From b3bab07ce8e68e787c59893a179a665331eea871 Mon Sep 17 00:00:00 2001
From: Mondo Diaz <armando.m.diaz@boeing.com>
Date: Thu, 15 Jan 2026 19:48:02 +0000
Subject: [PATCH] Add resource limits to PostgreSQL and MinIO subcharts for
 Kyverno compliance

---
 helm/orchard/values-dev.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/helm/orchard/values-dev.yaml b/helm/orchard/values-dev.yaml
index f419953..b589954 100644
--- a/helm/orchard/values-dev.yaml
+++ b/helm/orchard/values-dev.yaml
@@ -128,6 +128,14 @@ postgresql:
   primary:
     persistence:
       enabled: false
+    # Resources with memory requests = limits per cluster policy
+    resources:
+      limits:
+        cpu: 250m
+        memory: 256Mi
+      requests:
+        cpu: 100m
+        memory: 256Mi
 
 # MinIO - ephemeral, no persistence
 minio:
@@ -143,6 +151,14 @@ minio:
   defaultBuckets: "orchard-artifacts"
   persistence:
     enabled: false
+  # Resources with memory requests = limits per cluster policy
+  resources:
+    limits:
+      cpu: 250m
+      memory: 256Mi
+    requests:
+      cpu: 100m
+      memory: 256Mi
 
 # MinIO ingress - hostname overridden by CI
 minioIngress: