From 12552b8ea4c5e8df004e404c9df34f6b2c5fef52 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 1 Mar 2026 17:55:06 +0000
Subject: [PATCH] [ci skip] onlyoffice: disable VPA to prevent CPU resource
 override

Goldilocks VPA in Initial mode was overriding the explicit 2 CPU limit
down to 700m, throttling the document server. Set vpa-update-mode=off.
---
 stacks/onlyoffice/main.tf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/stacks/onlyoffice/main.tf b/stacks/onlyoffice/main.tf
index 0b55d1a1..7e5c090d 100644
--- a/stacks/onlyoffice/main.tf
+++ b/stacks/onlyoffice/main.tf
@@ -11,7 +11,8 @@ resource "kubernetes_namespace" "onlyoffice" {
     name = "onlyoffice"
     labels = {
       "istio-injection" : "disabled"
-      tier = local.tiers.edge
+      tier                                           = local.tiers.edge
+      "goldilocks.fairwinds.com/vpa-update-mode" = "off"
     }
   }
 }