hrynco/hrynco-notification-service
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(ops): allow google api egress and document recovery

Browse Source 
Add scoped google api network policy, its refresh command, and the verified production operations runbook.

Ref: IT-1074
This commit is contained in:
Anatolii Hrynchuk
2026-10-24 13:14:16 +03:00
parent 1631786ce2
commit 9e268b8ec3
5 changed files with 2168 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/kubernetes/shared-notification/README.md
+7
View File
@@ -1,5 +1,12 @@
# Shared Notification Service on MicroK8s
For the current six-migration production release, use the
[production operations and recovery runbook](../../../docs/production-operations.md).
The original bootstrap/deploy schema below predates push channels; do not run its
full deploy against the current database. The current additive Google HTTPS policy
is `google-api-network.json`; refresh it with `refresh-google-api-network.py` and
review/server-dry-run it before applying. Existing SMTP and broker policies remain.
This package deploys one shared Web/Worker, PostgreSQL 17, RabbitMQ 4 and a temporary
Mailpit sandbox in `shared-notification`, on `mini-pc-2`. It does not expose public
Ingress, NodePort or unauthenticated administration. Application administration,