fix: increase default memory limit to ingress envoy to 512MB, enable podDisruptionBudgets on demand

charts/kubezero-istio-ingress/values.yaml

@@ -23,10 +23,11 @@ istio-ingress:
       replicaCount: 1
       resources:
         requests:
+          cpu: 50m
           memory: 64Mi
         limits:
           # cpu: 100m
-          memory: 256Mi
+          memory: 512Mi
       externalTrafficPolicy: Local
       podAntiAffinityLabelSelector:
       - key: app

charts/kubezero/templates/istio-ingress.yaml

@@ -1,4 +1,10 @@
 {{- define "istio-ingress-values" }}
+
+{{- with index .Values "istio-ingress" "global" }}
+global:
+  {{- toYaml . | nindent 2 }}
+{{- end }}
+
 {{- if index .Values "istio-ingress" "public" }}
 istio-ingress:
   enabled: {{ index .Values "istio-ingress" "public" "enabled" }}

charts/kubezero/templates/istio.yaml

@@ -1,7 +1,15 @@
 {{- define "istio-values" }}
+
+{{- if .Values.HighAvailableControlplane }}
+global:
+  defaultPodDisruptionBudget:
+    enabled: true
+
 istio-discovery:
   pilot:
-    replicaCount: {{ ternary 2 1 .Values.HighAvailableControlplane }}
+    replicaCount: 2
+{{- end }}
+
 {{- end }}