feat: capacity guard pre-flight + clean public repo of internal references#44
Merged
feat: capacity guard pre-flight + clean public repo of internal references#44
Conversation
syscod3
force-pushed
the
feat/capacity-guard
branch
from
3584955 to
d94faac
Compare
Query live OCI state before planning to catch: - Config errors: tfvars requests more than the per-tenancy limit - Drift: live instances already exceed limit from out-of-band provisioning Checks A1 OCPU, A1 RAM, and E2.1.Micro count independently.
…ternal context - E2.1.Micro is available in both Always Free and PAYG accounts (was wrong) - Block storage limit is 200 GB total per tenancy, not per AD (was wrong) - NLB is fully Always Free — not pay-per-GB (was wrong) - Remove fractional OCPU claim (was an empirical fluke, not a product difference) - Remove all tenancy-specific sections and deployment state - Remove internal cross-references
- terraform.tfvars: strip omni_endpoint and oci_config_profile; rename
node names to generic node-{1..4}; document all sensitive vars as
TF_VAR_ env vars
- terraform.tfvars.example: replace internal profile/endpoint with
generic placeholders (DEFAULT, omni.example.com)
- deploy.yml: OCI config profile → DEFAULT; region from OCI_REGION
secret; omni_endpoint from OMNI_ENDPOINT secret; oci_config_profile
passed as -var flag
- validation.tf, variables.tf: replace internal domain in examples
- mise.toml, cleanup script, docs: replace internal profile with DEFAULT
syscod3
force-pushed
the
feat/capacity-guard
branch
from
d94faac to
79690c1
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
tofu planto prevent accidentally exceeding Always Free limits (A1 OCPU, RAM, Micro count)OCI_REGION,OMNI_ENDPOINT) or generic placeholders throughout all public filesFREE_TIER_RESOURCES.mdremoved from all commits viagit filter-repoNew CI secret required
Add
OCI_REGIONandOMNI_ENDPOINTto repository secrets before merging — the deploy workflow now reads these instead of hardcoding them.Test plan
OCI_REGIONandOMNI_ENDPOINTto repo secrets-varflags🤖 Generated with Claude Code