fix(delivery): add PostgreSQL rollback and CloudDM isolation

This commit is contained in:
l x
2026-07-31 11:16:19 +08:00
parent 66fde73792
commit 363ad5f9be
15 changed files with 872 additions and 224 deletions
+9 -2
View File
@@ -68,16 +68,23 @@ DELIVERY_MYSQL_INSPECT_TEMPLATE_NAME=XINFRA MySQL Inspect
DELIVERY_MYSQL_INSPECT_TIMEOUT_SECONDS=90
# AWX Job Template ID for ansible/mysql-rollback.yml; required for automatic cleanup
DELIVERY_ROLLBACK_TEMPLATE_ID=0
# AWX Job Template ID for ansible/postgresql-rollback.yml
DELIVERY_POSTGRESQL_ROLLBACK_TEMPLATE_ID=0
DELIVERY_SERVICE_TOKEN=
# PostgreSQL runtime secrets are injected by an AWX Credential and are never
# persisted in xinfra task payloads:
# PostgreSQL deployment secrets are injected by an AWX Credential and are never
# persisted in xinfra task payloads. CloudDM registration, when enabled, uses
# the separate CLOUDDM_POSTGRESQL_* credential below.
# XINFRA_POSTGRES_ADMIN_PASSWORD
# XINFRA_POSTGRES_REPLICATION_PASSWORD
# XINFRA_POSTGRES_REPLICATION_USER (optional, defaults to xinfra_replication)
CLOUDDM_REGISTER_URL=
CLOUDDM_DELETE_URL=
CLOUDDM_API_TOKEN=
# PostgreSQL uses an explicit contract and separate endpoint/credential.
CLOUDDM_POSTGRESQL_REGISTER_URL=
CLOUDDM_POSTGRESQL_USERNAME=postgres
CLOUDDM_POSTGRESQL_PASSWORD=
JWT_SECRET=change-this-secret
JWT_ISSUER=authserver