k8s-and-chill/rendered/envs/production/ocis/deployment-eventhistory.yaml
Felix Wolf 9f8714d767 fix(ocis): Add memory requests to prevent node overcommit
Sets default resource requests (64Mi memory, 10m CPU) for all oCIS
services, with 96Mi for heavier pods (proxy, nats, thumbnails). Without
requests, all pods were BestEffort and piled onto node 1.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-06 12:54:43 +02:00

99 lines
2.8 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
labels:
app.kubernetes.io/instance: ocis
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ocis
app.kubernetes.io/version: 7.1.4
helm.sh/chart: ocis-0.7.0
name: eventhistory
namespace: ocis
spec:
replicas: 1
selector:
matchLabels:
app: eventhistory
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
app: eventhistory
app.kubernetes.io/instance: ocis
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ocis
app.kubernetes.io/version: 7.1.4
helm.sh/chart: ocis-0.7.0
spec:
containers:
- args:
- eventhistory
- server
command:
- ocis
env:
- name: MICRO_REGISTRY
value: nats-js-kv
- name: MICRO_REGISTRY_ADDRESS
value: nats:9233
- name: OCIS_EVENTS_ENDPOINT
value: nats:9233
- name: OCIS_PERSISTENT_STORE
value: nats-js-kv
- name: OCIS_PERSISTENT_STORE_NODES
value: nats:9233
- name: EVENTHISTORY_LOG_COLOR
value: "false"
- name: EVENTHISTORY_LOG_LEVEL
value: info
- name: EVENTHISTORY_LOG_PRETTY
value: "false"
- name: EVENTHISTORY_DEBUG_PPROF
value: "false"
- name: EVENTHISTORY_GRPC_ADDR
value: 0.0.0.0:8080
- name: EVENTHISTORY_DEBUG_ADDR
value: 0.0.0.0:9270
image: owncloud/ocis:7.1.4
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: metrics-debug
initialDelaySeconds: 60
periodSeconds: 20
timeoutSeconds: 10
name: eventhistory
ports:
- containerPort: 8080
name: grpc
- containerPort: 9270
name: metrics-debug
resources:
requests:
cpu: 10m
memory: 64Mi
securityContext:
readOnlyRootFilesystem: true
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
volumeMounts:
- mountPath: /etc/ocis/messaging-system-ca
name: messaging-system-ca
readOnly: true
nodeSelector: {}
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
volumes:
- emptyDir: {}
name: messaging-system-ca