tegwick
b7fb7b226f
- coulomb-social: requests 100m/256Mi -> 15m/176Mi (limits unchanged)
- reuse-surface: main 100m/256Mi -> 5m/64Mi, landing 10m/32Mi -> 5m/16Mi
- vergabe-demo-company: memory request 256Mi -> 512Mi, CPU 60m kept
- inter-hub (retired, CORE-WP-0007): delete chart, values, Make targets,
smoke script and production deploy workflow; release to be uninstalled
Full renders vs live: resources only, except the vergabe release-unit label
from 64530e1 not yet on its Service and PVCs.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 276069@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
50 lines
1.6 KiB
YAML
50 lines
1.6 KiB
YAML
# Production overrides for coulomb-social.
|
|
# Non-secret values only. Secrets live in K8s Secret coulomb-social-env.
|
|
|
|
image:
|
|
repository: forgejo.coulomb.social/coulomb/coulomb-social
|
|
tag: "dd83c90"
|
|
digest: "sha256:9a646d8e01a61ba5316d3c2eb0273064e17f2d0300ad07af766ccedda65ecb18"
|
|
|
|
# Public host: app.coulomb.social (parallel to Bubble on apex coulomb.social).
|
|
# Apex cutover is deferred until data + self-registration are ready.
|
|
env:
|
|
DJANGO_SETTINGS_MODULE: coulomb_social.settings.prod
|
|
ALLOWED_HOSTS: app.coulomb.social,localhost
|
|
CSRF_TRUSTED_ORIGINS: https://app.coulomb.social
|
|
CONTENT_ROOT: /app/var/content
|
|
DEFAULT_TENANT_ID: "tenant:coulomb"
|
|
OIDC_ENABLED: "true"
|
|
OIDC_ISSUER: https://kc.coulomb.social
|
|
OIDC_CLIENT_ID: coulomb-social
|
|
OIDC_REDIRECT_URI: https://app.coulomb.social/auth/callback/
|
|
OIDC_SCOPES: "openid profile email groups"
|
|
USER_ENGINE_BASE_URL: https://users.coulomb.social
|
|
USER_ENGINE_APPLICATION_ID: coulomb-social
|
|
USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
|
|
NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register
|
|
|
|
probes:
|
|
hostHeader: app.coulomb.social
|
|
path: /healthz
|
|
|
|
# One writable local-path volume; Recreate prevents concurrent old/new writers.
|
|
replicaCount: 1
|
|
deploymentStrategy: Recreate
|
|
persistence:
|
|
content:
|
|
enabled: true
|
|
storageClass: local-path
|
|
size: 2Gi
|
|
mountPath: /app/var/content
|
|
retain: true
|
|
|
|
# Wave-2 right-sizing (CSOC-WP-0017-T01, 2026-10-21 node budget): 7d p95
|
|
# 0.4m CPU / 146Mi. Limits stay at the chart defaults (1000m/1Gi).
|
|
resources:
|
|
requests:
|
|
cpu: 15m
|
|
memory: 176Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|