Chart: make resources configurable, default 512Mi (was hardcoded 128Mi)

Author: lukacsi

chart/helm/templates/deployment.yaml

@@ -57,13 +57,10 @@ spec:
             port: 8081
           initialDelaySeconds: 5
           periodSeconds: 10
+        {{- with .Values.resources }}
         resources:
-          limits:
-            cpu: 500m
-            memory: 128Mi
-          requests:
-            cpu: 10m
-            memory: 64Mi
+          {{- toYaml . | nindent 10 }}
+        {{- end }}
 {{- if and .Values.apiServer.enabled (eq .Values.apiServer.mode "production") }}
         volumeMounts:
         - name: tls

chart/helm/values.yaml

@@ -3,6 +3,16 @@ image:
   tag: latest
   pullPolicy: Always
 
+# Container resources — 512Mi minimum recommended for clusters with 50+ secrets.
+# Unfiltered Secret sources load all cluster secrets into memory for join evaluation.
+resources:
+  limits:
+    cpu: 500m
+    memory: 512Mi
+  requests:
+    cpu: 10m
+    memory: 128Mi
+
 # RBAC configuration
 rbac:
   # Mode: "wildcard" or "aggregated"