Set cpu/memory resources requests/limits for some addons

* Set resource requests and limits for Grafana and CLUO
* Set resource requests for Prometheus, but allow usage
to grow since needs vary widely
* Leave nginx without resource requests/limits for now,
its typically well behaved

addons/cluo/update-agent.yaml

@@ -18,20 +18,15 @@ spec:
       annotations:
         seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
     spec:
+      tolerations:
+        - key: node-role.kubernetes.io/master
+          operator: Exists
+          effect: NoSchedule
       containers:
         - name: update-agent
           image: quay.io/coreos/container-linux-update-operator:v0.7.0
           command:
             - "/bin/update-agent"
-        volumeMounts:
-          - mountPath: /var/run/dbus
-            name: var-run-dbus
-          - mountPath: /etc/coreos
-            name: etc-coreos
-          - mountPath: /usr/share/coreos
-            name: usr-share-coreos
-          - mountPath: /etc/os-release
-            name: etc-os-release
           env:
             # read by update-agent as the node name to manage reboots for
             - name: UPDATE_AGENT_NODE
@@ -42,10 +37,22 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-      tolerations:
+          resources:
-      - key: node-role.kubernetes.io/master
+            requests:
-        operator: Exists
+              cpu: 10m
-        effect: NoSchedule
+              memory: 20Mi
+            limits:
+              cpu: 20m
+              memory: 40Mi
+          volumeMounts:
+            - mountPath: /var/run/dbus
+              name: var-run-dbus
+            - mountPath: /etc/coreos
+              name: etc-coreos
+            - mountPath: /usr/share/coreos
+              name: usr-share-coreos
+            - mountPath: /etc/os-release
+              name: etc-os-release
       volumes:
       - name: var-run-dbus
         hostPath:

addons/cluo/update-operator.yaml

@@ -15,6 +15,10 @@ spec:
       annotations:
         seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
     spec:
+      tolerations:
+      - key: node-role.kubernetes.io/master
+        operator: Exists
+        effect: NoSchedule
       containers:
         - name: update-operator
           image: quay.io/coreos/container-linux-update-operator:v0.7.0
@@ -25,7 +29,11 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-      tolerations:
+          resources:
-      - key: node-role.kubernetes.io/master
+            requests:
-        operator: Exists
+              cpu: 10m
-        effect: NoSchedule
+              memory: 20Mi
+            limits:
+              cpu: 20m
+              memory: 40Mi
+

addons/grafana/deployment.yaml

@@ -32,11 +32,11 @@ spec:
               containerPort: 8080
           resources:
             requests:
-              memory: 100Mi
               cpu: 100m
+              memory: 100Mi
             limits:
-              memory: 200Mi
               cpu: 200m
+              memory: 200Mi
           volumeMounts:
             - name: config
               mountPath: /etc/grafana

addons/prometheus/deployment.yaml

@@ -28,6 +28,10 @@ spec:
           ports:
             - name: web
               containerPort: 9090
+          resources:
+            requests:
+              cpu: 100m
+              memory: 200Mi
           volumeMounts:
             - name: config
               mountPath: /etc/prometheus