From 5a62d7b9a540014cbe6b01c4892dc88d1a4a8233 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sat, 28 Feb 2026 19:07:59 +0000
Subject: [PATCH] [ci skip] add resource limits to paperless-ngx and
 stirling-pdf to prevent OOMKills

Both services were hitting the 256Mi Kyverno LimitRange default and getting
OOMKilled. Set explicit limits to 1Gi memory for both.
---
 stacks/paperless-ngx/main.tf | 11 +++++++++++
 stacks/stirling-pdf/main.tf  | 11 +++++++++++
 2 files changed, 22 insertions(+)

diff --git a/stacks/paperless-ngx/main.tf b/stacks/paperless-ngx/main.tf
index 144a4f74..b9012225 100644
--- a/stacks/paperless-ngx/main.tf
+++ b/stacks/paperless-ngx/main.tf
@@ -110,6 +110,17 @@ resource "kubernetes_deployment" "paperless-ngx" {
             mount_path = "/usr/src/paperless/data"
           }
 
+          resources {
+            requests = {
+              cpu    = "100m"
+              memory = "256Mi"
+            }
+            limits = {
+              cpu    = "2"
+              memory = "1Gi"
+            }
+          }
+
           port {
             container_port = 8000
           }
diff --git a/stacks/stirling-pdf/main.tf b/stacks/stirling-pdf/main.tf
index 71a1175e..9e6c40bc 100644
--- a/stacks/stirling-pdf/main.tf
+++ b/stacks/stirling-pdf/main.tf
@@ -44,6 +44,17 @@ resource "kubernetes_deployment" "stirling-pdf" {
         container {
           image = "stirlingtools/stirling-pdf:latest"
           name  = "stirling-pdf"
+          resources {
+            requests = {
+              cpu    = "100m"
+              memory = "256Mi"
+            }
+            limits = {
+              cpu    = "2"
+              memory = "1Gi"
+            }
+          }
+
           port {
             container_port = 8080
           }