Add resources requests and limits management

README.md

@@ -172,3 +172,51 @@ every deployments which are making use of Persistent volumes:
 * geoserver
 * mapstore
 * openldap
+
+# Resources allocations and limits
+
+The requested and limits to allocated CPU and RAM is configurable in the `values.yaml` file for each component.
+
+You can configure it with the availables `resources` parameter : 
+
+```
+resources:
+  limits:
+    cpu: 2000m
+    memory: 4Gi
+  requests:
+    cpu: 1000m
+    memory: 2Gi
+```
+
+This config will request 1 CPU and 2Gi RAM to launch and limits consumption to 2 CPU and 4Gi RAM.
+
+Bellow are default configs, they were determined for a test environment (request) and are limited (limits) to what an average production environment might require :
+
+|                     | CPU - Requests | CPU - Limits  | RAM - Requests | RAM - Limits |
+| ------------------- | -------------- | ------------- | -------------- | ------------ |
+| analytics           | 500            | 1000          | 512Mi          | 2Gi          |
+| cas                 | 1000           | 2000          | 2Gi            | 4Gi          |
+| console             | 500            | 1000          | 512Mi          | 2Gi          |
+| datafeeder          | 200            | 500           | 512Mi          | 2Gi          |
+| datafeeder-frontend | 100            | 200           | 128Mi          | 256Mi        |
+| geonetwork          | 2000           | 4000          | 2Gi            | 4Gi          |
+| ogc-api-records     | 100            | 500           | 512Mi          | 1Gi          |
+| elasticsearch       | 1000           | 2000          | 3Gi            | 6Gi          |
+| kibana              | 500            | 1000          | 1Gi            | 2Gi          |
+| housekeeping        | 100            | 200           | 8Mi            | 8Mi          |
+| geoserver           | 2000           | 4000          | 4Gi            | 8Gi          |
+| geowebcache         | 1000           | 2000          | 2Gi            | 4Gi          |
+| header              | 200            | 1000          | 512Mi          | 1Gi          |
+| mapstore            | 1000           | 2000          | 2Gi            | 4Gi          |
+| openldap            | 500            | 1000          | 2Gi            | 4Gi          |
+| proxy               | 2000           | 4000          | 2Gi            | 4Gi          |
+| gateway             | 2000           | 4000          | 2Gi            | 4Gi          |
+| database (PG)       | 2000           | 4000          | 4Gi            | 8Gi          |
+| smtp                | 200            | 500           | 128Mi          | 256Mi        |
+
+Feel free to suggest modifications based on your use cases.
+
+***/!\ Important /!\ :*** Default values are for testing purposes !
+
+It _should_ work for an average production, but for production use, you are strongly advised to document yourself on how to estimate resource consumption based on your data and platform traffic.

templates/analytics/analytics-deployment.yaml

@@ -52,6 +52,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 10
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/cas/cas-deployment.yaml

@@ -54,6 +54,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 60
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/console/console-deployment.yaml

@@ -61,6 +61,8 @@ spec:
         lifecycle:
           {{- toYaml . | nindent 10 }}
         {{- end }}
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/datafeeder/datafeeder-deployment.yaml

@@ -111,6 +111,8 @@ spec:
             port: http-proxy
           periodSeconds: 10
           initialDelaySeconds: 20
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/datafeeder/import-deployment.yaml

@@ -56,6 +56,8 @@ spec:
         volumeMounts:
           - mountPath: /etc/georchestra
             name: georchestra-datadir
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/gateway/gateway-deployment.yaml

@@ -61,6 +61,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 15
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/geonetwork/elasticsearch/es-deployment.yaml

@@ -44,14 +44,14 @@ spec:
             value: -Dlog4j2.formatMsgNoLookups=true -Dlog4j2.disable.jmx=true
           - name: discovery.type
             value: single-node
-        resources:
-            {{- toYaml $webapp.resources | nindent 12 }}
         ports:
         - containerPort: 9200
           name: elastic
         volumeMounts:
           - mountPath: /usr/share/elasticsearch/data
             name: gn4-es-data
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: gn4-es-data
         persistentVolumeClaim:

templates/geonetwork/geonetwork-deployment.yaml

@@ -76,6 +76,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 50
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       {{- if $webapp.jetty_monitoring }}
       - name: jmx-collectd
         image: camptocamp/jmx-collectd:bookworm

templates/geonetwork/housekeeping/clean-harvester-logs.yaml

@@ -29,13 +29,15 @@ spec:
             volumeMounts:
             - mountPath: /mnt/geonetwork_datadir
               name: geonetwork-datadir
+            resources:
+              {{- toYaml $webapp.resources | nindent 14 }}
           volumes:
           - name: geonetwork-datadir
             persistentVolumeClaim:
               claimName: {{ include "georchestra.fullname" . }}-geonetwork-datadir
           restartPolicy: OnFailure
           {{- if $webapp.housekeeping.tolerations }}
           tolerations:
-            {{- $webapp.housekeeping.tolerations | toYaml | nindent 10}}
+            {{- $webapp.housekeeping.tolerations | toYaml | nindent 12}}
           {{- end }}
 {{- end -}}

templates/geonetwork/kibana/kibana-deployment.yaml

@@ -37,6 +37,8 @@ spec:
         volumeMounts:
           - mountPath: /usr/share/kibana/config
             name: gn4-kibana-config
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: gn4-kibana-config
         configMap:

templates/geonetwork/ogc-api-records/ogc-api-records-deployment.yaml

@@ -77,6 +77,8 @@ spec:
         volumeMounts:
         - mountPath: /etc/georchestra
           name: georchestra-datadir
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/geoserver/geoserver-deployment.yaml

@@ -213,6 +213,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 40
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       {{- if $webapp.jetty_monitoring }}
       - name: jmx-collectd
         image: camptocamp/jmx-collectd:bookworm

templates/geowebcache/geowebcache-deployment.yaml

@@ -87,6 +87,8 @@ spec:
           periodSeconds: 15
           successThreshold: 1
           timeoutSeconds: 1
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/header/header-deployment.yaml

@@ -64,6 +64,8 @@ spec:
           periodSeconds: 15
           successThreshold: 1
           timeoutSeconds: 1
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/ldap/openldap-deployment.yaml

@@ -67,6 +67,8 @@ spec:
             - -b{{ .Values.ldap.baseDn }}
             - {{ .Values.ldap.adminDn }}
           initialDelaySeconds: 30
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       {{- if $webapp.extraContainers }}
         {{ toYaml $webapp.extraContainers | nindent 6 }}
       {{- end }}

templates/mapstore/mapstore-deployment.yaml

@@ -74,6 +74,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 15
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       volumes:
       - name: georchestra-datadir
         emptyDir: {}

templates/security-proxy/security-proxy-deployment.yaml

@@ -80,6 +80,8 @@ spec:
             port: 8080
           failureThreshold: 5
           periodSeconds: 15
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       {{- if $webapp.jetty_monitoring }}
       - name: jmx-collectd
         image: camptocamp/jmx-collectd:bookworm

templates/smtp-smarthost/smtp-deployment.yaml

@@ -64,6 +64,8 @@ spec:
           tcpSocket:
             port: smtp
           initialDelaySeconds: 30
+        resources:
+          {{- toYaml $webapp.resources | nindent 10 }}
       {{- if $webapp.tolerations }}
       tolerations:
         {{- $webapp.tolerations | toYaml | nindent 8 }}