Vault & Sysdig - resource tuning

BCDevOps / developer-experience

This repository is used to track all work for the BCGov Platform Services Team (This includes work for: 1. Platform Experience, 2. Developer Experience 3. Platform Operations/OCP 3)

Apache License 2.0

8 stars 17 forks source link

Vault & Sysdig - resource tuning #2722

Closed ShellyXueHan closed 2 years ago

ShellyXueHan commented 2 years ago

Describe the issue Getting CPU throttled for Sysdig agent pods, OOM kill for vault pods

Definition of done

[x] investigate
[x] resource tuning or fix

Issues found while troubleshooting

[x] add to vault how-to doc: https://www.vaultproject.io/docs/platform/k8s/injector/annotations#vault-hashicorp-com-agent-limits-mem
[ ] add resource config to vault components (not specified at the moment!)
[x] create sysdig alerts for its own pods
[x] update sysdig watchdog resources

ShellyXueHan commented 2 years ago

Update:

Currently waiting for JustinP's confirmation on source of vault manifest before I go ahead and update the resource section!

ShellyXueHan commented 2 years ago

moved vault resource update to a separate ticket now!