chore: right-size self-cadvisor resource limits

Author: NikolayS

docker-compose.yml

@@ -306,8 +306,8 @@ services:
   self-cadvisor:
     image: ghcr.io/google/cadvisor:0.56.2
     container_name: self-cadvisor
-    cpus: 0.15
-    mem_limit: 192m
+    cpus: 0.25
+    mem_limit: 402653184
     privileged: true
     volumes:
       - /:/rootfs:ro

postgres_ai_helm/values.yaml

@@ -140,7 +140,13 @@ cadvisor:
   # registry convention, unlike other images here).
   enabled: false
   image: ghcr.io/google/cadvisor:0.56.2
-  resources: {}
+  resources:
+    requests:
+      cpu: 100m
+      memory: 192Mi
+    limits:
+      cpu: 250m
+      memory: 384Mi
 
 monitoredDatabases:
   # Example: Database with default cluster/node from global settings

tests/compliance_vectors/test_cadvisor_resources.py

@@ -0,0 +1,36 @@
+"""Resource contract tests for the self-cadvisor container."""
+
+import os
+
+import yaml
+
+
+PROJECT_ROOT = os.path.abspath(os.path.join(os.path.dirname(__file__), '..', '..'))
+EXPECTED_MEMORY_BYTES = 402653184  # 384 MiB
+
+
+def _load_yaml(*parts):
+    with open(os.path.join(PROJECT_ROOT, *parts)) as f:
+        return yaml.safe_load(f)
+
+
+def test_docker_compose_cadvisor_resources_match_expected_limits():
+    compose = _load_yaml('docker-compose.yml')
+    cadvisor = compose['services']['self-cadvisor']
+
+    assert cadvisor['cpus'] == 0.25
+    assert cadvisor['mem_limit'] == EXPECTED_MEMORY_BYTES
+
+
+def test_helm_cadvisor_resources_match_expected_requests_and_limits():
+    values = _load_yaml('postgres_ai_helm', 'values.yaml')
+    resources = values['cadvisor']['resources']
+
+    assert resources['requests'] == {
+        'cpu': '100m',
+        'memory': '192Mi',
+    }
+    assert resources['limits'] == {
+        'cpu': '250m',
+        'memory': '384Mi',
+    }