coulomb/railiance-cluster
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-cluster/Makefile

35 lines
1.1 KiB
Makefile
Raw Normal View History

feat(k3s-baseline): complete WP-0002 T01-T05 - bootstrap.yml: install k3s (server+cluster-init, pinned v1.35.1+k3s1) and Helm (v3.17.3 with checksum verify); fetch kubeconfig to control node - tests/smoke_kube.sh: assert node Ready, helm, CoreDNS, Traefik - docs/kubeconfig.md: usage, merge, context-switch, security note - Makefile: k3s-install and smoke targets with make help Closes T01, T02, T03, T04, T05 of RAIL-BS-WP-0002. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 09:43:16 +00:00
.DEFAULT_GOAL := help
INVENTORY ?= ansible/hosts.ini
feat(safety-net): create WP-0004, update preflight for OAS 5-repo layout - workplans/RAIL-BS-WP-0004-safety-net.md: ADR-001 workplan file for current-env-safety-net workstream (7e8b0c20), T01-T04 done, T05-T06 todo - tools/cmd/railiance-preflight: update REPOS to OAS S1-S5 stack (railiance-infra/cluster/platform/enablement/apps) + project repos; remove stale railiance-bootstrap reference - docs/backup-restore.md: fix Step 5 clone commands to current repo names - Makefile: add make backup and make preflight targets Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 15:21:29 +01:00
##@ Safety Net
docs(wp-0004): add implementation notes for sudo, etcd, helm, cron T02: note to verify etcd is in use before implementing; flags root requirement T03: add KUBECONFIG to helm commands; note root access approach T06: document solution to sudo problem — run cron under root's crontab, not a sudoers whitelist. Add restore drill commands. Fix cron to use absolute path (~ unreliable in root crontab). T01: note to remove old railiance-backup script (wrong scope) Makefile: fix stale backup description, add restore target, fix .PHONY Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 16:52:40 +00:00
backup: ## Backup k3s etcd + Helm values + kubeconfig (age-encrypted, root required)
fix(backup): elevate sudo in Makefile and guard mkdir after root check - `make backup` now invokes `sudo tools/cmd/railiance-backup-s2` directly - Move `mkdir -p` in railiance-backup-s2 to after the root check so the script emits a clear error instead of a raw permission-denied failure Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 22:33:49 +00:00
sudo tools/cmd/railiance-backup-s2
docs(wp-0004): add implementation notes for sudo, etcd, helm, cron T02: note to verify etcd is in use before implementing; flags root requirement T03: add KUBECONFIG to helm commands; note root access approach T06: document solution to sudo problem — run cron under root's crontab, not a sudoers whitelist. Add restore drill commands. Fix cron to use absolute path (~ unreliable in root crontab). T01: note to remove old railiance-backup script (wrong scope) Makefile: fix stale backup description, add restore target, fix .PHONY Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 16:52:40 +00:00
restore: ## List available backups and print restore guide
tools/cmd/railiance-restore-s2
feat(safety-net): create WP-0004, update preflight for OAS 5-repo layout - workplans/RAIL-BS-WP-0004-safety-net.md: ADR-001 workplan file for current-env-safety-net workstream (7e8b0c20), T01-T04 done, T05-T06 todo - tools/cmd/railiance-preflight: update REPOS to OAS S1-S5 stack (railiance-infra/cluster/platform/enablement/apps) + project repos; remove stale railiance-bootstrap reference - docs/backup-restore.md: fix Step 5 clone commands to current repo names - Makefile: add make backup and make preflight targets Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 15:21:29 +01:00
preflight: ## Pre-migration safety gate — must pass before cluster work
bin/railiance preflight
feat(k3s-baseline): complete WP-0002 T01-T05 - bootstrap.yml: install k3s (server+cluster-init, pinned v1.35.1+k3s1) and Helm (v3.17.3 with checksum verify); fetch kubeconfig to control node - tests/smoke_kube.sh: assert node Ready, helm, CoreDNS, Traefik - docs/kubeconfig.md: usage, merge, context-switch, security note - Makefile: k3s-install and smoke targets with make help Closes T01, T02, T03, T04, T05 of RAIL-BS-WP-0002. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 09:43:16 +00:00
##@ Kubernetes
k3s-install: ## Install k3s and Helm on all inventory hosts
ansible-playbook -i $(INVENTORY) ansible/bootstrap.yml
smoke: ## Run Kubernetes smoke tests
bash tests/smoke_kube.sh
feat(pgpool): implement WP-0003 T01-T04 — permanent fix for pgpool-password bug T01: helm/gitea-values.yaml with postgresql-ha.pgpool.adminPassword (fill REPLACE_WITH_PGPOOL_ADMIN_PASSWORD before helm upgrade) T02: tests/smoke_kube.sh — add pgpool and postgresql-ha pod health checks T03: tests/test_ha_failover.sh — D3 HA failover test script T04: docs/incidents/2026-03-10-pgpool-missing-secret.md + README link Also: make test-ha-failover target, Makefile .PHONY updated. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 14:16:22 +01:00
test-ha-failover: ## Run HA failover test (D3) — kills primary PG pod, asserts recovery
bash tests/test_ha_failover.sh $(if $(GITEA_URL),$(GITEA_URL),)
feat(k3s-baseline): complete WP-0002 T01-T05 - bootstrap.yml: install k3s (server+cluster-init, pinned v1.35.1+k3s1) and Helm (v3.17.3 with checksum verify); fetch kubeconfig to control node - tests/smoke_kube.sh: assert node Ready, helm, CoreDNS, Traefik - docs/kubeconfig.md: usage, merge, context-switch, security note - Makefile: k3s-install and smoke targets with make help Closes T01, T02, T03, T04, T05 of RAIL-BS-WP-0002. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 09:43:16 +00:00
##@ Help
help: ## Show this help
@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n make \033[36m<target>\033[0m\n"} \
/^[a-zA-Z_-]+:.*?##/ { printf " \033[36m%-20s\033[0m %s\n", $$1, $$2 } \
/^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) }' $(MAKEFILE_LIST)
docs(wp-0004): add implementation notes for sudo, etcd, helm, cron T02: note to verify etcd is in use before implementing; flags root requirement T03: add KUBECONFIG to helm commands; note root access approach T06: document solution to sudo problem — run cron under root's crontab, not a sudoers whitelist. Add restore drill commands. Fix cron to use absolute path (~ unreliable in root crontab). T01: note to remove old railiance-backup script (wrong scope) Makefile: fix stale backup description, add restore target, fix .PHONY Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 16:52:40 +00:00
.PHONY: backup restore preflight k3s-install smoke test-ha-failover help
Reference in a new issue Copy permalink