chore(k8s/amour/scrutiny): set GOMAXPROCS

AnalogJ/scrutiny#584
uhthomas · Apr 17, 2024 · 661dc25 · 661dc25
1 parent 579eb2c
commit 661dc25
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 3 deletions.
diff --git a/k8s/amour/scrutiny/collector/daemon_set_list.cue b/k8s/amour/scrutiny/collector/daemon_set_list.cue
@@ -36,6 +36,12 @@ import (
 					}, {
 						name:  "COLLECTOR_RUN_STARTUP"
 						value: "true"
+					}, {
+						name: "GOMAXPROCS"
+						valueFrom: resourceFieldRef: {
+							containerName: "collector"
+							resource:      "limits.cpu"
+						}
 					}]
 					resources: limits: {
 						(v1.#ResourceCPU):    "150m"

diff --git a/k8s/amour/scrutiny/web/stateful_set_list.cue b/k8s/amour/scrutiny/web/stateful_set_list.cue
@@ -36,6 +36,12 @@ import (
 							name: #Name
 							key:  "token"
 						}
+					}, {
+						name: "GOMAXPROCS"
+						valueFrom: resourceFieldRef: {
+							containerName: "web"
+							resource:      "limits.cpu"
+						}
 					}]
 					resources: limits: {
 						(v1.#ResourceCPU):    "100m"
@@ -64,9 +70,9 @@ import (
 					}
 				}]
 				securityContext: {
-					runAsUser:    1000
-					runAsGroup:   3000
-					runAsNonRoot: true
+					runAsUser:           1000
+					runAsGroup:          3000
+					runAsNonRoot:        true
 					fsGroup:             2000
 					fsGroupChangePolicy: v1.#FSGroupChangeOnRootMismatch
 					seccompProfile: type: v1.#SeccompProfileTypeRuntimeDefault