From fc390689e53dc911799c62d7104b12f27024eb85 Mon Sep 17 00:00:00 2001
From: codex <codex@bstein.dev>
Date: Sun, 4 Oct 2026 05:40:08 -0500
Subject: [PATCH] ci: fit serialized builds within healthy worker CPU capacity

---
 Jenkinsfile | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 8e52d5b..cba82e0 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -71,11 +71,12 @@ spec:
   imagePullSecrets:
     - name: harbor-robot-pipeline
   containers:
+    # Serialized builds retain their burst limits with smaller CPU reservations.
     - name: dind
       image: registry.bstein.dev/bstein/docker:27-dind
       resources:
         requests:
-          cpu: "500m"
+          cpu: "250m"
           memory: "512Mi"
         limits:
           cpu: "2000m"
@@ -98,8 +99,8 @@ spec:
       image: registry.bstein.dev/bstein/docker:27
       resources:
         requests:
-          cpu: "250m"
-          memory: "256Mi"
+          cpu: "25m"
+          memory: "128Mi"
         limits:
           cpu: "1000m"
           memory: "512Mi"
@@ -123,7 +124,7 @@ spec:
       image: registry.bstein.dev/bstein/python:3.12-slim
       resources:
         requests:
-          cpu: "250m"
+          cpu: "100m"
           memory: "512Mi"
         limits:
           cpu: "1000m"
@@ -137,7 +138,7 @@ spec:
       image: registry.bstein.dev/bstein/quality-tools:sonar8.0.1-trivy0.70.0-db20260422-arm64
       resources:
         requests:
-          cpu: "500m"
+          cpu: "100m"
           memory: "512Mi"
         limits:
           cpu: "1500m"