# External Secrets Operator resource configuration
# Based on Goldilocks recommendations (Burstable QoS)

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 1000
  runAsGroup: 1000
  fsGroup: 1000
  seccompProfile:
    type: RuntimeDefault

# Main controller
resources:
  requests:
    cpu: 15m
    memory: 192Mi
  limits:
    cpu: 50m
    memory: 256Mi

certController:
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    seccompProfile:
      type: RuntimeDefault
  resources:
    requests:
      cpu: 15m
      memory: 192Mi
    limits:
      cpu: 50m
      memory: 256Mi

webhook:
  podSecurityContext:
    runAsNonRoot: true
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    seccompProfile:
      type: RuntimeDefault
  resources:
    requests:
      cpu: 15m
      memory: 128Mi
    limits:
      cpu: 50m
      memory: 256Mi