Viktor Barzin 7e540292ad kyverno: bump background-controller memory 384Mi → 2Gi (OOMKilled processing keel URs) ... The mutateExistingOnPolicyUpdate=true on inject-keel-annotations produced 176 UpdateRequests for the initial bulk scan across enrolled namespaces. At the existing 384Mi limit, kyverno-background-controller OOMKilled while processing them — no annotations got injected on existing workloads (count stuck at 30). Live state already bumped via kubectl set resources; this commit makes it durable through Terraform. Also lowered the request to 256Mi (the 384Mi floor was tight against limit; 2Gi headroom for bulk scans, 256Mi steady state). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-22 14:16:55 +00:00
..
dependency-init-containers.tf	[multi] Sweep Kyverno wait-for redis annotations to redis-master	2026-04-19 12:44:46 +00:00
keel-annotations.tf	kyverno: codify aggregated ClusterRole for keel mutate-existing	2026-05-22 14:16:55 +00:00
main.tf	kyverno: bump background-controller memory 384Mi → 2Gi (OOMKilled processing keel URs)	2026-05-22 14:16:55 +00:00
registry-credentials.tf	[forgejo] Phases 3+4+5: cutover, decommission, docs sweep	2026-05-07 23:29:34 +00:00
resource-governance.tf	kyverno: strip resources.limits.cpu cluster-wide via ClusterPolicy	2026-04-18 11:34:39 +00:00
security-policies.tf	extract monitoring, nvidia, mailserver, cloudflared, kyverno from platform [ci skip]	2026-03-17 21:34:11 +00:00
tls-secret-sync.tf	add Kyverno TLS secret sync + enhance renewal pipeline	2026-03-23 22:19:34 +02:00