fix(k01): set production-grade memory limits across all workloads

deploy/k01/infra/envoy.yaml

@@ -1060,6 +1060,8 @@ spec:
             requests:
               cpu: 100m
               memory: 128Mi
+            limits:
+              memory: 512Mi
       volumes:
         - name: config
           configMap:

deploy/k01/infra/kafka.yaml

@@ -13,6 +13,15 @@ spec:
     type: persistent-claim
     size: 1Gi
     deleteClaim: false
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      memory: 768Mi
+  jvmOptions:
+    -Xms: "192M"
+    -Xmx: "384M"
 
 ---
 apiVersion: kafka.strimzi.io/v1
@@ -30,6 +39,15 @@ spec:
     type: persistent-claim
     size: 5Gi
     deleteClaim: false
+  resources:
+    requests:
+      cpu: 100m
+      memory: 384Mi
+    limits:
+      memory: 1536Mi
+  jvmOptions:
+    -Xms: "256M"
+    -Xmx: "1024M"
 
 ---
 apiVersion: kafka.strimzi.io/v1
@@ -56,8 +74,20 @@ spec:
       default.replication.factor: 1
       min.insync.replicas: 1
   entityOperator:
-    topicOperator: {}
+    topicOperator:
-    userOperator: {}
+      resources:
+        requests:
+          cpu: 30m
+          memory: 120Mi
+        limits:
+          memory: 256Mi
+    userOperator:
+      resources:
+        requests:
+          cpu: 30m
+          memory: 120Mi
+        limits:
+          memory: 256Mi
 
 ---
 apiVersion: kafka.strimzi.io/v1

deploy/k01/infra/mongo.yaml

@@ -24,6 +24,23 @@ spec:
     storage.wiredTiger.engineConfig.journalCompressor: zlib
   statefulSet:
     spec:
+      template:
+        spec:
+          containers:
+            - name: mongod
+              resources:
+                requests:
+                  cpu: 30m
+                  memory: 100Mi
+                limits:
+                  memory: 1Gi
+            - name: mongodb-agent
+              resources:
+                requests:
+                  cpu: 30m
+                  memory: 80Mi
+                limits:
+                  memory: 200Mi
       volumeClaimTemplates:
         - metadata:
             name: data-volume

deploy/k01/infra/postgres.yaml

@@ -13,6 +13,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -30,6 +36,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -47,6 +59,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -64,6 +82,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -81,6 +105,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -98,6 +128,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -115,6 +151,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -132,6 +174,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -149,6 +197,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -166,6 +220,12 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi
 
 ---
 apiVersion: postgresql.cnpg.io/v1
@@ -183,3 +243,9 @@ spec:
       owner: app
   storage:
     size: 1Gi
+  resources:
+    requests:
+      cpu: 30m
+      memory: 80Mi
+    limits:
+      memory: 1Gi

deploy/k01/infra/ratelimit.yaml

@@ -126,6 +126,8 @@ spec:
             requests:
               cpu: 50m
               memory: 64Mi
+            limits:
+              memory: 256Mi
       volumes:
         - name: config
           configMap:

deploy/k01/infra/redis.yaml

@@ -12,6 +12,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: user-redis
       key: password
@@ -41,6 +43,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: player-redis
       key: password
@@ -70,6 +74,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: game-redis
       key: password
@@ -99,6 +105,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: shop-redis
       key: password
@@ -128,6 +136,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: order-redis
       key: password
@@ -157,6 +167,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: wallet-redis
       key: password
@@ -186,6 +198,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: community-redis
       key: password
@@ -215,6 +229,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: review-redis
       key: password
@@ -244,6 +260,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: dispute-redis
       key: password
@@ -273,6 +291,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: notification-redis
       key: password
@@ -302,6 +322,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: search-redis
       key: password
@@ -331,6 +353,8 @@ spec:
       requests:
         cpu: 50m
         memory: 64Mi
+      limits:
+        memory: 1Gi
     redisSecret:
       name: chat-redis
       key: password

deploy/k01/services/authz-adapter.yaml

@@ -32,6 +32,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/chat.yaml

@@ -67,6 +67,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
       volumes:
         - name: certs
           secret:

deploy/k01/services/community.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -117,6 +119,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/dispute.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -119,6 +121,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/email.yaml

@@ -41,6 +41,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -127,6 +129,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/frontend.yaml

@@ -27,6 +27,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/game.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -115,6 +117,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/notification.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -115,6 +117,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/objectstory.yaml

@@ -55,6 +55,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -108,6 +110,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/order.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -119,6 +121,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/player.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -117,6 +119,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/review.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -119,6 +121,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/search.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -115,6 +117,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/shop.yaml

@@ -64,6 +64,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -119,6 +121,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/snowflake.yaml

@@ -40,6 +40,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/user-verifications.yaml

@@ -64,6 +64,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/user.yaml

@@ -82,6 +82,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -137,6 +139,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1

deploy/k01/services/wallet.yaml

@@ -62,6 +62,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1
@@ -115,6 +117,8 @@ spec:
           requests:
             cpu: 20m
             memory: 32Mi
+          limits:
+            memory: 512Mi
 
 ---
 apiVersion: v1