commit 3d64caf7bfe3ad5fef6c2c3d0e048dca9ca1aeec
author Matthias Andreas Benkard <code@mail.matthias.benkard.de> Wed Nov 04 11:43:54 2026 +0100
committer Matthias Andreas Benkard <code@mail.matthias.benkard.de> Wed Nov 04 11:43:54 2026 +0100
tree f54e021fb5eba06a30a96dc78efba8523a8342bb
parent 38590bb869790d9af9a77b52313aebf4a88fb6d8

Reduce CPU load on ifirn.

- gerrit: Raise memory limit to 1536Mi and heap to 768m to end the
  OOM crash loop (~14.8k restarts).  Sync image (3.8.2-1) and the
  reindex init container with the deployed state.
- ingress-nginx: Rate-limit crawlers per bot family (10 r/m, burst
  20, 429).  Sync proxy-buffer-size with the deployed value (64k).
- renovate: Suspend (failing with "Authentication failure" since
  2025-07); disable job retries.
- gitlab: Pin mailroom HPA to one replica.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Change-Id: Iee1ca510fbb80b53d0a1ae424f55d4d1d94c1e38

gitlab-system/gitlab.yaml

diff --git a/gitlab-system/gitlab.yaml b/gitlab-system/gitlab.yaml
index 28c5f64..a389b17 100644
--- a/gitlab-system/gitlab.yaml
+++ b/gitlab-system/gitlab.yaml
@@ -144,6 +144,10 @@
               secretName: gitlab-kas-tls
           minReplicas: 1
           maxReplicas: 1
+        mailroom:
+          hpa:
+            minReplicas: 1
+            maxReplicas: 1
         sidekiq:
           #replicas: 1
           minReplicas: 1