Reduces apps default resource usage.

This commit is contained in:
2026-06-19 21:38:56 +00:00
parent 63dcd1b82b
commit c223e2b5e0
55 changed files with 661 additions and 174 deletions

View File

@@ -73,16 +73,18 @@ spec:
containerPort: 8080
protocol: TCP
- name: web
containerPort: 8000
containerPort: 80
protocol: TCP
- name: websecure
containerPort: 8443
containerPort: 443
protocol: TCP
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
add:
- NET_BIND_SERVICE
readOnlyRootFilesystem: true
volumeMounts:
- name: data
@@ -100,8 +102,8 @@ spec:
- "--experimental.plugins.bouncer.version=v1.4.2"
- "--entryPoints.metrics.address=:9100/tcp"
- "--entryPoints.traefik.address=:8080/tcp"
- "--entryPoints.web.address=:8000/tcp"
- "--entryPoints.websecure.address=:8443/tcp"
- "--entryPoints.web.address=:80/tcp"
- "--entryPoints.websecure.address=:443/tcp"
- "--api.dashboard=true"
- "--ping=true"
- "--metrics.prometheus=true"
@@ -119,6 +121,9 @@ spec:
- "--accesslog.format=json"
- "--log.level=INFO"
- "--entryPoints.websecure.http.middlewares=crowdsec-security-chain@kubernetescrd"
- "--entryPoints.web.http.redirections.entryPoint.to=websecure"
- "--entryPoints.web.http.redirections.entryPoint.scheme=https"
- "--entryPoints.web.http.redirections.entryPoint.permanent=true"
env:
- name: POD_NAME