Skip to content

chore(k8s): hold off pipelines in dev (replicaCount=0)#30

Open
thatcatfromspace wants to merge 1 commit into
mainfrom
chore/hold-off-dev-replicas
Open

chore(k8s): hold off pipelines in dev (replicaCount=0)#30
thatcatfromspace wants to merge 1 commit into
mainfrom
chore/hold-off-dev-replicas

Conversation

@thatcatfromspace

@thatcatfromspace thatcatfromspace commented Jun 9, 2026

Copy link
Copy Markdown

Summary

  • Set replicaCount: 0 in k8s/dev/values.yaml so the dev Deployment scales to zero.
  • Pipelines is not required to be operational in dev right now and recent rollouts have been failing health checks — scaling to zero keeps ArgoCD reconciling cleanly without churning unhealthy pods.
  • HPA is disabled in the base chart (and not enabled by the dev overlay), so replicaCount: 0 is not overridden.

To bring the service back: set replicaCount: 1 (or remove the override) and resync the ArgoCD app.

Test plan

  • helm lint k8s/chart -f k8s/dev/values.yaml clean
  • After merge, confirm ArgoCD pipelines app reports Healthy with 0/0 pods

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

Greptile Summary

Sets replicaCount: 0 in the dev Helm overlay to scale the pipelines Deployment to zero while health checks are stabilising in dev. No code, schema, or API changes are included.

  • Adds a single replicaCount: 0 line to k8s/dev/values.yaml with an inline comment explaining the hold-off and how to reverse it.
  • The dev-only overlay means prod and staging are unaffected; the base chart's HPA is not enabled for dev, so the zero replica count is not overridden at runtime.

Confidence Score: 5/5

Safe to merge — single-line Helm overlay change affecting only the dev environment with no impact on production or staging.

The change touches one value in a dev-only Helm overlay. It scales the dev Deployment to zero, which is intentional and documented. Prod and staging are unaffected. The comment in the file and the PR description both explain the rationale and how to reverse it.

No files require special attention.

Important Files Changed

Filename Overview
k8s/dev/values.yaml Adds replicaCount: 0 to scale the dev deployment to zero; change is minimal, well-commented, and scoped only to the dev overlay.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[ArgoCD reconcile loop] --> B{replicaCount in dev overlay}
    B -- "0 (current)" --> C[Deployment scaled to 0 pods]
    C --> D[ArgoCD reports Healthy — no pods churning]
    B -- "1 (to restore)" --> E[Deployment scaled to 1 pod]
    E --> F[Readiness probe passes?]
    F -- Yes --> G[Pod Running / ArgoCD Healthy]
    F -- No --> H[Pod fails health check / ArgoCD Degraded]
Loading

Reviews (1): Last reviewed commit: "chore(k8s): hold off pipelines in dev (r..." | Re-trigger Greptile

Service health has been degrading in dev and pipelines is not required
to be operational at this stage. Scale the dev Deployment to zero so
the ArgoCD app keeps reconciling cleanly without churning unhealthy
pods. Flip replicaCount back to 1 (or drop the line) to resume.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
sumit-badsara pushed a commit that referenced this pull request Jul 10, 2026
…imeouts

- Container securityContext: drop ALL caps + allowPrivilegeEscalation:false +
  seccomp RuntimeDefault (NOT runAsNonRoot — image runs as root and writes
  PIPELINES_DIR). Restores hardening for the plugin-execution service
  (greptile + cursor HIGH).
- externalSecret.enabled defaults TRUE — pod always gets PIPELINES_API_KEY from
  SM, never the 0p3n-w3bu! fallback (greptile). `required` guard on remoteKey
  (greptile "empty key renders") and on image.repository (greptile "empty image").
- id-token:write scoped to the build-and-deploy job, not workflow-global — PR
  runs / the resolve job never receive it (cursor HIGH: PR-branch cred theft).
- dev overlay autoscaling.enabled=false so the held-off dev (PR #30, replicas 0)
  doesn't get scaled back up by the now-default HPA (cursor).
- rollout status timeout 10m->15m and job timeout 30->60m for the heavy
  torch/transformers image + ML cold starts (cursor x2).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant