## Stack

- **Language:** Helm values + Kubernetes manifests, Bash Make targets
- **Key deps:** vergabe-teilnahme (Django) and inter-hub releases, shared apps-pg cnpg cluster, SOPS/age; runs against the S2 cluster on railiance01

## Dev Commands

```bash
make help                        # list all targets
make check-tools && make check-sops   # operator preflight (read-only)
make apps-pg-status              # shared DB health (read-only)
make vergabe-dry-run             # helm template render, no apply
make vergabe-status              # pod / svc / ingress / cert state (read-only)
make vergabe-deploy              # production-touching
make vergabe-migrate | vergabe-seed   # production-touching (Django management)
make check-inter-hub-image-tag   # gate: explicit image tag for prod deploys
```

`*-deploy` / `*-migrate` / `*-seed` change production workloads — operator
approval required. Dry-run/status/check targets are safe.