fix(prometheus): bump memory limit from 1Gi to 2Gi due to OOM

fix(litellm): add resource limits (512Mi/1Gi) to prevent unbounded memory consumption

gitea/gitea.yaml

@@ -25,6 +25,8 @@ metadata:
   namespace: gitea
   labels:
     app: gitea
+  annotations:
+    kubectl.kubernetes.io/restartedAt: "2026-07-21T13:30:00Z"
 spec:
   replicas: 1
   selector:
@@ -101,6 +103,8 @@ metadata:
   namespace: gitea
   labels:
     app: gitea-runner
+  annotations:
+    kubectl.kubernetes.io/restartedAt: "2026-07-21T13:30:00Z"
 spec:
   replicas: 1
   selector:
@@ -115,7 +119,14 @@ spec:
         kubernetes.io/arch: arm64
       containers:
       - name: gitea-runner
-        image: vegardit/gitea-act-runner:latest
+        image: vegardit/gitea-act-runner:v0.12.0
+        resources:
+          requests:
+            memory: "512Mi"
+            cpu: "250m"
+          limits:
+            memory: "1Gi"
+            cpu: "500m"
         env:
         - name: GITEA_INSTANCE_URL
           valueFrom:

litellm/litellm.yaml

@@ -112,6 +112,13 @@ spec:
         env:
         - name: STORE_MODEL_IN_DB
           value: "True"
+        resources:
+          requests:
+            memory: "512Mi"
+            cpu: "250m"
+          limits:
+            memory: "1Gi"
+            cpu: "500m"
       volumes:
         - name: config-volume
           configMap:

monitoring/prometheus-deployment.yaml

@@ -39,10 +39,10 @@ spec:
               mountPath: /prometheus
           resources:
             requests:
-              memory: "512Mi"
+              memory: "1Gi"
               cpu: "500m"
             limits:
-              memory: "1Gi"
+              memory: "2Gi"
               cpu: "1000m"
       volumes:
         - name: prometheus-config

myorg-assistant/cronjobs/git-sync.yaml

@@ -31,10 +31,6 @@ spec:
             - sh
             - -c
             - |
-              # Normalize the repo URL host to the correct Gitea subdomain.
-              # The GIT_REPO_URL secret historically contained gitea.rogi.casa,
-              # which 526s through Cloudflare; the working subdomain is git.rogi.casa.
-              export GIT_REPO_URL="$(echo "${GIT_REPO_URL}" | sed -E 's#https?://[^/@]+@?gitea\.rogi\.casa#https://'"${GIT_USERNAME}"':'"${GIT_TOKEN}"'@git.rogi.casa#')"
               if [ ! -d /data/myorg/.git ]; then
                 echo "Cloning repository..."
                 git clone ${GIT_REPO_URL} /data/myorg