fix: default resource config (#1747)

Author: srodenhuis

charts/team-ns/templates/tekton-tasks/buildpacks.yaml

@@ -1,3 +1,5 @@
+{{- $v := .Values }}
+{{- range $v.resources }}
 apiVersion: tekton.dev/v1
 kind: Task
 metadata:
@@ -85,13 +87,7 @@ spec:
     env:
       - name: CNB_PLATFORM_API
         value: "0.9"
-    computeResources:
-      limits:
-        cpu: "2"
-        memory: 2Gi
-      requests:
-        cpu: 500m
-        memory: 512Mi
+    computeResources: {{- $v.resources.buildpacksTask | toYaml | nindent 6 }}
   steps:
     - name: prepare
       computeResources: {}
@@ -201,4 +197,5 @@ spec:
     - name: empty-dir
       emptyDir: {}
     - name: layers-dir
-      emptyDir: {}
+      emptyDir: {}
+{{- end }}

charts/team-ns/templates/tekton-tasks/git-clone.yaml

@@ -1,3 +1,5 @@
+{{- $v := .Values }}
+{{- range $v.resources }}
 apiVersion: tekton.dev/v1
 kind: Task
 metadata:
@@ -12,13 +14,7 @@ metadata:
     tekton.dev/platforms: "linux/amd64,linux/s390x,linux/ppc64le,linux/arm64"
 spec:
   stepTemplate:
-    computeResources:
-      limits:
-        cpu: "2"
-        memory: 2Gi
-      requests:
-        cpu: 500m
-        memory: 512Mi
+    computeResources: {{- $v.resources.gitcloneTask | toYaml | nindent 6 }}
   description: >-
     These Tasks are Git tasks to work with repositories used by other tasks
     in your Pipeline.
@@ -259,4 +255,5 @@ spec:
         RESULT_COMMITTER_DATE="$(git log -1 --pretty=%ct)"
         printf "%s" "${RESULT_COMMITTER_DATE}" > "$(results.committer-date.path)"
         printf "%s" "${RESULT_SHA}" > "$(results.commit.path)"
-        printf "%s" "${PARAM_URL}" > "$(results.url.path)"
+        printf "%s" "${PARAM_URL}" > "$(results.url.path)"
+{{- end }}

charts/team-ns/templates/tekton-tasks/grype.yaml

@@ -1,3 +1,5 @@
+{{- $v := .Values }}
+{{- range $v.resources }}
 apiVersion: tekton.dev/v1
 kind: Task
 metadata:
@@ -12,13 +14,7 @@ metadata:
     tekton.dev/platforms: "linux/amd64,linux/arm64,linux/ppc64le,linux/390x"
 spec:
   stepTemplate:
-    computeResources:
-      limits:
-        cpu: "2"
-        memory: 2Gi
-      requests:
-        cpu: 500m
-        memory: 512Mi
+    computeResources: {{- $v.resources.grypeTask | toYaml | nindent 6 }}
   description: >-
     A vulnerability scanner for container images and filesystems.
     Works with Syft, the powerful SBOM (software bill of materials) tool for container images and filesystems.
@@ -47,3 +43,4 @@ spec:
             - "ALL"
         seccompProfile:
           type: RuntimeDefault
+{{- end }}

charts/team-ns/templates/tekton-tasks/kaniko.yaml

@@ -1,3 +1,5 @@
+{{- $v := .Values }}
+{{- range $v.resources }}
 apiVersion: tekton.dev/v1
 kind: Task
 metadata:
@@ -12,13 +14,7 @@ metadata:
     tekton.dev/platforms: "linux/amd64,linux/arm64,linux/ppc64le"
 spec:
   stepTemplate:
-    computeResources:
-      limits:
-        cpu: "2"
-        memory: 2Gi
-      requests:
-        cpu: 500m
-        memory: 512Mi
+    computeResources: {{- $v.resources.kanikoTask | toYaml | nindent 6 }}
   description: >-
     This Task builds a simple Dockerfile with kaniko and pushes to a registry.
     This Task stores the image name and digest as results, allowing Tekton Chains to pick up
@@ -80,3 +76,4 @@ spec:
         set -e
         image="$(params.IMAGE)"
         echo -n "${image}" | tee "$(results.IMAGE_URL.path)"
+{{- end }}

charts/tekton-pipelines/templates/deployment-tekton-events-controller.yaml

@@ -63,13 +63,7 @@ spec:
         - name: tekton-events-controller
           image: {{ .Values.events.deployment.image }}
           args: []
-          resources:
-            requests:
-              cpu: 100m
-              memory: 100Mi
-            limits:
-              cpu: 1000m
-              memory: 1000Mi
+          resources: {{- toYaml .Values.events.resources | nindent 12 }}
           volumeMounts:
             - name: config-logging
               mountPath: /etc/config-logging

charts/tekton-pipelines/templates/deployment-tekton-pipelines-controller.yaml

@@ -122,13 +122,7 @@ spec:
             runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
-          resources:
-            requests:
-              cpu: 100m
-              memory: 100Mi
-            limits:
-              cpu: 1000m
-              memory: 1000Mi
+          resources: {{- toYaml .Values.controller.resources | nindent 12 }}
           ports:
             - name: metrics
               containerPort: 9090

charts/tekton-pipelines/templates/deployment-tekton-pipelines-remote-resolvers.yaml

@@ -64,13 +64,7 @@ spec:
       containers:
         - name: controller
           image: {{ .Values.remoteresolver.deployment.image }}
-          resources:
-            requests:
-              cpu: 100m
-              memory: 100Mi
-            limits:
-              cpu: 1000m
-              memory: 2Gi
+          resources: {{- toYaml .Values.controller.resources | nindent 12 }}
           ports:
             - name: metrics
               containerPort: 9090

charts/tekton-pipelines/templates/deployment-tekton-pipelines-webhook.yaml

@@ -78,13 +78,7 @@ spec:
           # and substituted here.
           image: {{ .Values.webhook.deployment.image }}
           # Resource request required for autoscaler to take any action for a metric
-          resources:
-            requests:
-              cpu: 100m
-              memory: 100Mi
-            limits:
-              cpu: 500m
-              memory: 500Mi
+          resources: {{- toYaml .Values.events.resources | nindent 12 }}
           env:
             - name: SYSTEM_NAMESPACE
               valueFrom:

charts/tekton-pipelines/values.yaml

@@ -20,13 +20,7 @@ controller:
                   - windows
   tolerations: []
   nodeSelector: {}
-  resources:
-    requests:
-      cpu: 100m
-      memory: 100Mi
-    limits:
-      cpu: 1000m
-      memory: 1000Mi
+  resources: {}
 # Values for tekton-pipelines-webhook
 webhook:
   deployment:
@@ -48,21 +42,17 @@ webhook:
                   - windows
   tolerations: []
   nodeSelector: {}
+  resources: {}
 # Values to amend tekton-pipelines-remote-resolvers
 remoteresolver:
   deployment:
     image: gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/resolvers:v0.53.0@sha256:6445641a3ea1afa918f92ef51d18edf1bdb40c08878374db33e290221e3564e1
   affinity: {}
   tolerations: []
   nodeSelector: {}
-  resources:
-    requests:
-      cpu: 100m
-      memory: 100Mi
-    limits:
-      cpu: 1000m
-      memory: 1000Mi
+  resources: {}
 
 events:
   deployment:
-    image: gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/events:v0.53.0@sha256:340e1edd0783bdb86e396ef53499f068a42da1986a1d806ab652b448869637bd
+    image: gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/events:v0.53.0@sha256:340e1edd0783bdb86e396ef53499f068a42da1986a1d806ab652b448869637bd
+  resources: {}

core.yaml

@@ -3,6 +3,7 @@ k8s:
   namespaces:
     - name: argocd
       app: argocd
+      disableIstioInjection: true
     - name: cert-manager
       disableIstioInjection: true
     - name: cnpg-system
@@ -109,6 +110,7 @@ k8s:
     - name: velero
       app: velero
       disablePolicyChecks: true
+      disableIstioInjection: true
     - name: otomi-pipelines
       app: tekton
       disableIstioInjection: true

helmfile.d/helmfile-60.teams.yaml

@@ -39,6 +39,7 @@ releases:
       pipeline: otomi-task-teams
     values:
       - ../values/tekton-dashboard/tekton-dashboard-teams.gotmpl
+      - resources: {{- $team.resources.tektonDashboard | toYaml | nindent 10 }}
   - name: prometheus-{{ $teamId }}
     installed: {{ or ($team | get "managedMonitoring.grafana" false) ($team | get "managedMonitoring.alertmanager" false) }}
     namespace: team-{{ $teamId }}
@@ -57,6 +58,7 @@ releases:
           namespaceOverride: null
           alertmanagerSpec:
             externalUrl: "https://alertmanager-{{ $teamId }}.{{ $domain }}"
+            resources: {{- $team.resources.alertmanager | toYaml | nindent 14 }}
             podMetadata:
               annotations:
                 sidecar.istio.io/inject: "true"
@@ -77,12 +79,14 @@ releases:
           namespaceOverride: null # team-{{ $teamId }}
           nameOverride: {{ $teamId }}-po-grafana
           fullnameOverride: {{ $teamId }}-po-grafana
+          resources: {{- $team.resources.grafana | toYaml | nindent 12 }}
           grafana.ini:
             "auth.generic_oauth":
               role_attribute_path: contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'team-admin') && 'Admin' || contains(groups[*], 'team-{{ $teamId }}') && 'Editor'{{ if not ($team | get "managedMonitoring.private" false) }} || 'Viewer'{{- end }}
             server:
               root_url: https://grafana-{{ $teamId }}.{{ $domain }}
           sidecar:
+            resources: {{- $team.resources.grafanaSidecar | toYaml | nindent 14 }}
             datasources:
               defaultDatasourceEnabled: false
             dashboards: