- memcached (1Gi) shared by both cache servers via a single service
- rbcs (java) and kaya-rbcs deployments with identical resource limits (1 cpu / 512Mi)
- strict network policies whitelisting only the required communications
- manually-triggered benchmark jobs running 'client benchmark -s 256 -e 10000'
against the rbcs and rbcs-kaya services
Split the Dockerfile into a builder stage (apk + pip cache mounts) and a
slim runtime stage, mirroring reimpasto. apk and pip package caches now
persist across builds and never land in the image layers.