU
           value: "500"
+        resources:
+          requests:
+            memory: 256Mi
+            cpu: 500m
+          limits:
+            memory: 1024Mi
+            cpu: 1500m
diff --git a/deploy/base/deploy-invidious.yaml b/deploy/base/deploy-invidious.yaml
index 4dc0bb2..52b3f5b 100644
--- a/deploy/base/deploy-invidious.yaml
+++ b/deploy/base/deploy-invidious.yaml
@@ -30,6 +30,13 @@ spec:
         - mountPath: /scripts
           name: scripts
         command: ["/bin/sh", "/scripts/init.sh"]
+        resources:
+          requests:
+            memory: 64Mi
+            cpu: 100m
+          limits:
+            memory: 128Mi
+            cpu: 500m
       - image: jbergknoff/postgresql-client@sha256:45e175ebb700cfd46e23a610477c3576550055ef40c394e663623946a5eced39
         imagePullPolicy: IfNotPresent
         name: init-invidious-db
@@ -69,6 +76,13 @@ spec:
               name: invidious-credentials
               key: database-password
               optional: false
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 256Mi
+            cpu: 1000m
         workingDir: /data/repo
         command: ["sh", "docker/init-invidious-db.sh"]
       containers:
@@ -100,11 +114,11 @@ spec:
           name: config
         resources:
           requests:
-            memory: "128Mi"
-            cpu: "100m"
+            memory: 128Mi
+            cpu: 100m
           limits:
-            memory: "256Mi"
-            cpu: "500m"
+            memory: 256Mi
+            cpu: 1000m
         lifecycle:
           preStop:
             exec:
diff --git a/deploy/base/statefulset-gitea.yaml b/deploy/base/statefulset-gitea.yaml
index b3b8e5f..86c85b5 100644
--- a/deploy/base/statefulset-gitea.yaml
+++ b/deploy/base/statefulset-gitea.yaml
@@ -44,6 +44,13 @@ spec:
           value: /tmp/gitea
         - name: TMPDIR
           value: /tmp/gitea
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 256Mi
+            cpu: 1500m
         volumeMounts:
         - mountPath: /data
           name: data
@@ -80,6 +87,13 @@ spec:
             secretKeyRef:
               name: gitea-config
               key: admin-password
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 256Mi
+            cpu: 1500m
         volumeMounts:
         - mountPath: /data
           name: data
@@ -127,8 +141,11 @@ spec:
           name: data
         resources:
           requests:
-            memory: "128Mi"
-            cpu: "100m"
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 256Mi
+            cpu: 1500m
         livenessProbe:
           tcpSocket:
             port: http
diff --git a/deploy/base/statefulset-synapse.yaml b/deploy/base/statefulset-synapse.yaml
index 5c11874..69d7823 100644
--- a/deploy/base/statefulset-synapse.yaml
+++ b/deploy/base/statefulset-synapse.yaml
@@ -54,14 +54,13 @@ spec:
         - mountPath: /config/log.config
           subPath: log.config
           name: config
-        # TODO: validate resource limits
-        # resources:
-        #   requests:
-        #     memory: "128Mi"
-        #     cpu: "500m"
-        #   limits:
-        #     memory: "512Mi"
-        #     cpu: "1000m"
+        resources:
+          requests:
+            memory: 256Mi
+            cpu: 250m
+          limits:
+            memory: 512Mi
+            cpu: 2000m
         livenessProbe:
           httpGet:
             path: /health