From da43d9b8f72eb90ecc5173740fd7cf4c5ca7150c Mon Sep 17 00:00:00 2001 From: zetaloop Date: Wed, 6 May 2026 03:24:31 +0800 Subject: [PATCH] fix(k01): set production-grade memory limits across all workloads --- deploy/k01/infra/envoy.yaml | 2 + deploy/k01/infra/kafka.yaml | 34 ++++++++++- deploy/k01/infra/mongo.yaml | 17 ++++++ deploy/k01/infra/postgres.yaml | 66 +++++++++++++++++++++ deploy/k01/infra/ratelimit.yaml | 2 + deploy/k01/infra/redis.yaml | 24 ++++++++ deploy/k01/services/authz-adapter.yaml | 2 + deploy/k01/services/chat.yaml | 2 + deploy/k01/services/community.yaml | 4 ++ deploy/k01/services/dispute.yaml | 4 ++ deploy/k01/services/email.yaml | 4 ++ deploy/k01/services/frontend.yaml | 2 + deploy/k01/services/game.yaml | 4 ++ deploy/k01/services/notification.yaml | 4 ++ deploy/k01/services/objectstory.yaml | 4 ++ deploy/k01/services/order.yaml | 4 ++ deploy/k01/services/player.yaml | 4 ++ deploy/k01/services/review.yaml | 4 ++ deploy/k01/services/search.yaml | 4 ++ deploy/k01/services/shop.yaml | 4 ++ deploy/k01/services/snowflake.yaml | 2 + deploy/k01/services/user-verifications.yaml | 2 + deploy/k01/services/user.yaml | 4 ++ deploy/k01/services/wallet.yaml | 4 ++ 24 files changed, 205 insertions(+), 2 deletions(-) diff --git a/deploy/k01/infra/envoy.yaml b/deploy/k01/infra/envoy.yaml index 4c5f597..1435703 100644 --- a/deploy/k01/infra/envoy.yaml +++ b/deploy/k01/infra/envoy.yaml @@ -1060,6 +1060,8 @@ spec: requests: cpu: 100m memory: 128Mi + limits: + memory: 512Mi volumes: - name: config configMap: diff --git a/deploy/k01/infra/kafka.yaml b/deploy/k01/infra/kafka.yaml index d8688ef..7f0ef16 100644 --- a/deploy/k01/infra/kafka.yaml +++ b/deploy/k01/infra/kafka.yaml @@ -13,6 +13,15 @@ spec: type: persistent-claim size: 1Gi deleteClaim: false + resources: + requests: + cpu: 50m + memory: 128Mi + limits: + memory: 768Mi + jvmOptions: + -Xms: "192M" + -Xmx: "384M" --- apiVersion: kafka.strimzi.io/v1 @@ -30,6 +39,15 @@ spec: type: persistent-claim size: 5Gi deleteClaim: false + resources: + requests: + cpu: 100m + memory: 384Mi + limits: + memory: 1536Mi + jvmOptions: + -Xms: "256M" + -Xmx: "1024M" --- apiVersion: kafka.strimzi.io/v1 @@ -56,8 +74,20 @@ spec: default.replication.factor: 1 min.insync.replicas: 1 entityOperator: - topicOperator: {} - userOperator: {} + topicOperator: + resources: + requests: + cpu: 30m + memory: 120Mi + limits: + memory: 256Mi + userOperator: + resources: + requests: + cpu: 30m + memory: 120Mi + limits: + memory: 256Mi --- apiVersion: kafka.strimzi.io/v1 diff --git a/deploy/k01/infra/mongo.yaml b/deploy/k01/infra/mongo.yaml index f165012..cb959fb 100644 --- a/deploy/k01/infra/mongo.yaml +++ b/deploy/k01/infra/mongo.yaml @@ -24,6 +24,23 @@ spec: storage.wiredTiger.engineConfig.journalCompressor: zlib statefulSet: spec: + template: + spec: + containers: + - name: mongod + resources: + requests: + cpu: 30m + memory: 100Mi + limits: + memory: 1Gi + - name: mongodb-agent + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 200Mi volumeClaimTemplates: - metadata: name: data-volume diff --git a/deploy/k01/infra/postgres.yaml b/deploy/k01/infra/postgres.yaml index c19d00b..86b3010 100644 --- a/deploy/k01/infra/postgres.yaml +++ b/deploy/k01/infra/postgres.yaml @@ -13,6 +13,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -30,6 +36,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -47,6 +59,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -64,6 +82,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -81,6 +105,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -98,6 +128,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -115,6 +151,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -132,6 +174,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -149,6 +197,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -166,6 +220,12 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi --- apiVersion: postgresql.cnpg.io/v1 @@ -183,3 +243,9 @@ spec: owner: app storage: size: 1Gi + resources: + requests: + cpu: 30m + memory: 80Mi + limits: + memory: 1Gi diff --git a/deploy/k01/infra/ratelimit.yaml b/deploy/k01/infra/ratelimit.yaml index 84d5ba3..65427f0 100644 --- a/deploy/k01/infra/ratelimit.yaml +++ b/deploy/k01/infra/ratelimit.yaml @@ -126,6 +126,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 256Mi volumes: - name: config configMap: diff --git a/deploy/k01/infra/redis.yaml b/deploy/k01/infra/redis.yaml index 3392aa9..a0b3799 100644 --- a/deploy/k01/infra/redis.yaml +++ b/deploy/k01/infra/redis.yaml @@ -12,6 +12,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: user-redis key: password @@ -41,6 +43,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: player-redis key: password @@ -70,6 +74,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: game-redis key: password @@ -99,6 +105,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: shop-redis key: password @@ -128,6 +136,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: order-redis key: password @@ -157,6 +167,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: wallet-redis key: password @@ -186,6 +198,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: community-redis key: password @@ -215,6 +229,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: review-redis key: password @@ -244,6 +260,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: dispute-redis key: password @@ -273,6 +291,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: notification-redis key: password @@ -302,6 +322,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: search-redis key: password @@ -331,6 +353,8 @@ spec: requests: cpu: 50m memory: 64Mi + limits: + memory: 1Gi redisSecret: name: chat-redis key: password diff --git a/deploy/k01/services/authz-adapter.yaml b/deploy/k01/services/authz-adapter.yaml index ffbb798..1b4a70d 100644 --- a/deploy/k01/services/authz-adapter.yaml +++ b/deploy/k01/services/authz-adapter.yaml @@ -32,6 +32,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/chat.yaml b/deploy/k01/services/chat.yaml index 09f6f03..431d620 100644 --- a/deploy/k01/services/chat.yaml +++ b/deploy/k01/services/chat.yaml @@ -67,6 +67,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi volumes: - name: certs secret: diff --git a/deploy/k01/services/community.yaml b/deploy/k01/services/community.yaml index 5710d5e..0aee912 100644 --- a/deploy/k01/services/community.yaml +++ b/deploy/k01/services/community.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -117,6 +119,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/dispute.yaml b/deploy/k01/services/dispute.yaml index 4219ad9..b7defd9 100644 --- a/deploy/k01/services/dispute.yaml +++ b/deploy/k01/services/dispute.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -119,6 +121,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/email.yaml b/deploy/k01/services/email.yaml index 3e712be..3d1d358 100644 --- a/deploy/k01/services/email.yaml +++ b/deploy/k01/services/email.yaml @@ -41,6 +41,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -127,6 +129,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/frontend.yaml b/deploy/k01/services/frontend.yaml index af31ea1..69233c0 100644 --- a/deploy/k01/services/frontend.yaml +++ b/deploy/k01/services/frontend.yaml @@ -27,6 +27,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/game.yaml b/deploy/k01/services/game.yaml index f51c3c6..b35c8e8 100644 --- a/deploy/k01/services/game.yaml +++ b/deploy/k01/services/game.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -115,6 +117,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/notification.yaml b/deploy/k01/services/notification.yaml index 8d31687..093d782 100644 --- a/deploy/k01/services/notification.yaml +++ b/deploy/k01/services/notification.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -115,6 +117,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/objectstory.yaml b/deploy/k01/services/objectstory.yaml index 2907ac1..d627fa4 100644 --- a/deploy/k01/services/objectstory.yaml +++ b/deploy/k01/services/objectstory.yaml @@ -55,6 +55,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -108,6 +110,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/order.yaml b/deploy/k01/services/order.yaml index bab3c64..dd0f28a 100644 --- a/deploy/k01/services/order.yaml +++ b/deploy/k01/services/order.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -119,6 +121,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/player.yaml b/deploy/k01/services/player.yaml index 5c06eeb..b651d39 100644 --- a/deploy/k01/services/player.yaml +++ b/deploy/k01/services/player.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -117,6 +119,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/review.yaml b/deploy/k01/services/review.yaml index c3a5251..ba812cf 100644 --- a/deploy/k01/services/review.yaml +++ b/deploy/k01/services/review.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -119,6 +121,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/search.yaml b/deploy/k01/services/search.yaml index db94886..cb725d0 100644 --- a/deploy/k01/services/search.yaml +++ b/deploy/k01/services/search.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -115,6 +117,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/shop.yaml b/deploy/k01/services/shop.yaml index 64a5652..84e5e02 100644 --- a/deploy/k01/services/shop.yaml +++ b/deploy/k01/services/shop.yaml @@ -64,6 +64,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -119,6 +121,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/snowflake.yaml b/deploy/k01/services/snowflake.yaml index 8f84ee6..b79b00f 100644 --- a/deploy/k01/services/snowflake.yaml +++ b/deploy/k01/services/snowflake.yaml @@ -40,6 +40,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/user-verifications.yaml b/deploy/k01/services/user-verifications.yaml index 7c0ce23..c5b8cfa 100644 --- a/deploy/k01/services/user-verifications.yaml +++ b/deploy/k01/services/user-verifications.yaml @@ -64,6 +64,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/user.yaml b/deploy/k01/services/user.yaml index 0e57e11..029a87b 100644 --- a/deploy/k01/services/user.yaml +++ b/deploy/k01/services/user.yaml @@ -82,6 +82,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -137,6 +139,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 diff --git a/deploy/k01/services/wallet.yaml b/deploy/k01/services/wallet.yaml index 26147fb..42aa113 100644 --- a/deploy/k01/services/wallet.yaml +++ b/deploy/k01/services/wallet.yaml @@ -62,6 +62,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1 @@ -115,6 +117,8 @@ spec: requests: cpu: 20m memory: 32Mi + limits: + memory: 512Mi --- apiVersion: v1