From 517f5d6a6cc33eb70be4bc18a406e373f3c23f89 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sat, 21 Feb 2026 23:26:00 +0000
Subject: [PATCH] [ci skip] Increase tier-based resource quotas to prevent
 quota exhaustion
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Tier 2-gpu: 32→48 CPU limits, 64→96Gi mem limits, 30→40 pods
Tier 3-edge: 2→4 req CPU, 8→16 CPU limits, 16→32Gi mem limits, 20→30 pods
Tier 4-aux: 1→2 req CPU, 4→8 CPU limits, 8→16Gi mem limits, 15→20 pods

Fixes realestate-crawler (100% quota), nvidia (89.7%), resume/website (75%),
and actualbudget (75%) quota exhaustion causing pod creation failures.
---
 .claude/CLAUDE.md                             |  9 ++++++
 .../kubernetes/kyverno/resource-governance.tf | 30 +++++++++----------
 2 files changed, 24 insertions(+), 15 deletions(-)

diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
index bd5a2297..c1e78bfe 100755
--- a/.claude/CLAUDE.md
+++ b/.claude/CLAUDE.md
@@ -535,6 +535,15 @@ Four layers of noisy-neighbor protection, all defined in `modules/kubernetes/kyv
 | 3-edge | 50m/128Mi | 1/2Gi | 4/8Gi |
 | 4-aux | 25m/64Mi | 500m/1Gi | 2/4Gi |
 
+**ResourceQuota hard limits by tier**:
+| Tier | Req CPU | Req Mem | Lim CPU | Lim Mem | Pods |
+|------|---------|---------|---------|---------|------|
+| 0-core | 8 | 8Gi | 32 | 64Gi | 100 |
+| 1-cluster | 4 | 4Gi | 16 | 32Gi | 30 |
+| 2-gpu | 8 | 8Gi | 48 | 96Gi | 40 |
+| 3-edge | 4 | 4Gi | 16 | 32Gi | 30 |
+| 4-aux | 2 | 2Gi | 8 | 16Gi | 20 |
+
 ---
 
 ## User Preferences
diff --git a/modules/kubernetes/kyverno/resource-governance.tf b/modules/kubernetes/kyverno/resource-governance.tf
index fb81a3ae..49f04e3f 100644
--- a/modules/kubernetes/kyverno/resource-governance.tf
+++ b/modules/kubernetes/kyverno/resource-governance.tf
@@ -543,11 +543,11 @@ resource "kubernetes_manifest" "generate_resourcequota_by_tier" {
             data = {
               spec = {
                 hard = {
-                  "requests.cpu"    = "4"
-                  "requests.memory" = "4Gi"
-                  "limits.cpu"      = "32"
-                  "limits.memory"   = "64Gi"
-                  pods              = "30"
+                  "requests.cpu"    = "8"
+                  "requests.memory" = "8Gi"
+                  "limits.cpu"      = "48"
+                  "limits.memory"   = "96Gi"
+                  pods              = "40"
                 }
               }
             }
@@ -592,11 +592,11 @@ resource "kubernetes_manifest" "generate_resourcequota_by_tier" {
             data = {
               spec = {
                 hard = {
-                  "requests.cpu"    = "2"
-                  "requests.memory" = "2Gi"
-                  "limits.cpu"      = "8"
-                  "limits.memory"   = "16Gi"
-                  pods              = "20"
+                  "requests.cpu"    = "4"
+                  "requests.memory" = "4Gi"
+                  "limits.cpu"      = "16"
+                  "limits.memory"   = "32Gi"
+                  pods              = "30"
                 }
               }
             }
@@ -641,11 +641,11 @@ resource "kubernetes_manifest" "generate_resourcequota_by_tier" {
             data = {
               spec = {
                 hard = {
-                  "requests.cpu"    = "1"
-                  "requests.memory" = "1Gi"
-                  "limits.cpu"      = "4"
-                  "limits.memory"   = "8Gi"
-                  pods              = "15"
+                  "requests.cpu"    = "2"
+                  "requests.memory" = "2Gi"
+                  "limits.cpu"      = "8"
+                  "limits.memory"   = "16Gi"
+                  pods              = "20"
                 }
               }
             }