44713e4ca0
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018BAUeCFpDkRD6tU5wGsc1C
60 lines
1.5 KiB
YAML
60 lines
1.5 KiB
YAML
# =============================================================================
|
|
# Garde-fous de consommation
|
|
# =============================================================================
|
|
# Le noeud applicatif est un CPX41 (8 vCPU / 16 Go) partage entre l'application,
|
|
# l'ingress et la supervision. Sans quota, une fuite memoire du backend fait
|
|
# tomber Traefik et Grafana avec lui : plus d'application ET plus de moyen de
|
|
# comprendre pourquoi.
|
|
|
|
---
|
|
apiVersion: v1
|
|
kind: ResourceQuota
|
|
metadata:
|
|
name: xpeditis-prod-quota
|
|
namespace: xpeditis-prod
|
|
spec:
|
|
hard:
|
|
requests.cpu: "3"
|
|
requests.memory: 5Gi
|
|
limits.cpu: "7"
|
|
limits.memory: 9Gi
|
|
pods: "20"
|
|
persistentvolumeclaims: "4"
|
|
services.loadbalancers: "0" # aucun LB supplementaire facture par erreur
|
|
---
|
|
apiVersion: v1
|
|
kind: LimitRange
|
|
metadata:
|
|
name: xpeditis-prod-defaults
|
|
namespace: xpeditis-prod
|
|
spec:
|
|
limits:
|
|
- type: Container
|
|
# Un conteneur deploye sans requests/limits (debug, job ponctuel) herite
|
|
# de valeurs raisonnables au lieu de pouvoir tout consommer.
|
|
default:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
defaultRequest:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
max:
|
|
cpu: "4"
|
|
memory: 4Gi
|
|
min:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
---
|
|
apiVersion: v1
|
|
kind: ResourceQuota
|
|
metadata:
|
|
name: monitoring-quota
|
|
namespace: monitoring
|
|
spec:
|
|
hard:
|
|
requests.cpu: "1"
|
|
requests.memory: 1536Mi
|
|
limits.cpu: "3"
|
|
limits.memory: 3Gi
|
|
pods: "10"
|