Erich Blume
1d4cbbfb84
CNPG Cluster on ringtail to receive the paperless + teslamate databases migrated off the minikube blumeops-pg via cold pg_dump/pg_restore. Mirrors the minikube cluster (managed roles eblume/borgmatic/paperless/teslamate, scram pg_hba) on ringtail's local-path storage, scoped to wave-1 roles (miniflux + authentik stay put for later waves). Apps reach it in-cluster at blumeops-pg-rw.databases.svc.cluster.local — same name as on minikube. Database creation is deferred to cutover: paperless restores into the bootstrap database; teslamate's DB is created by the eblume superuser at its cutover (the dump's earthdistance extension is untrusted). The four ExternalSecrets reuse the same 1Password items as the minikube cluster. Not yet synced; deploy waits for review. kustomize build verified. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
15 lines
425 B
YAML
15 lines
425 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: databases
|
|
|
|
resources:
|
|
- immich-pg.yaml
|
|
- external-secret-immich-borgmatic.yaml
|
|
- service-immich-pg-tailscale.yaml
|
|
# wave-1 indri-k8s decommission: blumeops-pg (paperless + teslamate)
|
|
- blumeops-pg.yaml
|
|
- external-secret-eblume.yaml
|
|
- external-secret-borgmatic.yaml
|
|
- external-secret-paperless.yaml
|
|
- external-secret-teslamate.yaml
|