From 56ddee457af5d75d9a6d2f598d33efae53c55a46 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 15 Mar 2026 10:37:58 +0000
Subject: [PATCH] fix: openclaw policy violation + reduce memory requests for
 capacity

- openclaw: fix Kyverno policy violation (node:22-alpine ->
  docker.io/library/node:22-alpine), reduce request to 1536Mi
  with 2Gi limit for overcommit
- rybbit/clickhouse: reduce 1Gi -> 768Mi (frees 256Mi)
- stirling-pdf: reduce 1536Mi -> 1200Mi (frees 336Mi)
---
 stacks/openclaw/main.tf     | 4 ++--
 stacks/rybbit/main.tf       | 4 ++--
 stacks/stirling-pdf/main.tf | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/stacks/openclaw/main.tf b/stacks/openclaw/main.tf
index 31e0057b..3722d37f 100644
--- a/stacks/openclaw/main.tf
+++ b/stacks/openclaw/main.tf
@@ -426,7 +426,7 @@ resource "kubernetes_deployment" "openclaw" {
             }
             requests = {
               cpu    = "100m"
-              memory = "2Gi"
+              memory = "1536Mi"
             }
           }
         }
@@ -434,7 +434,7 @@ resource "kubernetes_deployment" "openclaw" {
         # Sidecar: modelrelay — auto-routes to fastest healthy free model
         container {
           name  = "modelrelay"
-          image = "node:22-alpine"
+          image = "docker.io/library/node:22-alpine"
           command = ["sh", "-c", <<-EOF
             if [ ! -f /tools/modelrelay/node_modules/.package-lock.json ]; then
               mkdir -p /tools/modelrelay
diff --git a/stacks/rybbit/main.tf b/stacks/rybbit/main.tf
index 1d8aa588..f93467ab 100644
--- a/stacks/rybbit/main.tf
+++ b/stacks/rybbit/main.tf
@@ -302,10 +302,10 @@ resource "kubernetes_deployment" "rybbit" {
           resources {
             requests = {
               cpu    = "25m"
-              memory = "1Gi"
+              memory = "768Mi"
             }
             limits = {
-              memory = "1Gi"
+              memory = "768Mi"
             }
           }
         }
diff --git a/stacks/stirling-pdf/main.tf b/stacks/stirling-pdf/main.tf
index 5088d7b3..b06ad539 100644
--- a/stacks/stirling-pdf/main.tf
+++ b/stacks/stirling-pdf/main.tf
@@ -58,10 +58,10 @@ resource "kubernetes_deployment" "stirling-pdf" {
           resources {
             requests = {
               cpu    = "25m"
-              memory = "1536Mi"
+              memory = "1200Mi"
             }
             limits = {
-              memory = "1536Mi"
+              memory = "1200Mi"
             }
           }