From 971c730400dcc01fb71c8e32de7e88908053b5a9 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Tue, 25 Aug 2026 09:29:29 -0500 Subject: [PATCH] chore(memory): temp-disable KubeVirt to relieve node memory pressure MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The 3x 6GB nodes are OOM (k3s-dev-2's kubelet stopped; dev-1/dev-3 <600MB free). KubeVirt runs a full control plane (~1.5-2GB) for ZERO running VMs — its IaaS conformance (R-PLAT-03/04, R-NET-01, R-STATE-01) is already certified, so disabling the running pods loses no delivered capability. Re-enable (uncomment kubevirt in platform + platform-config) once the VMs' RAM is grown. Manifests retained; reversible. --- platform-config/kustomization.yaml | 10 +++++----- platform/kustomization.yaml | 3 ++- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/platform-config/kustomization.yaml b/platform-config/kustomization.yaml index c7c910f..c264f59 100644 --- a/platform-config/kustomization.yaml +++ b/platform-config/kustomization.yaml @@ -35,11 +35,11 @@ resources: # operators register; the ServiceMonitors/alerts consume monitoring.coreos.com. All CRs of platform- # installed CRDs -> applied here, gated dependsOn platform (F-MON1). The dashboard is a plain # ConfigMap kept beside them for locality. - - ../platform/kubevirt/kubevirt-cr.yaml - - ../platform/kubevirt/cdi-cr.yaml - - ../platform/kubevirt/servicemonitor.yaml - - ../platform/kubevirt/alerts.yaml - - ../platform/kubevirt/dashboard.yaml + # TEMP-DISABLED (memory): - ../platform/kubevirt/kubevirt-cr.yaml + # TEMP-DISABLED (memory): - ../platform/kubevirt/cdi-cr.yaml + # TEMP-DISABLED (memory): - ../platform/kubevirt/servicemonitor.yaml + # TEMP-DISABLED (memory): - ../platform/kubevirt/alerts.yaml + # TEMP-DISABLED (memory): - ../platform/kubevirt/dashboard.yaml # --- Phase 6 — Identity / SSO (ADR-0014) --- # keycloak: the CNPG DB Cluster + Keycloak instance + realm import (CRs of the CNPG / Keycloak # operator CRDs installed by platform/cnpg + platform/keycloak) + its ingress + ServiceMonitor. diff --git a/platform/kustomization.yaml b/platform/kustomization.yaml index a851ce9..5c3e03a 100644 --- a/platform/kustomization.yaml +++ b/platform/kustomization.yaml @@ -37,4 +37,5 @@ resources: # - image-automation # Phase 4 (Automated updates): Flux image-automation + Renovate # ---- Phase 5 — IaaS proof (KubeVirt): operator CONTROLLERS only; the KubeVirt/CDI CRs + # ServiceMonitors/alerts/dashboard are applied by platform-config (dependsOn platform, F-MON1). ---- - - kubevirt # KubeVirt + CDI operators (register kubevirt.io / cdi.kubevirt.io CRDs) + # TEMP-DISABLED (memory relief; KubeVirt conformance already certified — re-enable when RAM grows): + # - kubevirt # KubeVirt + CDI operators (register kubevirt.io / cdi.kubevirt.io CRDs)