admin e57f4b3592 cutover.sh: extend Phase 2 cascade-replica wait window to 35 min ...

Phase 2's cascade-replica bootstrap does its own full basebackup FROM the
new standby_leader (an extra hop beyond Phase 1's legacy-direct copy), so
per operator request its window is extended further than Phase 1's —
from 1200s (20 min, matched to observed 8-11 min legacy-direct timing) to
2100s (35 min), giving more margin for the additional hop. Phase 1's
window is intentionally left unchanged at 1200s since it already has
comfortable headroom against the timing we've actually observed for that
specific bootstrap path.

2026-08-04 00:48:32 -07:00

..

test

pgha-dryrun.yaml: trigger secret re-provisioning after regenerating postgresql_replication_password (excludes &<>\" per pystache HTML-escaping bug found this session)

2026-07-30 21:44:49 -07:00

cutover.sh

cutover.sh: extend Phase 2 cascade-replica wait window to 35 min

2026-08-04 00:48:32 -07:00

post_init_wrapper.sh

add: post_init_wrapper.sh to work around Spilo's hardcoded 'postgres' role name assumption in post_init.sh. Does not fork/modify Spilo's script — creates missing role then execs the original unchanged.

2026-07-29 07:21:34 -07:00

postgresql-ha-final.yaml

ADR-0001 Phase 3: add postgresql-ha-final.yaml (Stage 3 - HAProxy alias handoff, no external port/Traefik yet)

2026-08-02 17:28:26 -07:00

postgresql-ha-staging.yaml

postgresql-ha-staging.yaml: switch from CLONE_WITH_BASEBACKUP to Patroni standby_cluster (continuous streaming, validated in pgha-test dry run) - closes pre-cutover write gap

2026-07-30 21:59:44 -07:00

preflight.sh

ADR-0001 Phase 3: add preflight.sh (disk/backup hard gates, catalog+consumer enumeration)

2026-08-02 16:45:44 -07:00

rollback.sh

ADR-0001 rollback.sh: accept any 2xx in consumer health checks (204 from Woodpecker was a false-positive failure)

2026-08-02 22:15:15 -07:00

RUNBOOK.md

ADR-0001 Phase 3: add cutover RUNBOOK (dependency map, phased procedure, rollback)

2026-08-02 16:35:52 -07:00