fix(storage): bound the caches filling each node's /var #174

Merged
jakman85 merged 2 commits from fix/bound-var-ephemeral-caches into main 2026-11-14 21:56:43 +00:00
Showing only changes of commit 89ed1af282 - Show all commits
@@ -65,7 +65,12 @@ evictions).
3584Mi scanner request schedules.
- No Kyverno policy selects the non-app `gitea-actions` namespace for volume shape. None of the
touched paths are in `infra/gitea/approval-policy.json` `sensitive_paths`.
- Toolbox gate: see the PR description for the exact rc and stages that did not run.
- Toolbox gate from this worktree (DEV_KUBECONFIG=/dev/null, ENGINE shim mounting the main
`.git`, spec repo mounted by dev.sh as a sibling), on the committed HEAD: **rc 3, UNDETERMINED,
not green.** "Stages that did not run: gitea-settings". `conformance` (L2/L3) logged SKIPPED, no
cluster. spec-immutability, approval-policy (N/A offline, proves nothing), decisions-log,
lint, l0 (incl. `flux-postbuild-substitution` and `vuln-scanner-supply-chain` PASS),
render-golden and l1 green.
## What I did NOT verify