Automation Safety and Operations

​

Safety Controls

• Webhook health gating
• HPA and VPA compatibility filters
• LimitRange and ResourceQuota checks
• Node headroom checks
• Readiness and rollout safety checks
• Protected namespace patterns
• Policy- and scope-based workload inclusion checks

​

Global Runtime Controls

• Recommendation refresh cadence
• Pod rescan cadence
• Mutation and snapshot upload intervals
• Automation on/off switch
• Webhook health thresholds
• Protected namespace patterns

​

Pause and Control Patterns

• Global disable through globalConfiguration.automationEnabled
• Targeted exclusions via scope and selectors
• Annotation-based per-pod pause behaviors
• Temporary learning-window pauses after workload changes

​

Execution Paths

• In-place resize when supported by cluster version and policy
• Eviction/restart fallback path when in-place resize cannot be applied

​

Diagnostics for Runtime Safety

kubectl get globalconfiguration global-config -o yaml
kubectl get events -A --field-selector reason=PrecheckFailed
kubectl logs -n kubex -l control-plane=controller-manager -c manager --since=10m | grep 'rightsizing summary'

​

Source References

• Advanced Configuration: https://github.com/densify-dev/helm-charts/blob/master/charts/kubex-automation-engine/docs/Advanced-Configuration.md
• Safety Controls Reference: https://github.com/densify-dev/helm-charts/blob/master/charts/kubex-automation-engine/docs/Safety-Controls.md
• Global Configuration: https://github.com/densify-dev/helm-charts/blob/master/charts/kubex-automation-engine/docs/Global-Configuration.md
• RBAC Permissions: https://github.com/densify-dev/helm-charts/blob/master/charts/kubex-automation-engine/docs/RBAC-Guide.md