# PROPOSAL ONLY — DO NOT APPLY without owner sign-off + a maintenance window
systemReserved:   { cpu: "200m", memory: "300Mi" }   # k3s + containerd + sshd + OS
kubeReserved:     { cpu: "100m", memory: "200Mi" }   # kubelet itself
evictionHard:     { memory.available: "400Mi", nodefs.available: "10%" }   # ~10% of 3.8Gi
evictionSoft:     { memory.available: "600Mi" }
evictionSoftGracePeriod: { memory.available: "1m30s" }

#!/usr/bin/env bash
# Pre-deploy guardrail: abort if projected node requests exceed 90% of allocatable.
set -euo pipefail
CEIL=90
ALLOC_CPU=$(kubectl get node -o jsonpath='{.items[0].status.allocatable.cpu}')      # e.g. "2"
ALLOC_MEM=$(kubectl get node -o jsonpath='{.items[0].status.allocatable.memory}')   # e.g. "3977664Ki"
# sum current requests across all namespaces (millicores / Mi)
CUR_CPU=$(kubectl describe node | awk '/cpu  *[0-9]+m \([0-9]+%\)/{print}' )  # parse Allocated block
# ... compute current % from `kubectl describe node` "Allocated resources" block,
#     add THIS release's requests (helm template | parse resources.requests),
#     fail if (current + delta) / allocatable * 100 > CEIL.
echo "Projected CPU ${PCT_CPU}% / MEM ${PCT_MEM}% (ceiling ${CEIL}%)"
if (( PCT_CPU > CEIL || PCT_MEM > CEIL )); then
  echo "::error::Deploy aborted — would exceed ${CEIL}% node allocation. Right-size requests or free capacity."
  exit 1
fi