Installation
Topology requirements and unpublished boundaries
Evaluate high availability as a shared data and platform design rather than a single application setting.
Required design areas
Shared PostgreSQL, common storage, session/topology, ingress, rollout, and platform components must be designed together.
Building blocks present in the chart
The source Helm chart provides multiple replicas, HPA, PodDisruptionBudget, startup, readiness, and liveness probes, graceful termination, and topology-spread fields. These are platform mechanisms, not measured high-availability outcomes or a ready-made SLA.
Data and platform prerequisites
Every application replica must access the same PostgreSQL correctness state and the same artifact content. Use S3-compatible shared storage or a genuinely shared RWX filesystem; do not treat node-local volumes as shared storage for multiple replicas.
- PostgreSQL failover, connection timeout, and pool reconnection behavior
- Effect of storage endpoint or mount outage on readiness and package requests
- Ingress removing unready pods from traffic and handling long uploads or downloads
- Joint behavior of node or zone spread, capacity, HPA metrics, and disruption budget
- Preservation of long-running task lease and retry behavior after replica loss
Failover acceptance plan
Measure the target topology with controlled failure scenarios before treating it as production-ready. Each test must record starting load, injected failure, user impact, recovery time, data integrity, and operational evidence.
- Loss of one application pod and worker node
- Ingress-controller outage or DNS and TLS renewal disruption
- PostgreSQL primary failover and temporary connection loss
- S3 endpoint or RWX mount latency or unavailability
- Replica loss during OSV, scan, cleanup, and storage-transfer tasks
Unpublished evidence
No ready-made capacity profile, node count, failover acceptance result, RTO/RPO, or SLA is published.
Evidence required for publication
This page can move to verified only after publishing a repeatable load profile for a specific release and topology, dated failover results, data-consistency checks, measured recovery times, capacity boundaries, and approved operational ownership.