Update cluster.yaml

Author: mitchross

infrastructure/database/cloudnative-pg/immich/cluster.yaml

@@ -25,6 +25,31 @@ spec:
     pg_hba:
       - host all all 0.0.0.0/0 md5
   # === NORMAL OPERATION ===
+  # bootstrap:
+  #   initdb:
+  #     database: immich
+  #     owner: immich
+  #     secret:
+  #       name: immich-app-secret
+  #     postInitApplicationSQL:
+  #       - CREATE EXTENSION IF NOT EXISTS vchord CASCADE;
+  #       - CREATE EXTENSION IF NOT EXISTS vector;
+  #       - CREATE EXTENSION IF NOT EXISTS earthdistance CASCADE;
+  #       - GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO "immich";
+  #       - GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO "immich";
+  #       - ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO "immich";
+  #       - ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO "immich";
+  # === DISASTER RECOVERY ===
+  # 1. Comment out the initdb bootstrap above
+  # 2. Uncomment the recovery bootstrap + externalClusters below
+  # 3. Update serverName in externalClusters to match CURRENT backup.serverName (immich-database-v3)
+  # 4. Bump backup.serverName to next version (e.g. immich-database-v3)
+  # 5. Apply directly with: kubectl kustomize ... | kubectl create -f -
+  #    (ArgoCD SSA + CNPG webhook = initdb always wins, must bypass ArgoCD)
+  # 6. After recovery completes, revert to initdb and push
+  #    IMPORTANT: keep backup.serverName at the bumped value (e.g. v3), do NOT revert to v2.
+  #    For the next DR event, recovery source becomes v3 and backup target becomes v4.
+  #
   bootstrap:
     initdb:
       database: immich
@@ -39,22 +64,13 @@ spec:
         - GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO "immich";
         - ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO "immich";
         - ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO "immich";
-  # === DISASTER RECOVERY ===
-  # 1. Comment out the initdb bootstrap above
-  # 2. Uncomment the recovery bootstrap + externalClusters below
-  # 3. Update serverName in externalClusters to match CURRENT backup.serverName (immich-database-v2)
-  # 4. Bump backup.serverName to next version (e.g. immich-database-v3)
-  # 5. Apply directly with: kubectl kustomize ... | kubectl create -f -
-  #    (ArgoCD SSA + CNPG webhook = initdb always wins, must bypass ArgoCD)
-  # 6. After recovery completes, revert to initdb and push
-  #
   # bootstrap:
   #   recovery:
   #     source: immich-backup
   # externalClusters:
   #   - name: immich-backup
   #     barmanObjectStore:
-  #       serverName: immich-database-v2
+  #       serverName: immich-database-v3
   #       destinationPath: s3://postgres-backups/cnpg/immich
   #       endpointURL: http://192.168.10.133:30293
   #       s3Credentials:
@@ -77,7 +93,7 @@ spec:
     enablePodMonitor: true
   backup:
     barmanObjectStore:
-      serverName: immich-database-v2
+      serverName: immich-database-v3
       destinationPath: s3://postgres-backups/cnpg/immich
       endpointURL: http://192.168.10.133:30293
       s3Credentials: