5 commits

Author	SHA1	Message	Date
Viktor Barzin	517f5d6a6c	[ci skip] Increase tier-based resource quotas to prevent quota exhaustion ... Tier 2-gpu: 32→48 CPU limits, 64→96Gi mem limits, 30→40 pods Tier 3-edge: 2→4 req CPU, 8→16 CPU limits, 16→32Gi mem limits, 20→30 pods Tier 4-aux: 1→2 req CPU, 4→8 CPU limits, 8→16Gi mem limits, 15→20 pods Fixes realestate-crawler (100% quota), nvidia (89.7%), resume/website (75%), and actualbudget (75%) quota exhaustion causing pod creation failures.	2026-02-21 23:26:00 +00:00
Viktor Barzin	642e774b62	[ci skip] Fix Kyverno priority injection to remove default priority/preemptionPolicy ... The priority injection policy was setting priorityClassName on pods but Kubernetes had already defaulted priority=0 and preemptionPolicy=PreemptLowerPriority on those pods, causing admission controller to reject the mismatch. Switch from patchStrategicMerge to patchesJson6902 to explicitly remove the priority and preemptionPolicy fields before setting priorityClassName.	2026-02-21 23:11:35 +00:00
Viktor Barzin	144e9b3e39	[ci skip] Add Kyverno policy to inject ndots:2 on all pods ... Reduces NxDomain query flood caused by Kubernetes default ndots:5 search domain expansion. 78% of DNS queries were wasted NxDomain lookups.	2026-02-20 00:21:03 +00:00
Viktor Barzin	4d9b8242e8	Add tier-based resource governance via Kyverno [ci skip] ... Four layers of noisy-neighbor protection using existing tier system: - PriorityClasses (tier-0-core through tier-4-aux) - LimitRange defaults auto-generated per namespace tier - ResourceQuotas auto-generated per namespace tier - PriorityClassName injection on pods via Kyverno mutate Custom quota overrides for monitoring and crowdsec namespaces which exceed the default tier quotas.	2026-02-15 18:48:33 +00:00
Viktor Barzin	f1e9fb9afe	add tier to all deployments [ci skip]	2026-01-10 16:28:14 +00:00