NationTech/harmony
3
0
Fork 2
Code Issues 39 Pull Requests 11 Actions Packages Projects Releases 1 Wiki Activity

feat/app-refs-pg-resources #353

Open
johnride wants to merge 3 commits from feat/app-refs-pg-resources into master
pull from: feat/app-refs-pg-resources
merge into: NationTech:master
Conversation 0 Commits 3 Files Changed 22 +709 -155
johnride commented 2026-10-23 13:50:47 +00:00
Owner
Copy Link
No description provided.
johnride added 3 commits 2026-10-23 13:50:48 +00:00
feat(postgresql): set CPU and memory resources on CNPG clusters e902cf39cb 
- PostgreSQLConfig.resources maps to Cluster spec.resources (primary and replica)
- K8sPostgreSQLScore::resources builder
- primary_cluster() extracted so the render is unit-tested
feat: typed Refs for app env (ADR-028) 5afa41f65e 
- k8s::env: SecretKey, ConfigMapKey, EnvValue -> native EnvVar
- K8sPostgreSQLScore::app_account_ref (uri, jdbc_uri on {cluster}-app)
- ObjectBucketScore::bucket_ref (endpoint, bucket, region, keys)
- Zitadel contract outputs: client_id(), project_id()
feat(k8s): K8sDeploymentScore renders a hardened web workload
All checks were successful
Run Check Script / check (pull_request) Successful in 3m24s
Details
a0c1da4c51 
- builder: port or health_checked_port (+ ClusterIP Service, HTTP probes),
  typed env (EnvValue), pull secret, replicas, recreate, resources, wait
- labels/selector: component, managed-by, part-of (same as the removed
  Application lowering, so its Deployments apply in place)
- restricted pod: non-root, RuntimeDefault seccomp, drop ALL, no SA token
- lamp: runs as its uid 1000 user and gets the Service its Ingress targets;
  its selector changes from app=<name>, so delete an existing lamp
  Deployment once
- examples: frontends on nginx-unprivileged (8080); docs follow the API
All checks were successful
Run Check Script / check (pull_request) Successful in 3m24s
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feat/app-refs-pg-resources:feat/app-refs-pg-resources
git checkout feat/app-refs-pg-resources
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Architecture Decision Record
Good first issue
RFC
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
johnride leokumojin reda sbernier stremblay
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NationTech/harmony#353
No description provided.
Delete Branch "feat/app-refs-pg-resources"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?