2026-02-28 13:42:27 +00:00
|
|
|
# Patch: apply §10.7 memory limits to all Deployments in the local overlay.
|
|
|
|
|
# These are intentionally tight to stay within the 12 GB Lima VM budget.
|
|
|
|
|
#
|
|
|
|
|
# Applied as a strategic merge patch. Each stanza targets one Deployment by name.
|
|
|
|
|
|
2026-02-28 14:00:31 +00:00
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: cloudnative-pg
|
|
|
|
|
namespace: data
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: manager
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 256Mi
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: livekit-server
|
|
|
|
|
namespace: media
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: livekit-server
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 128Mi
|
|
|
|
|
|
2026-02-28 13:42:27 +00:00
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: pingora
|
|
|
|
|
namespace: ingress
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: pingora
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
feat: replace nginx placeholder with custom Pingora proxy; add Postfix MTA
Ingress:
- Deploy custom sunbeam-proxy (Pingora/Rust) replacing nginx placeholder
- HTTPS termination with mkcert (local) / rustls-acme (production)
- Host-prefix routing with path-based sub-routing for auth virtual host:
/oauth2 + /.well-known + /userinfo → Hydra, /kratos → Kratos (prefix stripped), default → login-ui
- HTTP→HTTPS redirect, WebSocket passthrough, JSON audit logging, OTEL stub
- cert-manager HTTP-01 ACME challenge routing via Ingress watcher
- RBAC for Ingress watcher (pingora-watcher ClusterRole)
- local overlay: hostPorts 80/443, LiveKit TURN demoted to ClusterIP to avoid klipper conflict
Infrastructure:
- socket_vmnet shared network for host↔VM reachability (192.168.105.2)
- local-up.sh: cert-manager installation, eth1-based LIMA_IP detection, correct DOMAIN_SUFFIX sed substitution
- Postfix MTA in lasuite namespace: outbound relay via Scaleway TEM, accepts SMTP from cluster pods
- Kratos SMTP courier pointed at postfix.lasuite.svc.cluster.local:25
- Production overlay: cert-manager ClusterIssuer, ACME-enabled Pingora values
2026-03-01 16:25:11 +00:00
|
|
|
memory: 128Mi
|
2026-02-28 13:42:27 +00:00
|
|
|
|
|
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: valkey
|
|
|
|
|
namespace: data
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: valkey
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 64Mi
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: opensearch
|
|
|
|
|
namespace: data
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: opensearch
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 512Mi
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: seaweedfs-filer
|
|
|
|
|
namespace: storage
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: filer
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 256Mi
|
|
|
|
|
|
2026-02-28 14:02:47 +00:00
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: hydra-hydra-maester
|
|
|
|
|
namespace: ory
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: hydra-maester
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 64Mi
|
|
|
|
|
|
2026-02-28 13:42:27 +00:00
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: login-ui
|
|
|
|
|
namespace: ory
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: login-ui
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 64Mi
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
apiVersion: apps/v1
|
|
|
|
|
kind: Deployment
|
|
|
|
|
metadata:
|
|
|
|
|
name: hive
|
|
|
|
|
namespace: lasuite
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
containers:
|
|
|
|
|
- name: hive
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 64Mi
|