tegwick
36465de299
Chart default request 25m/32Mi -> 5m/20Mi (user-engine, tenant-engine, ops-warden, ops-warden-fetch, secrets-engine); overrides keep 5m CPU with memory by 7d p95 x1.15: application-readback 24Mi, informed-decision-lifecycle 24Mi, informed-decision-sitting 40Mi (p95 35Mi, up from 32Mi), informed-decision-t03 16Mi. Limits unchanged. Evidence: resource-control 2026-10-21 node budget (3d9b1bd). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 276069@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
25 lines
810 B
YAML
25 lines
810 B
YAML
# Operator-admitted exact T03 human review, SECRETS-WP-0010-T03.
|
|
# CI image of d5c9109 (memo version 3, IR-WP-0005-T02).
|
|
name: flex-auth-informed-decision-t03
|
|
image:
|
|
repository: forgejo.coulomb.social/coulomb/flex-auth
|
|
digest: sha256:6600c7a62c36dfb4fbb42590722613827d07ff49875b1f0f4b5de63d8351658d
|
|
args:
|
|
- serve
|
|
- --addr
|
|
- 0.0.0.0:8080
|
|
- --registry
|
|
- /opt/flex-auth/examples/informed-decision-t03/registry.json
|
|
- --policy
|
|
- /opt/flex-auth/examples/informed-decision-t03/policy.md
|
|
callerAuth:
|
|
mode: enforce
|
|
kubernetesURL: https://10.43.0.1
|
|
binding: informed-decision=system:serviceaccount:informed-decision:review
|
|
consumer:
|
|
isolated: false
|
|
namespace: informed-decision
|
|
podName: informed-decision
|
|
resources:
|
|
requests: {cpu: 5m, memory: 16Mi}
|
|
limits: {cpu: 300m, memory: 192Mi}
|