From fcc4f1e9c9143628c7550480494b9c7d3ccbf9b8 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Tue, 28 Jul 2026 18:13:25 +1000
Subject: [PATCH] authentik: raise CNPG postgres memory to stop replica
 OOMKills

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
---
 apps/base/authentik/cnpg_cluster.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/apps/base/authentik/cnpg_cluster.yaml b/apps/base/authentik/cnpg_cluster.yaml
index 350c55a..a7490f7 100644
--- a/apps/base/authentik/cnpg_cluster.yaml
+++ b/apps/base/authentik/cnpg_cluster.yaml
@@ -106,10 +106,12 @@ spec:
   resources:
     limits:
       cpu: 500m
-      memory: 512Mi
+      # 512Mi OOMKilled replicas under load (shared_buffers 128MB +
+      # max_connections 200 leave no headroom) — see incident 2026-07-28.
+      memory: 1Gi
     requests:
       cpu: 50m
-      memory: 256Mi
+      memory: 512Mi
   smartShutdownTimeout: 180
   startDelay: 3600
   stopDelay: 1800
-- 
2.47.3