From 2446fec1f666835272fc05b033dae68c4733a58c Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sat, 21 Feb 2026 21:22:03 +0000
Subject: [PATCH] [ci skip] Fix whiteboard priority class mismatch and
 OnlyOffice OOMKill

- Add priority_class_name to nextcloud whiteboard deployment to match
  Kyverno-injected tier-3-edge priority class
- Add explicit resource limits (4Gi memory) for OnlyOffice document
  server to prevent OOMKill during font generation
---
 modules/kubernetes/nextcloud/main.tf  |  1 +
 modules/kubernetes/onlyoffice/main.tf | 11 +++++++++++
 2 files changed, 12 insertions(+)

diff --git a/modules/kubernetes/nextcloud/main.tf b/modules/kubernetes/nextcloud/main.tf
index a35828e3..914051e4 100755
--- a/modules/kubernetes/nextcloud/main.tf
+++ b/modules/kubernetes/nextcloud/main.tf
@@ -72,6 +72,7 @@ resource "kubernetes_deployment" "whiteboard" {
         }
       }
       spec {
+        priority_class_name = "tier-3-edge"
         container {
           image = "ghcr.io/nextcloud-releases/whiteboard:release"
           name  = "whiteboard"
diff --git a/modules/kubernetes/onlyoffice/main.tf b/modules/kubernetes/onlyoffice/main.tf
index df130db4..37d75008 100644
--- a/modules/kubernetes/onlyoffice/main.tf
+++ b/modules/kubernetes/onlyoffice/main.tf
@@ -8,6 +8,7 @@ resource "kubernetes_namespace" "onlyoffice" {
     name = "onlyoffice"
     labels = {
       "istio-injection" : "disabled"
+      tier = var.tier
     }
   }
 }
@@ -44,6 +45,16 @@ resource "kubernetes_deployment" "onlyoffice-document-server" {
         container {
           name  = "onlyoffice-document-server"
           image = "onlyoffice/documentserver:8.2.3"
+          resources {
+            requests = {
+              cpu    = "100m"
+              memory = "512Mi"
+            }
+            limits = {
+              cpu    = "2"
+              memory = "4Gi"
+            }
+          }
           port {
             name           = "http"
             container_port = 80