Scooby Husky b77f0865d0 Wire CNPG streaming replication + distributed topology for pg-authentik pilot ...

Adds connectionParameters (real streaming, not just barmanObjectStore
WAL-archive polling) to both sides' existing externalClusters entry, plus
replica.self/primary fields declaring the distributed topology (both
currently agree home is primary). Auth reuses CNPG's own auto-generated
streaming_replica client certs, cross-copied between clusters manually
(kubectl, not git - same pattern as every other cross-cluster secret
tonight) since they're the exact credential each side's pg_hba.conf
already trusts.

Also adds the VPS-side NodePort exposing its own pg-authentik primary
back to home (home->VPS already works via the existing netbird-egress
route, no UniFi port-forward needed for that direction - only the
reverse, VPS/witness reaching into home, needed the WAN workaround).

2026-08-19 00:08:23 -05:00

..

cnpg-cluster.yaml

Wire CNPG streaming replication + distributed topology for pg-authentik pilot

2026-08-19 00:08:23 -05:00

ha-postgres-nodeport.yaml

Wire CNPG streaming replication + distributed topology for pg-authentik pilot

2026-08-19 00:08:23 -05:00

ingress.yaml

Replace DNS-flip failover watcher with static vps.huskypup.net subdomains

2026-08-18 18:23:08 -05:00

presync-job.yaml

Fix vps-authentik presync: SA/Role/RoleBinding need PreSync hook ordering too

2026-08-17 22:37:55 -05:00