sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
972 commits 1 branch 0 tags 1.5 MiB
Commit graph

4 commits

Author SHA1 Message Date
Sirius Devops
334be37781 fix: add real Telegram bot_token and chat_id 2026-05-15 02:10:47 +00:00
Sirius Devops
31fcd59a5f fix: SOPS-encrypt waitlist secrets with age key 
- DB password: random 48-char hex string
- admin_api_key: random 32-char hex string
- Telegram bot_token/chat_id still CHANGEME — fill before deploying
 2026-05-15 01:36:06 +00:00
Sirius Devops
ac994f144a fix: container hardening + NetworkPolicy for waitlist-api 
- deployment.yaml: securityContext (runAsNonRoot, readOnlyRootFilesystem, drop ALL caps)
- network-policy.yaml: egress only to CNPG PG (5432) + api.telegram.org (443)
- kustomization.yaml: register new NetworkPolicy resource
- waitlist-telegram-secret: add admin_api_key field
 2026-05-15 00:00:58 +00:00
sirius0xdev
36b1d637f1
feat: add siriusdevops CNPG cluster + waitlist API K8s manifests (#112) 
- New CNPG PostgreSQL cluster (siriusdevops-pgdb) in customer1 namespace
- Single-instance, 20Gi storage, GCS backups to siriusdevops-backups/
- Waitlist database definition (waitlist-db.yaml)
- Scheduled backup manifest
- Waitlist API deployment, service, HTTPRoute, and Telegram secret placeholder
- Kustomization wiring for both siriusdevops-db and waitlist-api
 2026-05-14 19:24:33 -04:00