viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/stacks/platform/modules/kyverno
History
Viktor Barzin 69c4c0c76e [ci skip] VPA: reduce LimitRange defaults, add overcommit check, protect tier-0 
- Reduce Kyverno LimitRange default limits ~4x across all tiers to fix
  800-900% memory overcommitment on worker nodes
- Add cluster health check #25: per-node resource overcommitment
  showing requests and limits vs allocatable capacity
- Add Kyverno policy for Goldilocks VPA mode by tier: tier-0 namespaces
  get VPA Off mode (recommend only, no evictions) to prevent downtime
  on critical infra (traefik, cloudflared, authentik, technitium, etc.)
- Non-tier-0 namespaces get VPA Auto mode for active right-sizing
2026-02-26 23:15:43 +00:00
..
main.tf [ci skip] kyverno: scale to 2 replicas, eliminate API calls from policies 2026-02-24 23:09:56 +00:00
resource-governance.tf [ci skip] VPA: reduce LimitRange defaults, add overcommit check, protect tier-0 2026-02-26 23:15:43 +00:00
security-policies.tf [ci skip] Infrastructure hardening: security, monitoring, reliability, maintainability 2026-02-23 22:05:28 +00:00