chrisfu
c023c7f590
stabilize unattended GKE Supabase/CNPG deployment
...
- align app/db cluster defaults for knoe-dev-0 + knoe-dev-cnpg-0 on e2-standard-2\n- harden Supabase deploy flow for cross-cluster DB ILB, GKE storage class, and node selector fallback\n- migrate Helm chart path to knoe-supabase and make external DB host rendering IP-safe\n- disable Kerberos in prod unattended config to prevent Supabase GSS auth failures\n- add Supabase port-forward mappings and DB backup context handling improvements\n\nBuild status: k8s stable
Co-authored-by: Junie <junie@jetbrains.com>
2026-04-10 15:53:58 -07:00
chrisfu
b4fc5641db
checkpoint: sanitize prole config for host portability
...
- fix conf/prod/prole.cfg by replacing hardcoded /Users/chrisfu paths with /Users/chrisfu
- remove injected [update.sh] log lines and stray password artifacts so config is executable
- include latest pending updates across deployment config, UI/core flow, vault/network artifacts, and helper scripts
2026-04-10 05:58:40 -07:00
chrisfu
c94c62e1bb
Harden prod deploy namespace/context routing and vault password handling
...
- persist and load DB master password via Ansible Vault bootstrap flow
- enforce knoe-system service namespace and explicit app/db kubecontext targeting
- improve OpenBao/CNPG deploy reliability and logging; add retries/readiness diagnostics
- tighten reset/delete cluster behavior and expand installer/deploy pipeline test coverage
Co-authored-by: Junie <junie@jetbrains.com>
2026-04-10 00:43:07 -07:00
chrisfu
c46d26f9bc
Add dedicated deployment config entrypoint for GCP pipeline
2026-04-09 19:53:02 -07:00
