bitforge/orchard
3
0
Fork 0
Code Projects Wiki Activity

Use v3 deploy.resources.limits format for docker-compose

Browse Source 
- Convert mem_limit/cpus to deploy.resources.limits.memory/cpus
- Use proper v3 format that KICS recognizes
- Remove KICS exceptions for CPU/Memory limits (no longer needed)
- All services now have explicit resource constraints
This commit is contained in:
Mondo Diaz
2026-01-14 19:37:12 +00:00
parent 53c1f6a1dd
commit 8065f881f3
3 changed files with 50 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
kics.config
View File

@@ -23,13 +23,3 @@ exclude-queries:
# Reason: We intentionally don't pin curl version to get security updates.
# This is documented with hadolint ignore comment in Dockerfile.
- 965a08d7-ef86-4f14-8792-4a3b2098937e
# Cpus Not Limited (LOW)
# Reason: Local development docker-compose files. Resource limits are set in
# production Kubernetes deployments via Helm values, not docker-compose.
- 6b610c50-99fb-4ef0-a5f3-e312fd945bc3
# Memory Not Limited (MEDIUM)
# Reason: Local development docker-compose files. Resource limits are set in
# production Kubernetes deployments via Helm values, not docker-compose.
- bb9ac4f7-e13b-423d-a010-c74a1bfbe492