mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
Scooby Husky
b77f0865d0
Adds connectionParameters (real streaming, not just barmanObjectStore WAL-archive polling) to both sides' existing externalClusters entry, plus replica.self/primary fields declaring the distributed topology (both currently agree home is primary). Auth reuses CNPG's own auto-generated streaming_replica client certs, cross-copied between clusters manually (kubectl, not git - same pattern as every other cross-cluster secret tonight) since they're the exact credential each side's pg_hba.conf already trusts. Also adds the VPS-side NodePort exposing its own pg-authentik primary back to home (home->VPS already works via the existing netbird-egress route, no UniFi port-forward needed for that direction - only the reverse, VPS/witness reaching into home, needed the WAN workaround).
28 lines
1.0 KiB
YAML
28 lines
1.0 KiB
YAML
---
|
|
# Exposes the VPS's pg-authentik primary (currently a read-only replica -
|
|
# see cnpg-cluster.yaml's replica.enabled) to home over the Netbird mesh,
|
|
# for the multi-site active-failover pilot. Same selector as CNPG's own
|
|
# generated pg-authentik-rw ClusterIP Service, just NodePort instead.
|
|
#
|
|
# Unlike home's side of this (infrastructure/authentik/manifests/
|
|
# ha-postgres-nodeport.yaml), no UniFi port-forward or Kyverno
|
|
# PolicyException needed here - the VPS's k3s has no NodePort
|
|
# restriction, and home reaching OUT to the VPS already works today via
|
|
# the netbird-egress DaemonSet's route (confirmed live all session, same
|
|
# path used for MinIO/CrowdSec) - it's only the reverse direction
|
|
# (external peers reaching INTO home) that needed the UniFi workaround.
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: ha-authentik-postgres
|
|
namespace: authentik
|
|
spec:
|
|
type: NodePort
|
|
selector:
|
|
cnpg.io/cluster: pg-authentik
|
|
cnpg.io/instanceRole: primary
|
|
ports:
|
|
- port: 5432
|
|
targetPort: 5432
|
|
nodePort: 32433
|