seon
bd74aead51
WP-09(Terraform 설계서 6.10, 실험·앱 설계서 3.3). - postgres-primary: PostgreSQL 16, conf.d 오버라이드(listen *, ssl on, scram, wal_level replica, slot 10, wal_keep_size 256MB), pg_hba는 hostssl+scram만(app: AWS·GCP 대역, harness: GCP 대역, replicator: 10.20.0.21). 역할 app/replicator/harness(비밀번호는 Secret Manager selfheal-db-password), DB app + 스키마 app.price·app.orders + 시드. harness에 pg_wal_replay_pause/resume·pg_promote EXECUTE와 pg_read_all_stats 부여 (카탈로그 db.replay_resume·db.promote). - postgres-replica: 첫 실행에 pg_basebackup -R -C -S replica1(TLS 필수)로 standby 구성, 이후 실행은 재시작만.
selfheal-lab-gitops
GitOps and configuration repository for the self-healing verification lab
(VM + container mixed environment). Infrastructure lives in
seon-labs/selfheal-lab-terraform; this repository holds everything that runs
on top of it.
This repository is public on purpose: every EC2 node and GCE VM clones it anonymously at first boot (cloud-init / startup script), and MIG instances are recreated by autohealing without an operator. Never commit secrets here; values live in GCP Secret Manager and are fetched at runtime.
| Path | Owner | Filled in |
|---|---|---|
bootstrap/kubeadm/ |
operator, run once | WP-07: containerd/kubeadm init+join, flannel, Argo CD install, root-app |
argocd/root-app.yaml |
Argo CD app-of-apps root | WP-07 |
apps/ |
child Argo CD Applications | WP-14 |
workloads/{demo-app,ingress-nginx,chaos-mesh,alloy}/ |
Argo CD | WP-14, WP-15 |
vm/<role>/apply.sh |
GCE startup script and make vm-sync |
WP-08..12 |
vm/<role> matches the role metadata each VM gets from Terraform:
observability, harness, ai-env, postgres-primary, postgres-replica,
legacy-api. The startup script runs vm/<role>/apply.sh when it exists and is
executable; apply.sh must be idempotent because make vm-sync re-runs it.