viaduct-ai / kustomize-sops

KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
Apache License 2.0
639 stars 82 forks source link

Ksops Executable Plugin Using Very High CPU/Resources #253

Open charris-ca opened 3 months ago

charris-ca commented 3 months ago

I recently upgraded our Argo Kustomize environment and migrated all of our Ksops files to use the new executable binary. Functionality is the same, but I am seeing a significant increase in the amount of CPU the CMP sidecar container takes for every sync. Sidecar containers will use upwards of 50 CPUs if not bound with limits.

Mind you we have a large argo cluster with 300+ apps and hundreds of Ksops generators. Is there a way to improve performance of Ksops in Argo for high application clusters. Perhaps processing an entire generated kustomize build of Decryptions in the same call to the binary instead of individual calls?

Previous iteration with kustomize plugin baked in did not have these resource issues.