The platform team used Kyverno, the CNCF policy engine, with Nirmata to enforce scale-down as policy. Rules apply the same way across every namespace, so no team has to chase owners or run manual clean-up projects, and every action is recorded in a policy report.
- Identify. Kyverno evaluates deployments against the agreed scale-down criteria across every namespace.
- Scale to zero. Matching deployments are scaled down, releasing their CPU and memory requests back to the cluster.
- Flag. Workloads that stay unused are labeled allow-delete for owner review.
- Report. A per-cluster report tracks deployments, namespaces and capacity released.
Scaled-down workloads keep their configuration, so owners can restore them in seconds. Nothing is deleted without the allow-delete marker.