tegwick e1a6ea5f18 Propose RAILIANCE-WP-0003: shared cnpg cluster apps-pg ...

6-task plan to provision a shared CloudNative PG cluster apps-pg in
the databases namespace, with NetworkPolicies that use a label-based
consumer opt-in (railiance.io/postgres-client=apps-pg) instead of
the per-namespace allowlist gitea-db uses.

Responds to coordination message 768c18f4 from railiance-apps and
unblocks RAILIANCE-WP-0002 T04 (vergabe-teilnahme role+db creation).

Keeps platform agnostic of individual apps per ADR-003: per-app
Database CRs and credential Secrets are owned by the consuming repos.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-19 00:46:50 +02:00

.claude/rules

Refresh agent instruction files

2026-05-18 16:55:52 +02:00

docs

Added openbao secrets management and phaseout of bitnami for CloudNative PG

2026-05-18 11:53:59 +02:00

helm

Added openbao secrets management and phaseout of bitnami for CloudNative PG

2026-05-18 11:53:59 +02:00

workplans

Propose RAILIANCE-WP-0003: shared cnpg cluster apps-pg

2026-05-19 00:46:50 +02:00

.custodian-brief.md

chore(consistency): sync task status from DB [auto]

2026-05-17 14:14:55 +02:00

.gitignore

Added openbao secrets management and phaseout of bitnami for CloudNative PG

2026-05-18 11:53:59 +02:00

.sops.yaml

feat(platform): T01 — standalone PostgreSQL HA chart scaffold

2026-03-11 02:17:55 +01:00

AGENTS.md

Refresh agent instruction files

2026-05-18 16:55:52 +02:00

CLAUDE.md

Refresh agent instruction files

2026-05-18 16:55:52 +02:00

Makefile

Added openbao secrets management and phaseout of bitnami for CloudNative PG

2026-05-18 11:53:59 +02:00

SCOPE.md

Added openbao secrets management and phaseout of bitnami for CloudNative PG

2026-05-18 11:53:59 +02:00

Description

S3 Platform Services — PostgreSQL HA, Valkey, object storage

491 KiB

Languages

Shell 58%

JavaScript 20%

Makefile 13.1%

CSS 3.7%

HCL 3.5%

Other 1.7%