eho/register-referentie
1
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

perf: cap OpenZaak + NRC uWSGI workers to shrink verify-stack footprint #147

New Issue
Closed
opened 2026-07-27 14:07:47 +00:00 by not · 0 comments
not commented 2026-07-27 14:07:47 +00:00
Contributor
Copy Link
Copy Source

Follow-up to #144/#145. verify-stack is under memory pressure as the stack grows (now 37 services on one runner). #145 capped the Objecten/Objecttypen uWSGI workers; the two biggest remaining uncapped Django apps are OpenZaak and NRC (nrc-web), both Maykin/vng uWSGI images running the default 4 processes × 4 threads — ~4 full-Django worker processes (~800 MB) each.

Fix: set UWSGI_PROCESSES: "1" + UWSGI_THREADS: "2" on the &oz-env and &nrc-env anchors in both compose files. The anchors are shared with the celery workers, which ignore the var (they run celery, not uwsgi). Frees ~1.2 GB, zero behaviour change — the APIs serve single-request smoke checks and are not load-tested.

Out of scope (considered, deferred): JVM heap caps on Keycloak/Flowable; compose profiles to boot per-check subsets. Captured here for later if pressure persists.

No ADR: config-only tuning of existing services, same class as #145.

**Follow-up to #144/#145.** `verify-stack` is under memory pressure as the stack grows (now 37 services on one runner). #145 capped the Objecten/Objecttypen uWSGI workers; the two biggest remaining uncapped Django apps are **OpenZaak** and **NRC** (`nrc-web`), both Maykin/vng uWSGI images running the default **4 processes × 4 threads** — ~4 full-Django worker processes (~800 MB) each. **Fix:** set `UWSGI_PROCESSES: "1"` + `UWSGI_THREADS: "2"` on the `&oz-env` and `&nrc-env` anchors in both compose files. The anchors are shared with the celery workers, which ignore the var (they run celery, not uwsgi). Frees ~1.2 GB, zero behaviour change — the APIs serve single-request smoke checks and are not load-tested. Out of scope (considered, deferred): JVM heap caps on Keycloak/Flowable; compose profiles to boot per-check subsets. Captured here for later if pressure persists. No ADR: config-only tuning of existing services, same class as #145.
not closed this issue 2026-07-27 14:32:14 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:acl
area:bff
area:docs
area:domain
area:event-subscriber
area:infra
area:portal-behandel
area:portal-beheer
area:portal-openbaar
area:portal-self-service
area:projection
area:workflow
type:adr-proposal
type:bug
type:chore
type:slice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
eho (Edwin van den Houdt)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: eho/register-referentie#147