From 98a6878d5945d299d3a8670dd511b236ddacc3ed Mon Sep 17 00:00:00 2001
From: gunshiz <spsshop1047@gmail.com>
Date: Fri, 9 Oct 2026 19:22:20 +0700
Subject: [PATCH] fix(deploy) : fit web CPU reservations to cluster capacity

---
 .gitea/workflows/ci.yml           | 4 ++++
 k8s/base/deployment.yaml          | 2 +-
 tests/deployment-contract.test.ts | 7 ++++++-
 3 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 84ddbb2..2ec2d75 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -174,6 +174,10 @@ jobs:
           kubectl --kubeconfig "$KUBECONFIG" --namespace "$DEPLOY_NAMESPACE" patch deployment buzz-sheet \
             --type=merge \
             --patch '{"spec":{"strategy":{"type":"RollingUpdate","rollingUpdate":{"maxSurge":0,"maxUnavailable":1}}}}'
+          kubectl --kubeconfig "$KUBECONFIG" --namespace "$DEPLOY_NAMESPACE" set resources deployment/buzz-sheet \
+            --containers=app \
+            --requests=cpu=200m,memory=1Gi \
+            --limits=cpu=1,memory=2Gi
           kubectl --kubeconfig "$KUBECONFIG" --namespace "$DEPLOY_NAMESPACE" set image \
             deployment/buzz-sheet \
             app="$REGISTRY_IMAGE:$REVISION"
diff --git a/k8s/base/deployment.yaml b/k8s/base/deployment.yaml
index df08c40..986e3e5 100644
--- a/k8s/base/deployment.yaml
+++ b/k8s/base/deployment.yaml
@@ -169,7 +169,7 @@ spec:
                   optional: true
           resources:
             requests:
-              cpu: 500m
+              cpu: 200m
               memory: 1Gi
             limits:
               cpu: "1"
diff --git a/tests/deployment-contract.test.ts b/tests/deployment-contract.test.ts
index ceaa5e6..0243253 100644
--- a/tests/deployment-contract.test.ts
+++ b/tests/deployment-contract.test.ts
@@ -16,7 +16,7 @@ describe("production deployment contract", () => {
     expect(deployment.match(/path: \/api\/healthz\n/gu)).toHaveLength(3);
     expect(deployment).toContain("kubernetes.io/arch: arm64");
     expect(deployment).toMatch(
-      /requests:\s+cpu: 500m\s+memory: 1Gi\s+limits:\s+cpu: "1"\s+memory: 2Gi/u,
+      /requests:\s+cpu: 200m\s+memory: 1Gi\s+limits:\s+cpu: "1"\s+memory: 2Gi/u,
     );
     expect(deployment).toContain("runAsNonRoot: true");
     expect(deployment).toContain("runAsUser: 1000");
@@ -148,6 +148,11 @@ describe("production deployment contract", () => {
     const patchRolloutStrategy = workflow.indexOf("patch deployment buzz-sheet");
     expect(patchRolloutStrategy).toBeGreaterThan(-1);
     expect(patchRolloutStrategy).toBeLessThan(workflow.indexOf("set image"));
+    expect(workflow).toContain("--requests=cpu=200m,memory=1Gi");
+    expect(workflow).toContain("--limits=cpu=1,memory=2Gi");
+    const setResources = workflow.indexOf("set resources deployment/buzz-sheet");
+    expect(setResources).toBeGreaterThan(-1);
+    expect(setResources).toBeLessThan(workflow.indexOf("set image"));
     const deleteMigrationJob = workflow.indexOf(
       'delete job buzz-sheet-migrate --ignore-not-found',
     );