fix: add policy resource defaults

[patrickleet]

Summary

• Add Kyverno default requests/limits that match current pat-local Goldilocks/VPA recommendations.
• Add Policy Reporter and UI default requests/limits from current target recommendations.
• Keep the change scoped to Helm values and render tests; no dependency or nodepool changes.

Validation

• make test: 10/10 passed.
• hops config install --path xrs/stacks/k8s/policy: installed dev-184e1a657062 into Colima.
• Colima PolicyStack pat-local: Synced=True Ready=True.
• Colima Helm releases kyverno and policy-reporter: Synced=True Ready=True, State=deployed.
• Target rollouts passed for Kyverno admission/background/cleanup/reports and Policy Reporter/UI.
• Target final resources: Kyverno admission 296m/105Mi limit 1/512Mi; other Kyverno controllers 15m/100Mi limit 100m/256Mi; Policy Reporter and UI 15m/100Mi limit 100m/256Mi.
• Target pods have zero restarts and run on existing hops-spot nodes; no dedicated policy NodePool exists or was added.

[coderabbitai]

Warning

Review limit reached

@patrickleet, we couldn't start this review because you've used your available PR reviews for now.

Your plan includes 1 review of capacity. Refill in 7 minutes and 54 seconds.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more review capacity refills, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than trial, open-source, and free plans. In all cases, review capacity refills continuously over time.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: fe98eecf-fc82-4757-ba5b-734a1b949c84

📥 Commits

Reviewing files that changed from the base of the PR and between 6608f41 and 20a5639.

📒 Files selected for processing (3)

• functions/render/200-kyverno.yaml.gotmpl
• functions/render/210-policy-reporter.yaml.gotmpl
• tests/test-render/main.k

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/policy-resource-defaults

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Published Crossplane Package

The following Crossplane package was published as part of this PR:

Package: ghcr.io/hops-ops/policy-stack:pr-1-85d30ce3828cbe682e192cd4395615467bfc5850

View Package