k.rennerandClaude Opus 4.8
9d7533bc8a
ak-pg failover/switchover caused ~2.7min of app downtime. Root cause: on demotion CNPG immediately drops the old primary from the -rw service (role->unhealthy), but only promotes the replacement after the old primary is fully down. The default smart shutdown waits smartShutdownTimeout=180s for client connections to drain; Authentik's persistent connections never do, so -rw stays backendless (clients get "No route to host") for the full window. Postgres promotion itself is ~3s. Capping smartShutdownTimeout at 10s bounds the backendless window to ~10-15s (fast shutdown + promotion). Applied to ak-pg first per staged-rollout; pprl-pg and im-pg to follow after validation. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>