Api tuning 3

[ben851]

What happens when your PR merges?

Bring API pods back in staging back in spec with prod.

What are you changing?

• Releasing a new version of Notify
• Changing kubernetes configuration

Provide some background on the changes

https://app.zenhub.com/workspaces/notify-planning-core-6411dfb7c95fb80014e0cab0/issues/gh/cds-snc/notification-planning-core/770

After merging this PR

• I have verified that the tests / deployment actions succeeded
• I have verified that any affected pods were restarted successfully
• I have verified that I can still log into Notify production
• I have verified that the smoke tests still pass on production
• I have communicated the release in the #notify Slack channel.

[github-actions]

STAGING HELMFILE DIFF:

notify-documentation	notification-canada-ca	580     	2026-01-16 18:13:16.356252633 +0000 UTC	deployed	notify-documentation-0.1.0	1.16.0     

notify-api	notification-canada-ca	758     	2026-01-29 15:01:48.430844108 +0000 UTC	deployed	notify-api-0.1.0	1.16.0     

notify-admin	notification-canada-ca	847     	2026-01-29 17:05:41.497682761 +0000 UTC	deployed	notify-admin-0.1.0	1.16.0     

notify-document-download	notification-canada-ca	569     	2026-01-26 16:00:30.633772819 +0000 UTC	deployed	notify-document-download-0.1.0	1.16.0     

notify-celery	notification-canada-ca	770     	2026-01-29 15:01:48.503552082 +0000 UTC	deployed	notify-celery-0.1.0	1.16.0     

ingress	nginx    	549     	2025-05-15 14:57:36.207977542 +0000 UTC	deployed	nginx-ingress-1.1.2	3.4.2      

xray-daemon	xray     	548     	2025-05-15 14:57:35.773258731 +0000 UTC	deployed	aws-xray-4.0.8	3.3.12     

image-pull-secrets	kube-system	15      	2025-08-13 17:14:36.684125276 +0000 UTC	deployed	image-pull-secrets-0.1.0	1.16.0     

fb-agent	amazon-cloudwatch	292     	2025-06-23 19:25:41.628970326 +0000 UTC	deployed	fluent-bit-0.48.5	3.2.4      

aws-cloudwatch-agent	amazon-cloudwatch	221     	2026-01-07 03:50:16.859530197 +0000 UTC	deployed	aws-cloudwatch-0.1.0	1.16.0     

target-group-crds	default  	220     	2025-10-17 18:26:58.440211718 +0000 UTC	deployed	targetgroup-crds-0.1.0	1.16.0     

aws-lb-controller	kube-system	471     	2026-01-26 15:17:15.512373226 +0000 UTC	deployed	aws-load-balancer-controller-3.0.0	v3.0.0     

volume-snapshot-crds	default  	1       	2025-11-28 20:12:22.717270706 +0000 UTC	deployed	volume-snapshot-crds-0.1.0	1.16.0     

velero	velero   	3       	2026-01-07 15:54:31.776026638 +0000 UTC	deployed	velero-11.1.1	1.17.0     

snapshot-controller	kube-system	1       	2025-11-28 20:13:11.588242851 +0000 UTC	deployed	snapshot-controller-1.0.0	8.0.1      

volume-snapshot-class	default  	1       	2025-11-28 20:13:11.523680083 +0000 UTC	deployed	volume-snapshot-class-1.0.0	1.0        

Comparing release=notify-documentation, chart=charts/notify-documentation
Comparing release=notify-api, chart=charts/notify-api
notification-canada-ca, notify-api, Deployment (apps) has changed:
...
            resources:
              limits:
-               cpu: 2000m
-               memory: 2000Mi
+               cpu: 1200m
+               memory: 1200Mi
              requests:
                cpu: 250m
...
notification-canada-ca, notify-api, HorizontalPodAutoscaler (autoscaling) has changed:
...
      kind: Deployment
      name: notify-api
-   minReplicas: 6
-   maxReplicas: 6
+   minReplicas: 4
+   maxReplicas: 4
    metrics:
      - type: Resource
...

Comparing release=notify-admin, chart=charts/notify-admin
Comparing release=notify-document-download, chart=charts/notify-document-download
Comparing release=notify-celery, chart=charts/notify-celery
Comparing release=k8s-event-logger, chart=/tmp/helmfile608789649/amazon-cloudwatch/staging/k8s-event-logger/k8s-event-logger/1.1.8/k8s-event-logger
Comparing release=karpenter-crd, chart=/tmp/helmfile608789649/karpenter/staging/karpenter-crd/karpenter-crd/1.3.2/karpenter-crd
Comparing release=karpenter, chart=/tmp/helmfile608789649/karpenter/staging/karpenter/karpenter/1.3.2/karpenter
Comparing release=karpenter-nodepool, chart=charts/karpenter-nodepool
Comparing release=priority-classes, chart=deliveryhero/priority-class
Comparing release=secrets-store-csi-driver, chart=secrets-store-csi-driver/secrets-store-csi-driver
Comparing release=aws-secrets-provider, chart=aws-secrets-manager/secrets-store-csi-driver-provider-aws
Comparing release=reloader, chart=stakater/reloader
Comparing release=kube-state-metrics, chart=prometheus-community/kube-state-metrics
Comparing release=blazer, chart=stakater/application
Comparing release=ingress, chart=charts/nginx-ingress
Comparing release=xray-daemon, chart=okgolove/aws-xray
Comparing release=ipv4-geolocate, chart=charts/ipv4-geolocate
Comparing release=image-pull-secrets, chart=charts/image-pull-secrets
Comparing release=fb-agent, chart=fluent/fluent-bit
Comparing release=cert-manager, chart=jetstack/cert-manager
Comparing release=aws-cloudwatch-agent, chart=charts/aws-cloudwatch
Comparing release=target-group-crds, chart=charts/targetgroup-crds
Comparing release=aws-lb-controller, chart=eks/aws-load-balancer-controller
Comparing release=metrics-server, chart=metrics-server/metrics-server
Comparing release=nidhogg, chart=/tmp/helmfile608789649/kube-system/staging/nidhogg/nidhogg/0.6.6/nidhogg
Comparing release=velero, chart=vmware-tanzu/velero
Comparing release=volume-snapshot-crds, chart=charts/volume-snapshot-crds
Comparing release=volume-snapshot-class, chart=charts/volume-snapshot-class
Comparing release=snapshot-controller, chart=charts/snapshot-controller
Comparing release=falco, chart=falco/falco
Comparing release=falco-secret, chart=charts/notify-secrets
Comparing release=vpa, chart=fairwinds-stable/vpa
Comparing release=goldilocks, chart=fairwinds-stable/goldilocks