From 860077a126149fd735ad3094f2120f575baa28c2 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Sun, 22 Feb 2026 23:14:53 +0000 Subject: [PATCH] [ci skip] Remove ResourceQuota limits from nvidia and realestate-crawler namespaces Add resource-governance/custom-quota=true label to both namespaces so Kyverno skips auto-generating ResourceQuotas that were causing CPU pressure. --- .claude/CLAUDE.md | 2 +- stacks/platform/modules/nvidia/main.tf | 3 ++- stacks/real-estate-crawler/main.tf | 3 ++- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md index 09570fdd..f96682c7 100755 --- a/.claude/CLAUDE.md +++ b/.claude/CLAUDE.md @@ -144,7 +144,7 @@ To rebuild a K8s worker node from scratch (e.g., after disk failure or corruptio 2. LimitRange defaults (Kyverno generate): auto-created per namespace tier 3. ResourceQuotas (Kyverno generate): auto-created per namespace tier (skip with label `resource-governance/custom-quota=true`) 4. Priority injection (Kyverno mutate): sets priorityClassName on Pods -- Custom quota override: monitoring, crowdsec +- Custom quota override: monitoring, crowdsec, nvidia, realestate-crawler --- diff --git a/stacks/platform/modules/nvidia/main.tf b/stacks/platform/modules/nvidia/main.tf index 885a9e7e..57ab63cd 100644 --- a/stacks/platform/modules/nvidia/main.tf +++ b/stacks/platform/modules/nvidia/main.tf @@ -12,7 +12,8 @@ resource "kubernetes_namespace" "nvidia" { name = "nvidia" labels = { "istio-injection" : "disabled" - tier = var.tier + tier = var.tier + "resource-governance/custom-quota" = "true" } } } diff --git a/stacks/real-estate-crawler/main.tf b/stacks/real-estate-crawler/main.tf index 7aa16e2c..6cf195c5 100644 --- a/stacks/real-estate-crawler/main.tf +++ b/stacks/real-estate-crawler/main.tf @@ -17,7 +17,8 @@ resource "kubernetes_namespace" "realestate-crawler" { name = "realestate-crawler" labels = { "istio-injection" : "disabled" - tier = local.tiers.aux + tier = local.tiers.aux + "resource-governance/custom-quota" = "true" } } }