intel / trusted-certificate-issuer

Trusted Certificate Service (TCS) is a K8s service to protect signing keys using Intel's SGX technology. K8s CSR and cert-manager CR APIs are both supported. TCS also contains integration samples for Istio service mesh and Key Management Reference Application (KMRA).
Apache License 2.0
29 stars 15 forks source link

config: increase pod resource limits #39

Closed avalluri closed 2 years ago

avalluri commented 2 years ago

Observed that the TCS pod gets killed by OOM with the provided memory limits. Hence improve the default limits.

poussa commented 2 years ago

Change is also needed in charts/templates/tcs_issuer.yaml

avalluri commented 2 years ago

Change is also needed in charts/templates/tcs_issuer.yaml

Yes, good catch. I fixed it now.

poussa commented 2 years ago

LGTM