Compute memory/ephemeral-storage limits from requests, drop default CPU limits

Every chart now renders its container resources through a duplicated
_helpers.tpl helper (reference implementation in template-chart): requests
ship as chart defaults, missing memory and ephemeral-storage limits are
computed as resources.limitFactor x the request (default 3, satisfactory
keeps 2 to preserve its previously published 8Gi limit), an explicitly set
limit always wins, and a CPU limit is only rendered when set explicitly.
Fixed limit defaults are removed from all values.yaml files; teamspeak-server
gains a values-driven resources block instead of hardcoded template values.
Major version bump for all published charts.

paperless-ngx/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Paperless-NGX on Kubernetes
 
 type: application
 
-version: 6.0.0+up2.20.13
+version: 7.0.0+up2.20.13
 
 appVersion: 2.20.13
 

paperless-ngx/templates/_helpers.tpl

@@ -0,0 +1,85 @@
+{{/*
+Render the body of a container "resources:" block from a values dict of the form
+
+  resources:
+    limitFactor: 3          # optional, default 3
+    requests: { cpu, memory, ephemeral-storage / ephemeralStorage, ... }
+    limits:   { ... }       # optional, every entry optional
+
+Rules (variant B, see issue #19):
+  - requests are rendered as given (camelCase "ephemeralStorage" is normalized
+    to the Kubernetes key "ephemeral-storage").
+  - an explicitly set limit always wins.
+  - a missing memory / ephemeral-storage limit is computed as
+    limitFactor x the corresponding request.
+  - a missing cpu limit is NOT set at all (the kubelet then treats CPU as
+    unlimited; CPU is compressible, so this cannot kill the workload).
+
+Usage (the values path to the resources dict varies per chart):
+  resources:
+    {{- include "paperless-ngx.resources" .Values.<app>.resources | nindent 12 }}
+
+NOTE: charts in this repo deliberately have no dependencies, so this helper is
+duplicated into every chart's templates/_helpers.tpl with the chart's name as
+define prefix. This file in template-chart is the reference implementation.
+*/}}
+{{- define "paperless-ngx.resources" -}}
+{{- $resources := . | default dict -}}
+{{- $factor := 3.0 -}}
+{{- if not (kindIs "invalid" $resources.limitFactor) -}}
+{{- $factor = float64 $resources.limitFactor -}}
+{{- end -}}
+{{- $requests := dict -}}
+{{- range $key, $value := ($resources.requests | default dict) -}}
+{{- if not (kindIs "invalid" $value) -}}
+{{- $_ := set $requests (include "paperless-ngx.resourceKey" $key) $value -}}
+{{- end -}}
+{{- end -}}
+{{- $limits := dict -}}
+{{- range $key, $value := ($resources.limits | default dict) -}}
+{{- if not (kindIs "invalid" $value) -}}
+{{- $_ := set $limits (include "paperless-ngx.resourceKey" $key) $value -}}
+{{- end -}}
+{{- end -}}
+{{- range $key, $request := $requests -}}
+{{- if and (ne $key "cpu") (not (hasKey $limits $key)) -}}
+{{- $_ := set $limits $key (include "paperless-ngx.multiplyQuantity" (dict "quantity" $request "factor" $factor)) -}}
+{{- end -}}
+{{- end -}}
+{{- $out := dict -}}
+{{- with $requests }}{{- $_ := set $out "requests" . }}{{- end -}}
+{{- with $limits }}{{- $_ := set $out "limits" . }}{{- end -}}
+{{- toYaml $out -}}
+{{- end -}}
+
+{{/*
+Normalize a resource name from values to its Kubernetes key.
+*/}}
+{{- define "paperless-ngx.resourceKey" -}}
+{{- if eq . "ephemeralStorage" -}}ephemeral-storage{{- else -}}{{ . }}{{- end -}}
+{{- end -}}
+
+{{/*
+Multiply a Kubernetes quantity by a factor, keeping its suffix.
+Input: dict "quantity" <string|number> "factor" <float64>.
+Handles plain numbers ("2", "0.5", 1073741824), decimal ("1.5Gi"), binary
+("512Mi", "1Gi", "10Ki") and milli/SI suffixes ("100m", "500M"). Integer
+results are printed without a decimal point.
+*/}}
+{{- define "paperless-ngx.multiplyQuantity" -}}
+{{- $quantity := printf "%v" .quantity -}}
+{{- $number := regexFind "^[0-9]+(\\.[0-9]+)?" $quantity -}}
+{{- if not $number -}}
+{{- fail (printf "cannot parse resource quantity %q" $quantity) -}}
+{{- end -}}
+{{- $suffix := trimPrefix $number $quantity -}}
+{{- if not (regexMatch "^(m|k|M|G|T|P|E|Ki|Mi|Gi|Ti|Pi|Ei)?$" $suffix) -}}
+{{- fail (printf "unsupported resource quantity suffix %q in %q" $suffix $quantity) -}}
+{{- end -}}
+{{- $product := mulf (float64 $number) .factor -}}
+{{- if eq $product (floor $product) -}}
+{{- printf "%d%s" (int64 $product) $suffix -}}
+{{- else -}}
+{{- printf "%v%s" $product $suffix -}}
+{{- end -}}
+{{- end -}}

paperless-ngx/templates/paperless-consume.cronjob.yaml

@@ -30,14 +30,7 @@ spec:
                   mountPath: "/mnt/consume"
                   readOnly: false
               resources:
-                requests:
-                  memory: "{{ .Values.smbConnection.cron.resources.requests.memory }}"
-                  cpu: "{{ .Values.smbConnection.cron.resources.requests.cpu }}"
-                  ephemeral-storage: "{{ .Values.smbConnection.cron.resources.requests.ephemeralStorage }}"
-                limits:
-                  memory: "{{ .Values.smbConnection.cron.resources.limits.memory }}"
-                  cpu: "{{ .Values.smbConnection.cron.resources.limits.cpu }}"
-                  ephemeral-storage: "{{ .Values.smbConnection.cron.resources.limits.ephemeralStorage }}"
+                {{- include "paperless-ngx.resources" .Values.smbConnection.cron.resources | nindent 16 }}
           restartPolicy: Never
           volumes:
             - name: smb-share

paperless-ngx/templates/paperless-server.sfs.yaml

@@ -199,14 +199,7 @@ spec:
             - mountPath: /run
               name: run
           resources:
-            requests:
-              memory: "{{ .Values.paperless.resources.requests.memory }}"
-              cpu: "{{ .Values.paperless.resources.requests.cpu }}"
-              ephemeral-storage: "{{ .Values.paperless.resources.requests.ephemeralStorage }}"
-            limits:
-              memory: "{{ .Values.paperless.resources.limits.memory }}"
-              cpu: "{{ .Values.paperless.resources.limits.cpu }}"
-              ephemeral-storage: "{{ .Values.paperless.resources.limits.ephemeralStorage }}"
+            {{- include "paperless-ngx.resources" .Values.paperless.resources | nindent 12 }}
           readinessProbe:
             httpGet:
               path: /

paperless-ngx/values.yaml

@@ -34,14 +34,14 @@ paperless:
     postConsumptionScripts: []
     preConsumptionScripts: []
   resources:
+    # Limits are optional: memory and ephemeral-storage limits default to
+    # limitFactor x the request, an explicitly set limit always wins, and a
+    # CPU limit is only set when configured explicitly under "limits".
+    limitFactor: 3
     requests:
       cpu: 0.2
       memory: 1024Mi
       ephemeralStorage: 200Mi
-    limits:
-      cpu: 1
-      memory: 2048Mi
-      ephemeralStorage: 400Mi
   # Paperless-ngx supports rootless operation: the pod runs as uid/gid 1000
   # (the image's default paperless user), fsGroup makes the PVCs writable and
   # /tmp + /run are emptyDirs so the root filesystem stays read-only.
@@ -86,14 +86,14 @@ smbConnection:
           drop:
             - ALL
     resources:
+      # Limits are optional: memory and ephemeral-storage limits default to
+      # limitFactor x the request, an explicitly set limit always wins, and a
+      # CPU limit is only set when configured explicitly under "limits".
+      limitFactor: 3
       requests:
         cpu: 10m
         memory: 16Mi
         ephemeralStorage: 10Mi
-      limits:
-        cpu: 100m
-        memory: 32Mi
-        ephemeralStorage: 50Mi
 oidc:
   enabled: false
   autoLoginWithProvider: false