k.renner b07e17f090
ci/woodpecker/manual/migrate-paperless Pipeline failed
feat(migrate-authentik-db): same wipe-and-restore self-test
Add a wipe-and-restore step matching the other migrate-* pipelines:
take a fresh authentik-daily Velero Backup (same selector as the live
Schedule — CNPG-managed PVCs excluded since CNPG bootstrap.recovery
handles those from Barman), wipe the namespace, force-reconcile
velero-bootstrap-restore, and wait for the Restore to land.

When the namespace is recreated by Flux:
  - Velero's authentik-daily-bootstrap Restore brings back any non-CNPG
    PVCs (currently none in this homelab — Authentik is otherwise
    stateless, so the Backup is empty but still drives the chain)
  - The ak-pg CNPG Cluster CR is recreated; CNPG operator runs
    bootstrap.recovery against k8s-cnpg/ak-pg, pulling the Barman seed
    produced earlier in this same pipeline
  - Authentik server/worker Deployments come up against the fresh DB

A green pipeline now proves both seed paths end-to-end without a
cluster rebuild. Same 4 h Job-wait, same dependsOn-race fix as the
PVC migrations.
2026-04-29 10:13:28 +02:00
S
Description
No description provided
38 MiB
master
Latest
2026-01-31 15:05:31 +00:00
Languages
Go 35.3%
Shell 24.5%
Python 22.5%
Jinja 5.1%
HCL 4.8%
Other 7.7%