k8s-and-chill/rendered/envs/production/ocis/deployment-webdav.yaml
Felix Wolf 9f8714d767 fix(ocis): Add memory requests to prevent node overcommit
Sets default resource requests (64Mi memory, 10m CPU) for all oCIS
services, with 96Mi for heavier pods (proxy, nats, thumbnails). Without
requests, all pods were BestEffort and piled onto node 1.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-06 12:54:43 +02:00

100 lines
2.8 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
labels:
app.kubernetes.io/instance: ocis
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ocis
app.kubernetes.io/version: 7.1.4
helm.sh/chart: ocis-0.7.0
name: webdav
namespace: ocis
spec:
replicas: 1
selector:
matchLabels:
app: webdav
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
app: webdav
app.kubernetes.io/instance: ocis
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ocis
app.kubernetes.io/version: 7.1.4
helm.sh/chart: ocis-0.7.0
spec:
containers:
- args:
- webdav
- server
command:
- ocis
env:
- name: MICRO_REGISTRY
value: nats-js-kv
- name: MICRO_REGISTRY_ADDRESS
value: nats:9233
- name: OCIS_CORS_ALLOW_ORIGINS
value: https://drive.tr1ceracop.de
- name: WEBDAV_LOG_COLOR
value: "false"
- name: WEBDAV_LOG_LEVEL
value: info
- name: WEBDAV_LOG_PRETTY
value: "false"
- name: WEBDAV_TRACING_ENABLED
value: "false"
- name: WEBDAV_TRACING_TYPE
value: jaeger
- name: WEBDAV_TRACING_ENDPOINT
value: null
- name: WEBDAV_TRACING_COLLECTOR
value: null
- name: WEBDAV_DEBUG_PPROF
value: "false"
- name: WEBDAV_HTTP_ADDR
value: 0.0.0.0:9115
- name: WEBDAV_DEBUG_ADDR
value: 0.0.0.0:9119
- name: OCIS_PUBLIC_URL
value: https://drive.tr1ceracop.de
image: owncloud/ocis:7.1.4
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: metrics-debug
initialDelaySeconds: 60
periodSeconds: 20
timeoutSeconds: 10
name: webdav
ports:
- containerPort: 9115
name: http
- containerPort: 9119
name: metrics-debug
resources:
requests:
cpu: 10m
memory: 64Mi
securityContext:
readOnlyRootFilesystem: true
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
volumeMounts: null
nodeSelector: {}
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
volumes: null