Skip to content

fix(postgres): guard Vestiaire developer database ownership - #5

Open
kaanyagci wants to merge 12 commits into
codex/fashion-iceberg-bootstrapfrom
agent/fashion-crawler-postgres-production
Open

kaanyagci wants to merge 12 commits into
codex/fashion-iceberg-bootstrapfrom
agent/fashion-crawler-postgres-production

Conversation

@kaanyagci

@kaanyagci kaanyagci commented Jul 14, 2026 •

Copy link
Copy Markdown
Member

Changes

  • Scope this PR to the Vestiaire developer database bootstrap and documentation, using the shared safe bootstrap prerequisites below it.
  • Retain existing credentials and database ownership; fail on unexpected owner, excessive privilege or incomplete configuration.
  • Preserve the current shared deployment workflow, PostgreSQL runtime pin and neighboring application configuration.

Native GitHub stack

Native stack #60; builds on #58 and #59, followed by #8.

Validation

Real disposable bootstrap tests cover fresh/repeated installation, retained credentials, rejected ownership/privilege drift and catalog reader positive/negative access. Credential-reset regressions failed before the fix and passed afterward. GitHub bootstrap and general CI passed on the reviewed SHA.

Release status

Reviewed and repaired as part of the shared-service PR sweep. This PR remains unmerged pending GitHub repository gates. No branch-protection bypass or production deployment is included in this review.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR extends the shared PostgreSQL Swarm stack to support the Fashion crawler in production by attaching the production-only Fashion overlay network alias and ensuring the Fashion database/role are provisioned during production deploys, with docs and static validation updated to match.

Changes:

  • Add a production-only makepad-postgres-fashion service alias backed by a new external overlay network variable (MAKEPAD_POSTGRES_FASHION_DB_NETWORK).
  • Provision the Fashion database/role during production deploys and introduce an idempotent bootstrap SQL script (bootstrap/fashion-app.sql).
  • Update README documentation and the static validation script to enforce the new wiring and bootstrap expectations.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
scripts/validate-postgres-config.sh Adds Fashion wiring/bootstrap invariants to the repo’s static configuration validation.
README.md Documents the Fashion production network variable mapping, bootstrap invocation, and connection URI.
envs/production/compose.yml Attaches Postgres to the production-only Fashion overlay network and exposes the makepad-postgres-fashion alias.
bootstrap/fashion-app.sql New idempotent bootstrap to create/repair the fashion DB and fashion_crawler role using a password variable and advisory lock.
.github/workflows/manual-deploy.yml Wires Fashion secrets/env vars, creates the Fashion overlay network in production, and provisions the Fashion DB/role with readiness checks.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@kaanyagci
kaanyagci deployed to production July 15, 2026 22:20 — with GitHub Actions Active
@kaanyagci
kaanyagci changed the base branch from main to codex/fashion-iceberg-bootstrap October 13, 2026 21:12
@kaanyagci
kaanyagci marked this pull request as ready for review October 13, 2026 21:12
@kaanyagci
kaanyagci added this pull request to stack #60 October 13, 2026 21:12
@kaanyagci kaanyagci changed the title Add Fashion crawler Postgres production wiring fix(postgres): guard Vestiaire developer database ownership Oct 13, 2026

This branch was successfully deployed

1 active (outdated) deployment
production — 3d7787d4 Deployed Jul 15, 2026 by kaanyagci via deploy #4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants