Set resource requests from measured usage

apps/templates/authentik-helm.yaml

@@ -99,6 +99,10 @@ spec:
               - name: REQUESTS_CA_BUNDLE
                 value: /etc/ssl/certs/ca-certificates.crt
           server:
+            resources:
+              requests:
+                cpu: 70m
+                memory: 560Mi
             volumes:
               - name: patched-ca-bundle
                 configMap:
@@ -184,6 +188,10 @@ spec:
                 mountPath: /etc/ssl/certs
                 readOnly: true
           worker:
+            resources:
+              requests:
+                cpu: 100m
+                memory: 336Mi
             volumes:
               - name: patched-ca-bundle
                 configMap:

apps/templates/cert-manager-helm.yaml

@@ -34,6 +34,20 @@ spec:
           - name: patched-ca-bundle
             mountPath: /etc/ssl/certs
             readOnly: true
+        resources:
+          requests:
+            cpu: 10m
+            memory: 48Mi
+        cainjector:
+          resources:
+            requests:
+              cpu: 10m
+              memory: 80Mi
+        webhook:
+          resources:
+            requests:
+              cpu: 10m
+              memory: 32Mi
   syncPolicy:
     syncOptions:
     - CreateNamespace=true

apps/templates/cloudnativepg-helm.yaml

@@ -24,6 +24,10 @@ spec:
         additionalArgs:
           - --leader-lease-duration=60
           - --leader-renew-deadline=40
+        resources:
+          requests:
+            cpu: 10m
+            memory: 48Mi
   destination:
     server: https://kubernetes.default.svc
     namespace: cnpg-system

apps/templates/external-secrets-helm.yaml

@@ -18,6 +18,22 @@ spec:
     - chart: external-secrets
       repoURL: https://charts.external-secrets.io
       targetRevision: 2.13.0
+      helm:
+        values: |
+          resources:
+            requests:
+              cpu: 20m
+              memory: 64Mi
+          certController:
+            resources:
+              requests:
+                cpu: 10m
+                memory: 64Mi
+          webhook:
+            resources:
+              requests:
+                cpu: 10m
+                memory: 32Mi
   destination:
     server: https://kubernetes.default.svc
     namespace: external-secrets