[ci skip] fix OOMKill: prometheus (4Gi), kyverno-reports (512Mi), grampsweb (512Mi)

- Prometheus server: explicit 1Gi req / 4Gi limit (was inheriting 512Mi LimitRange default)
- Kyverno reports controller: 128Mi req / 512Mi limit (was 128Mi Helm default)
- Grampsweb: 256Mi req / 512Mi limit for both containers (was 256Mi LimitRange default)

stacks/grampsweb/main.tf

@@ -182,6 +182,17 @@ resource "kubernetes_deployment" "grampsweb" {
             mount_path = "/tmp"
             sub_path   = "tmp"
           }
+
+          resources {
+            requests = {
+              cpu    = "50m"
+              memory = "256Mi"
+            }
+            limits = {
+              cpu    = "500m"
+              memory = "512Mi"
+            }
+          }
         }
 
         container {
@@ -237,6 +248,17 @@ resource "kubernetes_deployment" "grampsweb" {
             mount_path = "/tmp"
             sub_path   = "tmp"
           }
+
+          resources {
+            requests = {
+              cpu    = "50m"
+              memory = "256Mi"
+            }
+            limits = {
+              cpu    = "500m"
+              memory = "512Mi"
+            }
+          }
         }
 
         volume {

stacks/platform/modules/kyverno/main.tf

@@ -27,6 +27,18 @@ resource "helm_release" "kyverno" {
       }
     }
 
+    reportsController = {
+      resources = {
+        limits = {
+          memory = "512Mi"
+        }
+        requests = {
+          cpu    = "100m"
+          memory = "128Mi"
+        }
+      }
+    }
+
     admissionController = {
       replicas = 2
 

stacks/platform/modules/monitoring/prometheus_chart_values.tpl

@@ -121,6 +121,13 @@ server:
     existingClaim: prometheus-iscsi-pvc
     # storageClass: rook-cephfs
   retention: "52w"
+  resources:
+    requests:
+      cpu: 200m
+      memory: 1Gi
+    limits:
+      cpu: "2"
+      memory: 4Gi
   strategy:
     type: Recreate
   baseURL: "https://prometheus.viktorbarzin.me"