the-custodian/docs/evidence/2026-09-28-allocation-reconcile.md
codex db91818e84
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 3s
Python Tests / pytest (push) Successful in 25s
Advance supervised agent records and close verified Secret annotation guard
2026-09-28 18:15:27 +02:00

5.5 KiB

Railiance allocation reconcile — 2026-09-28T12:30:20Z

CUST-WP-0071-T01. Scheduler-effective requests from the Kubernetes API via railiance-cluster observe (RCLUSTER-WP-0014 / RAIL-BS-WP-0014). Host and cluster are the same 4 vCPU and are counted once.

  • Capacity: 4000m
  • Scheduled requests: 3420m
  • Pending unscheduled: 0m
  • Residual (not a guarantee): 580m
  • Unknown namespaces: none
  • Zero-request workloads: 12
Namespace Workload Owner Tenant CPU request (m) Pods
state-hub railiance-apps state-hub unknown 260 2
core-hub rapp-core-hub core-hub unknown 200 3
databases forgejo-db rapp-postgres unknown 200 1
sso net-kingdom-sso-mfa net-kingdom unknown 150 4
knative-serving knative-serving rail-knative unknown 140 4
flex-auth flex-auth flex-auth unknown 110 6
mfa net-kingdom-sso-mfa net-kingdom unknown 110 1
reuse reuse-surface reuse-surface unknown 110 2
activity-core activity-core activity-core unknown 100 10
cnpg-system cloudnative-pg rapp-postgres unknown 100 1
coulomb-social coulomb-social coulomb-social unknown 100 1
databases apps-pg rapp-postgres unknown 100 1
databases net-kingdom-pg rapp-postgres unknown 100 1
databases platform-pg rapp-postgres unknown 100 1
databases platform-pg-2 rapp-postgres unknown 100 1
forgejo gitea railiance-forge unknown 100 1
kube-system coredns-7bdb54f89 railiance-cluster unknown 100 1
kube-system metrics-server-786d997795 railiance-cluster unknown 100 1
openbao openbao railiance-platform unknown 100 1
telemetry prometheus rapp-telemetry unknown 100 1
user-engine user-engine-pg user-engine unknown 100 1
telemetry grafana rapp-telemetry unknown 70 1
vergabe-demo-company vergabe-teilnahme railiance-apps unknown 60 1
argocd argocd-application-controller railiance-enablement unknown 50 1
audit-core audit-core audit-core unknown 50 1
coulomb ihp-railiance-probe unknown unknown 50 1
issue-core issue-core issue-core unknown 50 1
kourier-system 3scale-kourier-gateway rail-knative unknown 50 1
target-revenue target-revenue target-revenue unknown 50 1
user-engine user-engine user-engine unknown 50 1
knative-serving net-kourier-controller rail-knative unknown 30 1
argocd argocd-repo-server railiance-enablement unknown 25 1
canned-prompts canned-prompts canned-prompts unknown 25 1
email-connect email-connect email-connect unknown 25 1
openbao rapp-openbao railiance-platform unknown 25 1
rein-aharness rein-aharness rein-aharness unknown 25 1
sbom-nexus sbom-nexus sbom-nexus unknown 25 1
telemetry alertmanager rapp-telemetry unknown 25 1
telemetry kube-state-metrics rapp-telemetry unknown 25 1
telemetry rapp-telemetry rapp-telemetry unknown 25 1
tenant-engine tenant-engine tenant-engine unknown 25 1
rapp-qonto-egress qonto-egress-proxy rapp-qonto tenant:friendly:binky 20 1
activity-core actcore-temporal-ui-tls-2-1888679036-1756117428 activity-core unknown 10 1
approval-engine approval-engine approval-engine unknown 10 1
argocd argocd-applicationset-controller railiance-enablement unknown 10 1
argocd argocd-redis railiance-enablement unknown 10 1
policy-nexus policy-nexus policy-nexus unknown 10 1
bao-notice bao-notice railiance-platform unknown 5 1
informed-decision informed-decision informed-decision unknown 5 1
cert-manager cainjector railiance-cluster unknown 0 1
cert-manager cert-manager railiance-cluster unknown 0 1
cert-manager webhook railiance-cluster unknown 0 1
databases state-hub-db rapp-postgres unknown 0 1
external-secrets external-secrets railiance-platform unknown 0 1
external-secrets external-secrets-cert-controller railiance-platform unknown 0 1
external-secrets external-secrets-webhook railiance-platform unknown 0 1
forgejo forgejo-runner railiance-forge unknown 0 1
kube-system local-path-provisioner railiance-cluster unknown 0 1
kube-system svclb-traefik-0c8aecaf railiance-cluster unknown 0 1
kube-system traefik railiance-cluster unknown 0 1
target-revenue target-revenue-pg target-revenue unknown 0 1

STATE-WP-0091 preflight

  • ok: True
  • remaining_cpu_m: 580
  • note: Aggregate remaining millicores is not a kube-scheduler guarantee.
  • note: Preflight does not lower requests and does not start Helm.

Signal notes

  • Host resource:hosteurope:railiance01 and cluster resource:railiance:reef-railiance:k3s are the same 4 vCPU; do not add them.
  • Prometheus namespace_cpu:kube_pod_container_resource_requests:sum omitted Forgejo 100m on 2026-09-11; Kubernetes API is the scheduler-effective source.
  • node-exporter was disabled; host CPU usage is not a reservation and is not treated as spare capacity.
  • Zero-request pods are demand, not zero. Missing metrics are listed as gaps, not zeros.
  • STATE-WP-0091 preflight consumes state_hub_preflight_observation; residual millicores are not admission.