coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish architecture-cleanup RAILIANCE-WP-0016 T05
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Has been cancelled
Details

Browse source 
Item 13 is the restore RESOURCE-WP-0002 already proved. Item 14 retires
the dead Bitnami postgresql-ha deploy path and gates Valkey until a
consumer exists. Item 17 publishes the versioned S3 consumer-interface
index.
This commit is contained in:
codex 2026-08-15 14:43:44 +02:00
parent 2af19627e1
commit 1eb5fa51ed
8 changed files with 156 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

47
Makefile
View file

@ -86,41 +86,32 @@ apps-pg-logs: ## Tail apps-pg primary logs
net-kingdom-pg-inter-hub-networkpolicy-deploy: ## Allow inter-hub to reach net-kingdom-pg
$(KUBECTL) apply -f helm/net-kingdom-pg-inter-hub-networkpolicy.yaml
##@ PostgreSQL HA (legacy — superseded by cnpg above)
##@ PostgreSQL HA (retired — CNPG superseded this)
pg-deploy: ## Deploy / upgrade standalone PostgreSQL HA to platform namespace
$(KUBECTL) create namespace $(NAMESPACE) --dry-run=client -o yaml | $(KUBECTL) apply -f -
$(HELM) repo add bitnami https://charts.bitnami.com/bitnami --force-update
$(HELM) upgrade --install postgresql-ha bitnami/postgresql-ha \
--version $(PG_CHART_VERSION) \
--namespace $(NAMESPACE) \
-f <(sops -d helm/postgresql-ha-values.sops.yaml) \
--wait --timeout 5m
pg-deploy: ## Retired: refuse to deploy Bitnami postgresql-ha
@echo 'pg-deploy is retired (RAILIANCE-WP-0016 item 14). Use apps-pg / forgejo-db / rapp-postgres.' >&2; exit 2
pg-status: ## Check PostgreSQL HA pod status
$(KUBECTL) get pods -n $(NAMESPACE) -l app.kubernetes.io/name=postgresql-ha
pg-pgpool-check: ## Verify pgpool-password secret key is present (see RAIL-BS-WP-0003)
@SECRET=$$($(KUBECTL) get secret -n $(NAMESPACE) postgresql-ha-postgresql \
-o jsonpath='{.data.pgpool-password}' 2>/dev/null); \
if [ -z "$$SECRET" ]; then \
echo "ERROR: pgpool-password key missing from secret — pgpool will CrashLoop on restart"; \
exit 1; \
pg-status: ## Confirm Bitnami postgresql-ha is absent
@if $(KUBECTL) get ns $(NAMESPACE) >/dev/null 2>&1; then \
$(KUBECTL) get pods -n $(NAMESPACE) -l app.kubernetes.io/name=postgresql-ha; \
else \
echo "OK: pgpool-password key present"; \
echo 'postgresql-ha retired: namespace $(NAMESPACE) is absent'; \
fi
##@ Valkey (cache)
pg-pgpool-check: ## Retired: no pgpool secret to check
@echo 'pg-pgpool-check is retired with postgresql-ha (RAILIANCE-WP-0016 item 14).' >&2; exit 2
valkey-deploy: ## Deploy / upgrade Valkey (Redis-compatible) to platform namespace
$(KUBECTL) create namespace $(NAMESPACE) --dry-run=client -o yaml | $(KUBECTL) apply -f -
$(HELM) upgrade --install valkey bitnami/valkey \
--namespace $(NAMESPACE) \
-f <(sops -d helm/valkey-values.sops.yaml) \
--wait --timeout 3m
##@ Valkey (cache) — declared, not deployed
valkey-status: ## Check Valkey pod status
$(KUBECTL) get pods -n $(NAMESPACE) -l app.kubernetes.io/name=valkey
valkey-deploy: ## Gated: do not deploy Valkey until a consumer rapp exists
@echo 'valkey-deploy is gated (RAILIANCE-WP-0016 item 14): no live consumer, nothing to extract from S2.' >&2; exit 2
valkey-status: ## Confirm Valkey is absent
@if $(KUBECTL) get ns $(NAMESPACE) >/dev/null 2>&1; then \
$(KUBECTL) get pods -n $(NAMESPACE) -l app.kubernetes.io/name=valkey; \
else \
echo 'valkey undeployed: namespace $(NAMESPACE) is absent'; \
fi
##@ OpenBao (secrets)