34a3123799
Read the resource-control open/restricted signal and refuse new orders that would exceed a restricted entity's published allowance. Open and missing signals stay unchanged. Safety paths admit with an exception.
19 lines
868 B
Markdown
19 lines
868 B
Markdown
## Stack
|
|
|
|
- **Language:** Kubernetes manifests + Helm values, Bash Make targets
|
|
- **Key deps:** CloudNative-PG (cnpg) clusters, OpenBao, SOPS/age; runs against the S2 cluster on railiance01. Bitnami postgresql-ha is retired. Valkey is declared, not deployed.
|
|
|
|
## Dev Commands
|
|
|
|
```bash
|
|
make help # list all targets (db-*, apps-pg-*, openbao-*)
|
|
make db-status # gitea-db / forgejo-db cnpg cluster health (read-only)
|
|
make apps-pg-status # shared apps-pg cluster health (read-only)
|
|
make pg-status # confirms retired Bitnami postgresql-ha is absent
|
|
make valkey-status # confirms Valkey is absent
|
|
make consumption-preflight CONSUMING_ENTITY=entity:<slug> ESTIMATE_EUR=<eur>
|
|
make db-deploy | apps-pg-deploy # production-touching
|
|
```
|
|
|
|
`pg-deploy` and `valkey-deploy` are fail-closed. `*-status` / `*-logs`
|
|
targets are read-only and safe.
|