fix(storage): bound the caches filling each node's /var #174

Merged

jakman85 merged 2 commits from fix/bound-var-ephemeral-caches into main

2026-11-14 21:56:43 +00:00

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	89ed1af282	docs(decisions): record gate result for bound-var-ephemeral-caches gate / gate (pull_request) Successful in 56s Details gate / conformance (pull_request) Skipped Details Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-14 14:16:04 -06:00
jakman85andClaude Opus 5.5	3ae7fb74f8	fix(storage): bound the caches filling each node's /var The act-runner's Docker cache was an unbounded emptyDir on the 11.6 GiB /var partition and evicted k3s-prod-2 on 2026-11-12. It moves to a generic ephemeral volume on longhorn-scratch (off /var, pod-lifetime, single replica), with a threshold-triggered docker prune and Velero opt-out. vuln-scanner's cache sizeLimit and ephemeral-storage limit are cut to fit the partition, and it prefers not to share a node with buildkitd. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-14 14:15:00 -06:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5.5

89ed1af282

docs(decisions): record gate result for bound-var-ephemeral-caches

gate / gate (pull_request) Successful in 56s

Details

gate / conformance (pull_request) Skipped

Details

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-11-14 14:16:04 -06:00

jakman85andClaude Opus 5.5

3ae7fb74f8

fix(storage): bound the caches filling each node's /var

The act-runner's Docker cache was an unbounded emptyDir on the 11.6 GiB
/var partition and evicted k3s-prod-2 on 2026-11-12. It moves to a
generic ephemeral volume on longhorn-scratch (off /var, pod-lifetime,
single replica), with a threshold-triggered docker prune and Velero
opt-out. vuln-scanner's cache sizeLimit and ephemeral-storage limit are
cut to fit the partition, and it prefers not to share a node with
buildkitd.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-11-14 14:15:00 -06:00