diff --git a/manifests/collabora.yaml b/manifests/collabora.yaml index 2e54b1d..f86a9fc 100644 --- a/manifests/collabora.yaml +++ b/manifests/collabora.yaml @@ -111,7 +111,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk:24.04.7.2.1@sha256:5b00478f2c6c7372b2a67e68783d9b1a91265679bbd4afdc1416e50720d50ce6 imagePullPolicy: IfNotPresent ports: @@ -161,9 +161,6 @@ spec: name: collabora key: password resources: - limits: - cpu: 99 - memory: 4Gi requests: cpu: 0.5 memory: 512Mi diff --git a/manifests/cryptpad.yaml b/manifests/cryptpad.yaml index c75dad6..cc66a51 100644 --- a/manifests/cryptpad.yaml +++ b/manifests/cryptpad.yaml @@ -23,7 +23,7 @@ data: config.js: | /* globals module */ - module.exports = { + module.exports = { httpUnsafeOrigin: 'https://pad.opendesk.apps.digilab.network', httpSafeOrigin: 'https://pad.opendesk.apps.digilab.network', adminKeys: [], @@ -127,7 +127,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/xwiki/images-mirror/cryptpad:opendesk-20231222@sha256:f4d20d5c38c87b11ed1a1b46ef6a3633d32c6758ebdff8556458f040318fa5e2 imagePullPolicy: IfNotPresent command: [/bin/sh, -c] @@ -146,9 +146,6 @@ spec: echo "$VALUE" >> "$FILE" fi resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 512Mi @@ -167,7 +164,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/xwiki/images-mirror/cryptpad:opendesk-20231222@sha256:f4d20d5c38c87b11ed1a1b46ef6a3633d32c6758ebdff8556458f040318fa5e2 imagePullPolicy: IfNotPresent env: @@ -211,9 +208,6 @@ spec: failureThreshold: 5 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 512Mi diff --git a/manifests/element.yaml b/manifests/element.yaml index ae17fb0..d6277cb 100644 --- a/manifests/element.yaml +++ b/manifests/element.yaml @@ -340,9 +340,6 @@ spec: failureThreshold: 3 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 32Mi @@ -639,9 +636,6 @@ spec: failureThreshold: 3 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 32Mi @@ -1013,9 +1007,6 @@ spec: failureThreshold: 3 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 64Mi @@ -1423,9 +1414,6 @@ spec: seccompProfile: type: RuntimeDefault resources: - limits: - cpu: 99 - memory: 4Gi requests: cpu: 1 memory: 256Mi @@ -1498,9 +1486,6 @@ spec: failureThreshold: 8 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 4Gi requests: cpu: 1 memory: 256Mi @@ -1685,9 +1670,6 @@ spec: registry-1.docker.io/alpine/k8s:1.30.0@sha256:d7a11b7032550e992667fd7725b039dcd639270fbceec368d7e66e3d9e41ee15 imagePullPolicy: IfNotPresent resources: - limits: - cpu: 1 - memory: 1Gi requests: cpu: 500m memory: 256Mi @@ -1742,9 +1724,6 @@ spec: registry-1.docker.io/alpine/k8s:1.30.0@sha256:d7a11b7032550e992667fd7725b039dcd639270fbceec368d7e66e3d9e41ee15 imagePullPolicy: IfNotPresent resources: - limits: - cpu: 1 - memory: 1Gi requests: cpu: 500m memory: 256Mi @@ -1960,9 +1939,6 @@ spec: containerPort: 3000 protocol: TCP resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 128Mi @@ -2097,9 +2073,6 @@ spec: containerPort: 8080 protocol: TCP resources: - limits: - cpu: 99 - memory: 128Mi requests: cpu: 0.1 memory: 48Mi @@ -2278,9 +2251,6 @@ spec: containerPort: 8080 protocol: TCP resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 48Mi @@ -2461,9 +2431,6 @@ spec: containerPort: 8080 protocol: TCP resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 48Mi @@ -2604,9 +2571,6 @@ spec: registry-1.docker.io/alpine/k8s:1.30.0@sha256:d7a11b7032550e992667fd7725b039dcd639270fbceec368d7e66e3d9e41ee15 imagePullPolicy: IfNotPresent resources: - limits: - cpu: 1 - memory: 1Gi requests: cpu: 500m memory: 256Mi @@ -2661,9 +2625,6 @@ spec: registry-1.docker.io/alpine/k8s:1.30.0@sha256:d7a11b7032550e992667fd7725b039dcd639270fbceec368d7e66e3d9e41ee15 imagePullPolicy: IfNotPresent resources: - limits: - cpu: 1 - memory: 1Gi requests: cpu: 500m memory: 256Mi @@ -3110,9 +3071,6 @@ spec: containerPort: 3000 protocol: TCP resources: - limits: - cpu: 99 - memory: 512Mi requests: cpu: 0.1 memory: 128Mi diff --git a/manifests/jitsi.yaml b/manifests/jitsi.yaml index e36b8c7..de204d9 100644 --- a/manifests/jitsi.yaml +++ b/manifests/jitsi.yaml @@ -1308,9 +1308,6 @@ spec: name: jitsi-jibri resources: - limits: - cpu: 99 - memory: 3Gi requests: cpu: 0.1 memory: 384Mi @@ -1394,9 +1391,6 @@ spec: tcpSocket: port: 8888 resources: - limits: - cpu: 99 - memory: 3584Mi requests: cpu: 0.1 memory: 256Mi @@ -1476,9 +1470,6 @@ spec: path: /about/health port: 8080 resources: - limits: - cpu: 99 - memory: 3584Mi requests: cpu: 0.1 memory: 384Mi @@ -1550,9 +1541,6 @@ spec: path: / port: 80 resources: - limits: - cpu: 99 - memory: 512Mi requests: cpu: 0.1 memory: 32Mi @@ -1715,9 +1703,6 @@ spec: containerPort: 9000 protocol: TCP resources: - limits: - cpu: 99 - memory: 128Mi requests: cpu: 10m memory: 48Mi @@ -1860,9 +1845,6 @@ spec: path: /http-bind port: bosh-insecure resources: - limits: - cpu: 99 - memory: 512Mi requests: cpu: 0.1 memory: 32Mi @@ -2006,9 +1988,6 @@ spec: - name: init mountPath: /init resources: - limits: - cpu: 100m - memory: 128Mi requests: cpu: 10m memory: 16Mi diff --git a/manifests/migrations-post.yaml b/manifests/migrations-post.yaml index 6daae50..c610950 100644 --- a/manifests/migrations-post.yaml +++ b/manifests/migrations-post.yaml @@ -163,8 +163,6 @@ spec: mountPath: /app/etc/ readOnly: true resources: - limits: - memory: 256Mi requests: cpu: 100m memory: 128Mi diff --git a/manifests/migrations-pre.yaml b/manifests/migrations-pre.yaml index 1894af7..3ff3a05 100644 --- a/manifests/migrations-pre.yaml +++ b/manifests/migrations-pre.yaml @@ -163,8 +163,6 @@ spec: mountPath: /app/etc/ readOnly: true resources: - limits: - memory: 256Mi requests: cpu: 100m memory: 128Mi diff --git a/manifests/nextcloud.yaml b/manifests/nextcloud.yaml index 705dcc7..47bc6ee 100644 --- a/manifests/nextcloud.yaml +++ b/manifests/nextcloud.yaml @@ -276,9 +276,6 @@ spec: - name: FS_ENV_CREATE_OCDATA value: 'true' resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 512Mi @@ -530,9 +527,6 @@ spec: containerPort: 8081 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 512Mi @@ -659,9 +653,6 @@ spec: containerPort: 9205 protocol: TCP resources: - limits: - cpu: 99 - memory: 128Mi requests: cpu: 0.1 memory: 32Mi @@ -751,9 +742,6 @@ spec: - name: FS_ENV_CREATE_OCDATA value: 'true' resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 512Mi diff --git a/manifests/nubus.yaml b/manifests/nubus.yaml index c3b7841..5b88d05 100644 --- a/manifests/nubus.yaml +++ b/manifests/nubus.yaml @@ -3992,9 +3992,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4107,9 +4104,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4233,9 +4227,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4332,9 +4323,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4399,9 +4387,6 @@ spec: key: umcKeycloakExtensionsSmtpPassword ports: resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 48Mi @@ -4477,9 +4462,6 @@ spec: containerPort: 8181 protocol: TCP resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 48Mi @@ -4568,9 +4550,6 @@ spec: - name: etc-univention-volume mountPath: /target/etc/univention resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -4599,9 +4578,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4624,9 +4600,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4649,9 +4622,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4674,9 +4644,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -4714,9 +4681,6 @@ spec: - name: proxy-scripts-volume mountPath: /scripts-proxy resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -4809,9 +4773,6 @@ spec: containerPort: 636 protocol: TCP resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -4983,9 +4944,6 @@ spec: containerPort: 8080 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -5080,9 +5038,6 @@ spec: containerPort: 80 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -5246,9 +5201,6 @@ spec: containerPort: 80 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -5329,9 +5281,6 @@ spec: - name: wait-for-nats mountPath: /scripts resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5396,9 +5345,6 @@ spec: successThreshold: 1 timeoutSeconds: 5 resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5463,9 +5409,6 @@ spec: - name: wait-for-nats mountPath: /scripts resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5521,9 +5464,6 @@ spec: containerPort: 7777 protocol: TCP resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5586,9 +5526,6 @@ spec: - name: wait-for-udm mountPath: /scripts resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5602,9 +5539,6 @@ spec: command: [bash, -c, 'set -euo pipefail; until curl -s http://${PROVISIONING_API_HOST}:${PROVISIONING_API_PORT}/v1/subscriptions > /dev/null || [ $? -ne 0 ]; do echo Waiting for api; sleep 2; done;'] resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 64Mi @@ -5669,9 +5603,6 @@ spec: successThreshold: 1 timeoutSeconds: 5 resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5824,9 +5755,6 @@ spec: - name: wait-for-nats mountPath: /scripts resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -5895,9 +5823,6 @@ spec: successThreshold: 1 timeoutSeconds: 5 resources: - limits: - cpu: 1 - memory: 1Gi requests: cpu: 0.1 memory: 64Mi @@ -6013,9 +5938,6 @@ spec: readinessProbe: startupProbe: resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6092,9 +6014,6 @@ spec: - name: usr-lib-python3-volume mountPath: /target/usr/lib/python3 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6124,9 +6043,6 @@ spec: - name: var-cache-univention-config-volume mountPath: /var/cache/univention-config resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6159,9 +6075,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6185,9 +6098,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6211,9 +6121,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6237,9 +6144,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6302,9 +6206,6 @@ spec: containerPort: 9979 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6423,9 +6324,6 @@ spec: seccompProfile: type: RuntimeDefault resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6460,9 +6358,6 @@ spec: seccompProfile: type: RuntimeDefault resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6644,9 +6539,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -6757,9 +6649,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -6892,9 +6781,6 @@ spec: failureThreshold: 10 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 512Mi @@ -6964,9 +6850,6 @@ spec: containerPort: 6669 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7096,9 +6979,6 @@ spec: - name: etc-univention-volume mountPath: /target/etc/univention resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7127,9 +7007,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7152,9 +7029,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7177,9 +7051,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7202,9 +7073,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7239,9 +7107,6 @@ spec: mountPath: /etc/univention/base-defaults.conf subPath: base-defaults.conf resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7313,9 +7178,6 @@ spec: containerPort: 636 protocol: TCP resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7501,9 +7363,6 @@ spec: - name: etc-univention-volume mountPath: /target/etc/univention resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7532,9 +7391,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7557,9 +7413,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7582,9 +7435,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7607,9 +7457,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7644,9 +7491,6 @@ spec: mountPath: /etc/univention/base-defaults.conf subPath: base-defaults.conf resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7689,9 +7533,6 @@ spec: - name: secondary-scripts-volume mountPath: /scripts-secondary resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7759,9 +7600,6 @@ spec: containerPort: 636 protocol: TCP resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -7901,9 +7739,6 @@ spec: subPath: tls.key readOnly: true resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7937,9 +7772,6 @@ spec: subPath: tls.key readOnly: true resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7966,9 +7798,6 @@ spec: - name: scripts mountPath: /scripts resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -7990,9 +7819,6 @@ spec: - configMapRef: name: ums-portal-consumer-common resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -8045,9 +7871,6 @@ spec: subPath: tls.key readOnly: true resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -8260,9 +8083,6 @@ spec: containerPort: 8222 protocol: TCP resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 128Mi @@ -8306,9 +8126,6 @@ spec: - -config - /etc/nats-config/nats.conf resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -8408,9 +8225,6 @@ spec: - -c - trap true INT TERM; sleep infinity & wait resources: - limits: - cpu: 288 - memory: 1Gi requests: cpu: 10m memory: 16Mi @@ -8537,9 +8351,6 @@ spec: - name: data mountPath: /var/log/univention resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -8624,9 +8435,6 @@ spec: seccompProfile: type: RuntimeDefault resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -8745,9 +8553,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -8771,9 +8576,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -8797,9 +8599,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -8823,9 +8622,6 @@ spec: - name: plugin-targets mountPath: /target resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -8993,9 +8789,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -9061,9 +8854,6 @@ spec: - mountPath: /var/secrets/ssl name: certificates resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 256Mi @@ -9186,9 +8976,6 @@ spec: name: ums-provisioning-register-consumers command: [/bin/bash, -c, '/scripts/wait-for-api.sh ${PROVISIONING_API_BASE_URL}'] resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 64Mi @@ -9209,9 +8996,6 @@ spec: - name: wait-for-data-loader mountPath: /scripts resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 64Mi @@ -9252,9 +9036,6 @@ spec: echo ------------------------------------ done resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 64Mi @@ -9408,9 +9189,6 @@ spec: mountPath: /run/secrets/univention.de/data-loader/udm_secret subPath: machine.secret resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -9454,9 +9232,6 @@ spec: mountPath: /template-context readOnly: true resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -10194,9 +9969,6 @@ spec: - mountPath: /tmp name: temp-dir resources: - limits: - cpu: 99 - memory: 512Mi requests: cpu: 0.1 memory: 256Mi @@ -10465,9 +10237,6 @@ spec: containerPort: 8008 protocol: TCP resources: - limits: - cpu: 99 - memory: 128Mi requests: cpu: 0.1 memory: 64Mi @@ -11277,9 +11046,6 @@ spec: - mountPath: /tmp name: temp-dir resources: - limits: - cpu: 99 - memory: 512Mi requests: cpu: 0.1 memory: 256Mi diff --git a/manifests/open-xchange.yaml b/manifests/open-xchange.yaml index 381760e..47b6297 100644 --- a/manifests/open-xchange.yaml +++ b/manifests/open-xchange.yaml @@ -896,9 +896,6 @@ spec: failureThreshold: 10 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 32Mi @@ -2390,9 +2387,6 @@ spec: initialDelaySeconds: 30 periodSeconds: 10 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.25 memory: 1.25Gi @@ -2528,9 +2522,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.01 memory: 32Mi @@ -2647,9 +2638,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.5 memory: 1.25Gi @@ -2752,9 +2740,6 @@ spec: path: /health port: http resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.05 memory: 32Mi @@ -2881,9 +2866,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 768Mi requests: cpu: 0.5 memory: 192Mi @@ -3006,9 +2988,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 768Mi requests: cpu: 0.5 memory: 192Mi @@ -3080,9 +3059,6 @@ spec: containerPort: 8080 protocol: TCP resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.01 memory: 32Mi @@ -3165,9 +3141,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.02 memory: 32Mi @@ -3248,9 +3221,6 @@ spec: path: / port: http resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.01 memory: 32Mi @@ -3337,9 +3307,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.01 memory: 32Mi @@ -3426,9 +3393,6 @@ spec: periodSeconds: 5 timeoutSeconds: 5 resources: - limits: - cpu: 99 - memory: 96Mi requests: cpu: 0.01 memory: 32Mi @@ -3729,9 +3693,6 @@ spec: - secretRef: name: open-xchange-core-mw-secret-envvars resources: - limits: - cpu: 99 - memory: 8Gi requests: cpu: 1 memory: 1.25Gi @@ -4881,9 +4842,6 @@ spec: registry-1.docker.io/alpine/k8s:1.26.8@sha256:acde24d2a8ebaafda76f464591a5ddc7d0acd08bb38b12560961c1b1c4fc85ec imagePullPolicy: IfNotPresent resources: - limits: - cpu: 1 - memory: 1Gi requests: cpu: 500m memory: 256Mi @@ -5084,9 +5042,6 @@ spec: - name: ox-connector-appcenter mountPath: /var/lib/univention-appcenter/apps/ox-connector resources: - limits: - cpu: 99 - memory: 512Mi requests: cpu: 0.1 memory: 64Mi diff --git a/manifests/openproject-bootstrap.yaml b/manifests/openproject-bootstrap.yaml index b119568..21ac68e 100644 --- a/manifests/openproject-bootstrap.yaml +++ b/manifests/openproject-bootstrap.yaml @@ -55,13 +55,11 @@ spec: seccompProfile: type: RuntimeDefault resources: - limits: - memory: 1Gi requests: cpu: 500m memory: 256Mi - image: + image: registry.opencode.de/bmi/opendesk/components/platform-development/images/opendesk-openproject-bootstrap:1.1.4@sha256:2fd97a316114428849aaeef87fb8755274e675830088a93afcafac91bb048d1d imagePullPolicy: IfNotPresent command: diff --git a/manifests/openproject.yaml b/manifests/openproject.yaml index 16b4427..e8421df 100644 --- a/manifests/openproject.yaml +++ b/manifests/openproject.yaml @@ -114,7 +114,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/openproject/images-mirror/open_desk:14.6.1@sha256:3c9828b1ab4dc91f2b3887f9bfddda8ba79b92a2f335dd2db2295d14a98deab0 imagePullPolicy: IfNotPresent envFrom: @@ -135,9 +135,6 @@ spec: - bash - /app/docker/prod/wait-for-db resources: - limits: - cpu: 99 - memory: 768Mi requests: cpu: 0.1 memory: 256Mi @@ -156,7 +153,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/openproject/images-mirror/open_desk:14.6.1@sha256:3c9828b1ab4dc91f2b3887f9bfddda8ba79b92a2f335dd2db2295d14a98deab0 imagePullPolicy: IfNotPresent envFrom: @@ -212,9 +209,6 @@ spec: failureThreshold: 30 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 768Mi @@ -300,7 +294,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/openproject/images-mirror/open_desk:14.6.1@sha256:3c9828b1ab4dc91f2b3887f9bfddda8ba79b92a2f335dd2db2295d14a98deab0 imagePullPolicy: IfNotPresent envFrom: @@ -321,9 +315,6 @@ spec: - bash - /app/docker/prod/wait-for-db resources: - limits: - cpu: 99 - memory: 768Mi requests: cpu: 0.1 memory: 256Mi @@ -342,7 +333,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/openproject/images-mirror/open_desk:14.6.1@sha256:3c9828b1ab4dc91f2b3887f9bfddda8ba79b92a2f335dd2db2295d14a98deab0 imagePullPolicy: IfNotPresent envFrom: @@ -370,9 +361,6 @@ spec: - mountPath: /app/tmp name: app-tmp resources: - limits: - cpu: 99 - memory: 4Gi requests: cpu: 0.25 memory: 512Mi @@ -437,7 +425,7 @@ spec: storage: 5Gi initContainers: - name: check-db-ready - image: + image: registry-1.docker.io/library/postgres:16.3-alpine3.20@sha256:de3d7b6e4b5b3fe899e997579d6dfe95a99539d154abe03f0b6839133ed05065 imagePullPolicy: IfNotPresent command: [sh, -c, until pg_isready -h $DATABASE_HOST -p $DATABASE_PORT -U @@ -458,9 +446,6 @@ spec: - name: OPENPROJECT_DB_PASSWORD value: 5baeeb8674fca48695591fdbdb0591cac48afc94 resources: - limits: - cpu: 99 - memory: 768Mi requests: cpu: 0.1 memory: 256Mi @@ -479,7 +464,7 @@ spec: type: RuntimeDefault containers: - name: seeder - image: + image: registry.opencode.de/bmi/opendesk/components/supplier/openproject/images-mirror/open_desk:14.6.1@sha256:3c9828b1ab4dc91f2b3887f9bfddda8ba79b92a2f335dd2db2295d14a98deab0 imagePullPolicy: IfNotPresent args: @@ -500,9 +485,6 @@ spec: - name: OPENPROJECT_DB_PASSWORD value: 5baeeb8674fca48695591fdbdb0591cac48afc94 resources: - limits: - cpu: 99 - memory: 768Mi requests: cpu: 0.1 memory: 256Mi diff --git a/manifests/services.yaml b/manifests/services.yaml index be575ac..a309698 100644 --- a/manifests/services.yaml +++ b/manifests/services.yaml @@ -362,7 +362,7 @@ spec: terminationGracePeriodSeconds: 30 containers: - name: redis - image: + image: registry-1.docker.io/bitnami/redis:7.2.3-debian-11-r2@sha256:9ac3bbf7740969d32689e360ddcfa5f672538c47f6f6cf296173c3078de0edf2 imagePullPolicy: IfNotPresent securityContext: @@ -426,9 +426,6 @@ spec: - -c - /health/ping_readiness_local.sh 1 resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 32Mi @@ -563,7 +560,7 @@ spec: serviceAccountName: memcached containers: - name: memcached - image: + image: registry-1.docker.io/bitnami/memcached:1.6.21-debian-11-r107@sha256:247ec29efd6030960047a623aef025021154662edf6b6d6e88c97936f164d99d imagePullPolicy: IfNotPresent securityContext: @@ -604,9 +601,6 @@ spec: tcpSocket: port: memcache resources: - limits: - cpu: 99 - memory: 256Mi requests: cpu: 0.1 memory: 32Mi @@ -718,7 +712,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry-1.docker.io/library/postgres:15.4-alpine3.18@sha256:f36c528a2dc8747ea40b4cb8578da69fa75c5063fd6a71dcea3e3b2a6404ff7b imagePullPolicy: IfNotPresent env: @@ -768,9 +762,6 @@ spec: - -c - exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432 resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -841,7 +832,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry-1.docker.io/library/postgres:15.4-alpine3.18@sha256:f36c528a2dc8747ea40b4cb8578da69fa75c5063fd6a71dcea3e3b2a6404ff7b imagePullPolicy: IfNotPresent command: @@ -862,9 +853,6 @@ spec: - name: PGPASSWORD value: a826fedc7de54b7b51fef95697c7161a6cbb223a resources: - limits: - cpu: 99 - memory: 1Gi requests: cpu: 0.1 memory: 256Mi @@ -976,7 +964,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry-1.docker.io/library/mariadb:10.5@sha256:aa1ccc18000c32d1f39ac0b055117b27bffd93e622ec961d682de40fe2a1a95f imagePullPolicy: IfNotPresent env: @@ -1020,9 +1008,6 @@ spec: - -ec - mariadb-admin status -uroot -p"${MARIADB_ROOT_PASSWORD}" resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 384Mi @@ -1093,7 +1078,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry-1.docker.io/library/mariadb:10.5@sha256:aa1ccc18000c32d1f39ac0b055117b27bffd93e622ec961d682de40fe2a1a95f imagePullPolicy: IfNotPresent command: @@ -1111,9 +1096,6 @@ spec: - name: MARIADB_ROOT_PASSWORD value: 6c3e5177d1196ce1c7e94a3ed70d4536916bc46b resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.1 memory: 384Mi @@ -1241,21 +1223,21 @@ data: smtp_host_lookup = native # Relayhost if any is configured - relayhost = + relayhost = - content_filter = + content_filter = smtp_sasl_auth_enable = yes smtp_sasl_password_maps = lmdb:/etc/postfix/sasl_passwd.map - smtp_sasl_security_options = + smtp_sasl_security_options = smtp_use_tls = yes - smtp_tls_CAfile = + smtp_tls_CAfile = smtp_tls_mandatory_protocols = !SSLv2, !SSLv3 smtp_tls_session_cache_database = lmdb:/var/lib/postfix/smtp_scache virtual_mailbox_domains = opendesk.apps.digilab.network virtual_transport = lmtps:dovecot:24 - transport_maps = + transport_maps = ############### # Restrictions @@ -1421,7 +1403,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/platform-development/images/postfix:2.0.0@sha256:5b2432dc09318db172a593bca860887ee9d713b9987db64f8b265f3e08a1d374 imagePullPolicy: IfNotPresent # for debugging use: @@ -1451,9 +1433,6 @@ spec: failureThreshold: 10 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 128Mi requests: cpu: 0.1 memory: 16Mi @@ -1795,7 +1774,7 @@ spec: serviceAccountName: clamav-simple initContainers: - name: chown - image: + image: registry-1.docker.io/clamav/clamav:1.1.1-10_base@sha256:aed8d5a3ef58352c862028fae44241215a50eae0b9acb7ba8892b1edc0a6598f securityContext: allowPrivilegeEscalation: false @@ -1812,9 +1791,6 @@ spec: - name: clamav-database mountPath: /var/lib/clamav/ resources: - limits: - cpu: 99 - memory: 4Gi requests: cpu: 0.1 memory: 1.5Gi @@ -1833,7 +1809,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry-1.docker.io/clamav/clamav:1.1.1-10_base@sha256:aed8d5a3ef58352c862028fae44241215a50eae0b9acb7ba8892b1edc0a6598f imagePullPolicy: IfNotPresent env: @@ -1867,9 +1843,7 @@ spec: failureThreshold: 10 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 4Gi + requests: cpu: 0.1 memory: 1.5Gi @@ -1904,7 +1878,7 @@ spec: seLinuxOptions: seccompProfile: type: RuntimeDefault - image: + image: registry.opencode.de/bmi/opendesk/components/platform-development/images/clamav-icap:0.5.10@sha256:891f267a6b2a304616854ad2f013dc5d23f6f6c84d535c8b46e76d124fe39b6a imagePullPolicy: IfNotPresent command: @@ -1938,9 +1912,6 @@ spec: failureThreshold: 10 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 4Gi requests: cpu: 0.1 memory: 1.5Gi @@ -2198,7 +2169,7 @@ spec: fsGroupChangePolicy: OnRootMismatch containers: - name: minio - image: + image: registry-1.docker.io/bitnami/minio:2023@sha256:bced4f2f9fc48b755ebb3e1b35e76195a978d4331bf2d0c6699dab412d3c0be7 imagePullPolicy: IfNotPresent securityContext: @@ -2274,9 +2245,6 @@ spec: successThreshold: 1 failureThreshold: 60 resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.25 memory: 256Mi @@ -2354,7 +2322,7 @@ spec: serviceAccountName: minio initContainers: - name: wait-for-available-minio - image: + image: registry-1.docker.io/bitnami/minio:2023@sha256:bced4f2f9fc48b755ebb3e1b35e76195a978d4331bf2d0c6699dab412d3c0be7 imagePullPolicy: IfNotPresent securityContext: @@ -2381,15 +2349,12 @@ spec: 9000; echo "Minio is available"; resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.25 memory: 256Mi containers: - name: minio - image: + image: registry-1.docker.io/bitnami/minio:2023@sha256:bced4f2f9fc48b755ebb3e1b35e76195a978d4331bf2d0c6699dab412d3c0be7 imagePullPolicy: IfNotPresent securityContext: @@ -2501,9 +2466,6 @@ spec: key: root-password envFrom: resources: - limits: - cpu: 99 - memory: 2Gi requests: cpu: 0.25 memory: 256Mi diff --git a/manifests/vault.yaml b/manifests/vault.yaml index 2838833..aff5b1a 100644 --- a/manifests/vault.yaml +++ b/manifests/vault.yaml @@ -75,10 +75,6 @@ spec: securityContext: allowPrivilegeEscalation: false resources: - limits: - cpu: 200m - memory: 512Mi - ephemeral-storage: 1Gi requests: cpu: 100m memory: 256Mi @@ -137,9 +133,6 @@ spec: name: vault-config - name: data emptyDir: {} - resources: - limits: - ephemeral-storage: "2Gi" volumeClaimTemplates: - metadata: name: data diff --git a/manifests/xwiki.yaml b/manifests/xwiki.yaml index 1d0171a..78f0ced 100644 --- a/manifests/xwiki.yaml +++ b/manifests/xwiki.yaml @@ -349,9 +349,6 @@ spec: seccompProfile: type: RuntimeDefault resources: - limits: - cpu: 99 - memory: 8Gi requests: cpu: 0.1 memory: 1.5Gi @@ -427,9 +424,7 @@ spec: failureThreshold: 10 successThreshold: 1 resources: - limits: - cpu: 99 - memory: 8Gi + requests: cpu: 0.1 memory: 1.5Gi