feat(coder-pg): wire barman-cloud plugin + daily backup #3

2026-04-24T18:18:09Z

k.renner commented

2026-04-24 18:18:09 +00:00

Summary

CNPG instance manager blocks on Unknown plugin: barman-cloud.cloudnative-pg.io when a Cluster omits the plugin — cert loading never happens, pod stuck 0/1.
Match the house pattern: plugin declaration + ObjectStore + daily ScheduledBackup + barman-cloud-creds (copied from authentik-db, same Garage creds).

Test plan

coder-pg reaches 2/2 Ready
First backup arrives in s3://k8s-cnpg/coder-pg on Garage
Coder HelmRelease installs and Coder pod passes OIDC init

🤖 Generated with Claude Code

## Summary - CNPG instance manager blocks on `Unknown plugin: barman-cloud.cloudnative-pg.io` when a Cluster omits the plugin — cert loading never happens, pod stuck 0/1. - Match the house pattern: plugin declaration + ObjectStore + daily ScheduledBackup + barman-cloud-creds (copied from authentik-db, same Garage creds). ## Test plan - [ ] coder-pg reaches 2/2 Ready - [ ] First backup arrives in s3://k8s-cnpg/coder-pg on Garage - [ ] Coder HelmRelease installs and Coder pod passes OIDC init 🤖 Generated with [Claude Code](https://claude.com/claude-code)

k.renner added 1 commit 2026-04-24 18:18:09 +00:00

feat(coder-pg): wire barman-cloud plugin + daily backup 9ca0b6cb0d

The CNPG instance manager's reconcile loop blocks on "Unknown plugin:
barman-cloud.cloudnative-pg.io" when a Cluster omits a plugin declaration,
which in turn prevents TLS cert loading on the status endpoint and leaves
the pod stuck 0/1 Ready.

Match the house pattern (authentik-db, paperless-db, immich-db):

- Declare the plugin in Cluster spec with barmanObjectName: coder-pg-store
- ObjectStore coder-pg-store → s3://k8s-cnpg/coder-pg on Garage (nas-1)
- Daily base backup at 02:30 UTC with immediate first backup
- barman-cloud-creds reused from authentik-db (same Garage creds,
  namespace rewritten to coder)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

k.renner merged commit 72e7e432c8 into master

2026-04-24 18:18:09 +00:00

k.renner referenced this issue from a commit

2026-04-24 18:18:11 +00:00

Merge pull request 'feat(coder-pg): wire barman-cloud plugin + daily backup' (#3) from coder-migration into master

k.renner referenced this pull request

2026-07-08 06:28:52 +00:00

netpol: scope home-assistant world-ingress to the two LBs (security review #sec-2) #125

k.renner referenced this pull request

2026-07-08 06:32:16 +00:00

mosquitto: tighten ACLs (shellies + sml2mqtt least-privilege) (security review #sec-3/4) #126

claude-bot referenced this pull request