Merge pull request #868 from evalsocket/fix-857

Added cpu & memory resource requests and limits

charts/kyverno/values.yaml

@@ -43,12 +43,11 @@ extraArgs: []
 # - --webhooktimeout=4
 
 resources:
-#   limits:
-#     cpu: 1000m
-#     memory: 500Mi
-#   requests:
-#     cpu: 100m
-#     memory: 100Mi
+  limits:
+    memory: 128Mi
+  requests:
+    cpu: 100m
+    memory: 50Mi
 
 ## Liveness Probe. The block is directly forwarded into the deployment, so you can use whatever livenessProbe configuration you want.
 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/

definitions/install.yaml

@@ -736,11 +736,17 @@ spec:
           imagePullPolicy: Always
           args:
           - "--filterK8Resources=[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,*][Binding,*,*][ReplicaSet,*,*]"
-          # customize webhook timout
-          # - "--webhooktimeout=4"
-          - "-v=6"
+          # customize webhook timeout
+          #- "--webhooktimeout=4"
+          - "-v=2"
           ports:
           - containerPort: 443
           env:
           - name: INIT_CONFIG
             value: init-config
+          resources:
+            requests:
+              memory: "50Mi"
+              cpu: "100m"
+            limits:
+              memory: "128Mi"