5 Commits

Author	SHA1	Message	Date
chrisfu	df93b0d1c5	chore: update NOTES.txt to use studioIngress and add test for validation	2026-04-13 21:48:56 -07:00
chrisfu	9519f35d65	chore: add enforceGeneralNodeRole scheduling logic and improve frontdoor manifest handling ... - Introduced `enforceGeneralNodeRole` to make node affinity and selector enforcement configurable. - Updated `_split_frontdoor_docs` to handle custom release labels for Kong services. - Enhanced Helm templates to support dynamic scheduling configurations. - Added `reconcile_db_frontdoor_studio_pvcs` to migrate PVCs to the target storage class. - Updated tests to validate custom release labels and scheduling logic.	2026-04-13 16:23:06 -07:00
chrisfu	a29eb07cc6	chore: enhance Garage and Supabase S3 configuration for split-cluster deployments ... - Added validation and explicit handling for Garage S3 endpoints in split APP/DB cluster setups. - Improved dynamic role detection and authoritative context enforcement in initialization scripts. - Updated Supabase and Garage configurations to support private cross-cluster endpoints, ensuring cluster interoperability and DNS constraints. - Enhanced error handling and logging for invalid or missing configurations.	2026-04-13 00:53:39 -07:00
chrisfu	65369811f7	Harden ingress targeting and normalize HOME paths ... - enforce app-cluster-only rendering for public ingress hosts with DB-cluster guardrails\n- fix Supabase/GitLab/authority ingress host ownership and ingress-class safety checks\n- normalize persisted home-directory paths to /Users/chrisfu and update gke config defaults\n- add/adjust regression tests for ingress placement/hostname and cfg path normalization Co-authored-by: Junie <junie@jetbrains.com>	2026-04-12 12:32:09 -07:00
chrisfu	c023c7f590	stabilize unattended GKE Supabase/CNPG deployment ... - align app/db cluster defaults for knoe-dev-0 + knoe-dev-cnpg-0 on e2-standard-2\n- harden Supabase deploy flow for cross-cluster DB ILB, GKE storage class, and node selector fallback\n- migrate Helm chart path to knoe-supabase and make external DB host rendering IP-safe\n- disable Kerberos in prod unattended config to prevent Supabase GSS auth failures\n- add Supabase port-forward mappings and DB backup context handling improvements\n\nBuild status: k8s stable Co-authored-by: Junie <junie@jetbrains.com>	2026-04-10 15:53:58 -07:00