36 lines
1.1 KiB
Markdown
36 lines
1.1 KiB
Markdown
|
# coulomb.social on Railiance
|
||
|
|
|
||
|
|
Source repo: `coulomb/coulomb-social`
|
||
|
|
Chart: `charts/coulomb-social`
|
||
|
|
Values: `helm/coulomb-social-values.yaml`
|
||
|
|
Ingress: `manifests/coulomb-social-ingress.yaml`
|
||
|
|
|
||
|
|
## Prerequisites
|
||
|
|
|
||
|
|
- Image published: `forgejo.coulomb.social/coulomb/coulomb-social:<sha>`
|
||
|
|
- KeyCape client `coulomb-social` registered (see source repo `scripts/register-keycape-client.sh`)
|
||
|
|
- K8s Secret `coulomb-social-env` in namespace `coulomb-social` with at least:
|
||
|
|
- `SECRET_KEY`
|
||
|
|
- `DATABASE_URL` (or platform DB handoff)
|
||
|
|
- `USER_ENGINE_PROXY_SECRET` (from user-engine-runtime)
|
||
|
|
- DNS `coulomb.social` → cluster ingress IP
|
||
|
|
|
||
|
|
## Deploy
|
||
|
|
|
||
|
|
```bash
|
||
|
|
COULOMB_SOCIAL_IMAGE_TAG=<git-sha> make coulomb-social-dry-run
|
||
|
|
COULOMB_SOCIAL_IMAGE_TAG=<git-sha> make coulomb-social-deploy
|
||
|
|
make coulomb-social-ingress-deploy
|
||
|
|
make coulomb-social-status
|
||
|
|
```
|
||
|
|
|
||
|
|
## Identity
|
||
|
|
|
||
|
|
- OIDC issuer: `https://kc.coulomb.social`
|
||
|
|
- user-engine: `https://users.92-205-62-239.nip.io` (trusted proxy)
|
||
|
|
- flex-auth: leave `FLEX_AUTH_BASE_URL` unset until app PDP Service is ready (local vocabulary in-app)
|
||
|
|
|
||
|
|
## Probe host
|
||
|
|
|
||
|
|
`probes.hostHeader` must stay in `ALLOWED_HOSTS` (see `docs/django-on-railiance.md`).
|