From f9609e48ddf66d93929c22eebb9a99099748d1c3 Mon Sep 17 00:00:00 2001 From: alkatrazz Date: Fri, 29 May 2026 15:42:54 +0200 Subject: [PATCH] =?UTF-8?q?fix(k8s/open-webui):=20memory=201Gi=E2=86=922Gi?= =?UTF-8?q?=20(OOMKill=20HuggingFace=20download=20au=20boot)=20fix(ansible?= =?UTF-8?q?/postgresql):=20GRANT=20ALL=20ON=20SCHEMA=20public=20(PostgreSQ?= =?UTF-8?q?L=2015+=20default)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Sonnet 4.6 --- ansible/roles/postgresql/tasks/main.yml | 14 ++++++++++++++ k8s/apps/open-webui/deployment.yaml | 4 ++-- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/ansible/roles/postgresql/tasks/main.yml b/ansible/roles/postgresql/tasks/main.yml index 5732b39..f2e7630 100644 --- a/ansible/roles/postgresql/tasks/main.yml +++ b/ansible/roles/postgresql/tasks/main.yml @@ -139,5 +139,19 @@ loop: "{{ postgresql_users }}" no_log: true +# PostgreSQL 15+ révoque CREATE ON SCHEMA public par défaut +- name: Grant schema public to users (PostgreSQL 15+) + community.postgresql.postgresql_privs: + database: "{{ item.db }}" + privs: ALL + type: schema + objs: public + role: "{{ item.name }}" + state: present + become: true + become_user: postgres + loop: "{{ postgresql_users }}" + no_log: true + # Firewall géré centralement par le rôle gateway (nftables) # Port 5432 ouvert pour cluster_network dans nftables.conf.j2 diff --git a/k8s/apps/open-webui/deployment.yaml b/k8s/apps/open-webui/deployment.yaml index 28458e6..47c48c6 100644 --- a/k8s/apps/open-webui/deployment.yaml +++ b/k8s/apps/open-webui/deployment.yaml @@ -55,10 +55,10 @@ spec: resources: requests: cpu: 200m - memory: 256Mi + memory: 512Mi limits: cpu: 1000m - memory: 1Gi + memory: 2Gi readinessProbe: httpGet: path: /health