2026-07-03 01:41:38 +02:00
|
|
|
# Core Hub production deployment (hub.coulomb.social cutover)
|
|
|
|
|
|
|
|
|
|
`30-ingress.yaml` is the cutover flip — do NOT apply it while the inter-hub
|
|
|
|
|
ingress still claims `hub.coulomb.social`.
|
|
|
|
|
|
|
|
|
|
## Sequence
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
# 1. Image (operator: registry push)
|
2026-07-09 11:59:08 +02:00
|
|
|
IMAGE_REPOSITORY=forgejo.coulomb.social/coulomb/core-hub IMAGE_TAG=<sha> make container-build
|
|
|
|
|
docker push forgejo.coulomb.social/coulomb/core-hub:<sha>
|
2026-07-03 01:41:38 +02:00
|
|
|
|
|
|
|
|
# 2. Prod DB + secret (operator: shared-DB DDL)
|
|
|
|
|
# role core_hub / db core_hub on apps-pg; secret core-hub-prod-env with
|
|
|
|
|
# CORE_HUB_DATABASE_URL (postgresql+asyncpg://...apps-pg-rw.databases...:5432/core_hub)
|
|
|
|
|
# and CORE_HUB_API_TOKEN (generated)
|
|
|
|
|
|
|
|
|
|
# 3. Deploy (no traffic yet)
|
|
|
|
|
kubectl apply -f k8s/railiance-production/00-namespace.yaml
|
|
|
|
|
kubectl apply -f k8s/railiance-production/20-runtime.yaml
|
2026-07-09 11:59:08 +02:00
|
|
|
kubectl -n core-hub set image job/core-hub-prod-migrate migrate=forgejo.coulomb.social/coulomb/core-hub:<sha>
|
|
|
|
|
kubectl -n core-hub set image deploy/core-hub-api api=forgejo.coulomb.social/coulomb/core-hub:<sha>
|
2026-07-03 01:41:38 +02:00
|
|
|
kubectl -n core-hub wait --for=condition=complete job/core-hub-prod-migrate --timeout=180s
|
|
|
|
|
kubectl -n core-hub rollout status deploy/core-hub-api --timeout=180s
|
|
|
|
|
|
|
|
|
|
# 4. Final data import (fresh Inter-Hub export at cutover time)
|
|
|
|
|
kubectl exec -i -n databases net-kingdom-pg-1 -- psql -U postgres -d interhub -tA \
|
|
|
|
|
< scripts/migration/inter_hub_export.sql > final-bundle.json
|
|
|
|
|
# validate, then import in-cluster (see scripts/migration/README.md)
|
|
|
|
|
|
|
|
|
|
# 5. THE FLIP (operator approval point)
|
|
|
|
|
kubectl -n inter-hub delete ingress inter-hub
|
|
|
|
|
kubectl apply -f k8s/railiance-production/30-ingress.yaml
|
|
|
|
|
# cert-manager issues core-hub-tls for hub.coulomb.social (~1 min)
|
|
|
|
|
|
|
|
|
|
# 6. Verify
|
|
|
|
|
curl -s https://hub.coulomb.social/healthz # 200
|
|
|
|
|
curl -s https://hub.coulomb.social/api/v2/widget-types | head -c 200
|
|
|
|
|
curl -s -o /dev/null -w '%{http_code}' https://hub.coulomb.social/api/v2/hubs # 401 = hardened contract
|
|
|
|
|
|
|
|
|
|
## Rollback (any time; Inter-Hub deployment stays running)
|
|
|
|
|
kubectl delete -f k8s/railiance-production/30-ingress.yaml
|
|
|
|
|
kubectl -n inter-hub apply -f <saved inter-hub ingress> # or helm upgrade inter-hub
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Keep the Inter-Hub deployment/service running untouched until stabilization
|
|
|
|
|
passes (CORE-WP-0005-T04); only the ingress moves.
|
