2 Commits

Author	SHA1	Message	Date
chrisfu	df6de9138e	checkpoint: summarize CNPG init and backup hardening work ... - harden CNPG backup ObjectStore readiness fallback in statusless clusters by validating controller availability and expected spec - improve backup/plugin reconciliation paths and related test coverage for barman-cloud flows - include ongoing GKE/CNPG deployment and configuration updates from this checkpoint Co-authored-by: Junie <junie@jetbrains.com>	2026-04-06 05:51:26 -07:00
chrisfu	620bdd25eb	feat: GKE production deployment — CNPG + GCS backups + Google Workspace SSO ... Add complete GKE deployment stack: - deploy/gcp/gke/: namespace, CloudNativePG cluster (premium-rwo, 100Gi), GCS barman-cloud backup with Workload Identity SA, ArgoCD OIDC ConfigMap, GitLab OmniAuth secret template, knoe-auth Google OIDC secret template - etc/init_cnpg_gke.sh: provision GCS buckets, GCP SA, WI binding, CNPG operator - etc/init_argocd.sh: apply argocd-oidc-cm.yaml when PLATFORM_DOMAIN/FRONTDOOR_HOST set - etc/init_gitlab.sh: inject OmniAuth openid_connect block when FRONTDOOR_HOST set - prole-auth-deployment.yaml: add GOOGLE_OIDC_ENABLED env vars (all optional) - supabase/helm/prole-supabase/values-gke.yaml: GoTrue Google OAuth overlay - knoe/core/prod_config.py: add backupProvider, workloadIdentitySA, googleClientId/Secret/HostedDomain Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-01 10:41:55 -07:00