Viktor Barzin 16343475b1 [ci skip] VPA: reduce LimitRange defaults, add overcommit check, protect tier-0 ... - Reduce Kyverno LimitRange default limits ~4x across all tiers to fix 800-900% memory overcommitment on worker nodes - Add cluster health check #25: per-node resource overcommitment showing requests and limits vs allocatable capacity - Add Kyverno policy for Goldilocks VPA mode by tier: tier-0 namespaces get VPA Off mode (recommend only, no evictions) to prevent downtime on critical infra (traefik, cloudflared, authentik, technitium, etc.) - Non-tier-0 namespaces get VPA Auto mode for active right-sizing		2026-02-26 23:15:43 +00:00
..
main.tf	[ci skip] VPA: reduce LimitRange defaults, add overcommit check, protect tier-0	2026-02-26 23:15:43 +00:00