chrisfu c165ee1a87 fix(cnpg): stabilize CNPG/Barman Cloud init on GKE (knoe-dev-0 / knoe-db-0) ... - cloudnative_pg.py: add _wait_for_webhook_ca_bundle() to poll ValidatingWebhookConfiguration until cainjector has injected the CA bundle; fall back to _try_inject_ca_bundle_manually() on timeout (reads cert-manager-webhook-ca secret, patches webhook directly) - cloudnative_pg.py: add _wait_for_barman_tls_secrets() to wait for barman-cloud-{client,server}-tls before declaring Barman Cloud ready; surfaces warning instead of silent FailedMount - deploy/gcp/gke/namespace.yaml: ecosystem-0 -> knoe-db-0 (ekosystem = k8s cluster, not namespace) - deploy/gcp/gke/knoe-db.yaml: fix namespace ecosystem-0 -> knoe-db-0; set podAntiAffinityType: required (one CNPG pod per node); add Spot node toleration so GKE autoscaler simulation succeeds and scale-up is unblocked; add resource requests/limits (500m/512Mi -> 2/2Gi); set googleCredentials.gkeEnvironment: true (use Workload Identity - no explicit credentials secret needed) - deploy/gcp/gke/knoe-db-backup-gcs.yaml: fix namespaces ecosystem-0 -> knoe-db-0 - deploy/gcp/gke/workload-identity.yaml: update comments ecosystem-0 -> knoe-db-0 - tests/installer/test_cnpg_barman_webhook.py: new - 13 tests covering webhook CA bundle polling, manual CA injection, Barman TLS secret wait, and install_barman_plugin retry logic Co-authored-by: Junie <junie@jetbrains.com>		2026-04-05 02:04:11 -07:00
..
gcp	fix(cnpg): stabilize CNPG/Barman Cloud init on GKE (knoe-dev-0 / knoe-db-0)	2026-04-05 02:04:11 -07:00
opentofu	feat: GCP/GKE CNPG hardening, Artifact Registry traffic light, and knoe-system namespace fixes	2026-04-04 19:36:08 -07:00