Adding Gomemlimit to fix slow memory leak (#136)

Signed-off-by: Ben <[email protected]>
armosec · Jan 8, 2024 · 35c419f · 35c419f
1 parent 2c64616
commit 35c419f
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 9 deletions.
diff --git a/chart/kubecop/templates/deamonset.yaml b/chart/kubecop/templates/deamonset.yaml
@@ -50,8 +50,12 @@ spec:
         securityContext:
           {{- toYaml .Values.securityContext | nindent 12 }}
         resources:
-          {{- toYaml .Values.resources | nindent 12 }}
+          {{- toYaml .Values.kubecop.resources | nindent 12 }}
         env:
+          {{- if .Values.kubecop.gomemlimit.enabled }}
+          - name: GOMEMLIMIT
+            value: "{{ .Values.kubecop.gomemlimit.limit }}"
+          {{- end }}
           - name: NODE_NAME
             valueFrom:
               fieldRef:

diff --git a/chart/kubecop/values.yaml b/chart/kubecop/values.yaml
@@ -12,6 +12,17 @@ nameOverride: ""
 fullnameOverride: "kubecop"
 
 kubecop:
+  resources:
+    limits:
+      cpu: 500m
+      memory: 512Mi
+    requests:
+      cpu: 100m
+      memory: 256Mi
+  gomemlimit:
+    enabled: true
+    # It is recommended to set this value to 3/4 of the memory limit
+    limit: 384Mi
   recording:
     samplingInterval: 60s
     finalizationDuration: 900s
@@ -49,7 +60,7 @@ clamAV:
   resources:
     limits:
       cpu: 300m
-      memory: 400Mi
+      memory: 512Mi
     requests:
       cpu: 100m
       memory: 256Mi
@@ -76,13 +87,7 @@ securityContext:
 
 securityContextNormal: {}
 
-resources:
-  limits:
-    cpu: 500m
-    memory: 1Gi
-  requests:
-    cpu: 100m
-    memory: 256Mi
+
 
 
 nodeSelector: {}