From ffabf14d86a7c500032c0ebdf22392c3b2cc57bf Mon Sep 17 00:00:00 2001
From: Andy Meier <andy@meiermade.com>
Date: Thu, 9 Apr 2026 18:19:16 -0400
Subject: [PATCH] add container resource limits

---
 pulumi/src/k8s/deployment.ts | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pulumi/src/k8s/deployment.ts b/pulumi/src/k8s/deployment.ts
index e78ad7d..c6105cf 100644
--- a/pulumi/src/k8s/deployment.ts
+++ b/pulumi/src/k8s/deployment.ts
@@ -66,6 +66,10 @@ const deployment = new k8s.apps.v1.Deployment('app', {
                         securityContext: containerSecurityContext,
                         imagePullPolicy: 'IfNotPresent',
                         envFrom: [{ secretRef: { name: appSecret.metadata.name } }],
+                        resources: {
+                            requests: { cpu: '25m', memory: '64Mi' },
+                            limits: { cpu: '250m', memory: '256Mi' },
+                        },
                         volumeMounts: [{ name: 'app-data', mountPath: '/data' }],
                         livenessProbe: {
                             httpGet: {
@@ -92,6 +96,10 @@ const deployment = new k8s.apps.v1.Deployment('app', {
                             'run'
                         ],
                         envFrom: [{ secretRef: { name: cloudflaredSecret.metadata.name } }],
+                        resources: {
+                            requests: { cpu: '10m', memory: '32Mi' },
+                            limits: { cpu: '100m', memory: '128Mi' },
+                        },
                         livenessProbe: {
                             httpGet: { path: '/ready', port: 2000 },
                             failureThreshold: 1,