feat(t8s-cluster/management-cluster): set a memory limit for the kube…

…-apiserver, so things like kyverno won't take out the whole node (#1025)
teutonet · Jul 5, 2024 · 85dee99 · 85dee99
1 parent 20f57c1
commit 85dee99
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/...nt-cluster/clusterClass/kubeadmControlPlaneTemplate/_kubeadmControlPlaneTemplateSpec.yaml b/...nt-cluster/clusterClass/kubeadmControlPlaneTemplate/_kubeadmControlPlaneTemplateSpec.yaml
@@ -60,6 +60,8 @@ kubeadmConfigSpec:
     - content: |- {{- .Values.global.injectedCertificateAuthorities | nindent 8 }}
       path: /usr/local/share/ca-certificates/injected-ca-certs.crt
     {{- end }}
+    {{- $apiserverPatch := dict "spec" (dict "containers" (list (dict "name" "kube-apiserver" "resources" (dict "requests" (dict "memory" "2Gi") "limits" (dict "memory" "4Gi"))))) }}
+    {{- list (include "t8s-cluster.patches.patchFile" (dict "values" $apiserverPatch "target" "kube-apiserver" "component" "memory") | fromYaml) | toYaml | nindent 4 }}
   initConfiguration:
     nodeRegistration:
       kubeletExtraArgs: {{- include "t8s-cluster.clusterClass.kubeletExtraArgs" (dict) | nindent 8 }}