homelab-gitops/platform/kyverno/policies/10-defaults/default-container-resources.yaml
gwg313 baa0216960
add kyverno policies
Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-28 20:09:06 -04:00

42 lines
1.2 KiB
YAML

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
name: default-container-resources
spec:
background: true
rules:
- name: default-container-resources
match:
any:
- resources:
kinds:
- Pod
mutate:
foreach:
- list: "request.object.spec.containers"
patchStrategicMerge:
spec:
containers:
- (name): "{{ element.name }}"
resources:
requests:
+(cpu): "100m"
+(memory): "128Mi"
limits:
+(cpu): "200m"
+(memory): "512Mi"
- list: "request.object.spec.initContainers || []"
patchStrategicMerge:
spec:
initContainers:
- (name): "{{ element.name }}"
resources:
requests:
+(cpu): "100m"
+(memory): "128Mi"
limits:
+(cpu): "200m"
+(memory): "512Mi"