k.rennerandClaude Opus 4.7
448dd40830
Three Flux Kustomizations chained via immich-db → immich-seed → immich: - immich-db: CNPG Cluster using corentingiraud dual-extension image; bootstrap.recovery from s3://k8s-cnpg/im-pg (seeded by the migrate-immich pipeline). Barman ObjectStore + daily ScheduledBackup. - immich-seed: library+ml-cache PVCs (RWM ceph-filesystem, expandable), alpine Job that streams the 171 GiB tarball from s3://k8s-migration/ immich/ and writes /library/.restore-done sentinel. Prune disabled so PVCs survive Kustomization retirement. - immich: server + ML + redis Deployments, ConfigMap for non-secret env, Ingress with letsencrypt-staging (dev cluster), init container that blocks on the restore sentinel, LE-staging CA fetch for OIDC against auth.renner.uno. DB creds via CNPG-managed im-pg-app Secret. DB_VECTOR_EXTENSION intentionally unset — Immich >=1.133 defaults to vchord and auto-migrates pgvecto.rs → VectorChord on first boot against the dual-extension image. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>