vibecarbon 0.3.1 → 0.4.0

package/src/lib/deploy/k8s/ha/index.js

@@ -26,7 +26,7 @@ import * as p from '@clack/prompts';
 import { generateSSHKeyPair } from '../../../../deploy.js';
 import { setupHA } from '../../../cloudflare.js';
 import { c } from '../../../colors.js';
-import { runCommand, runCommandAsync } from '../../../command.js';
+import { runCommandAsync } from '../../../command.js';
 import { fetchWithRetry } from '../../../fetch-retry.js';
 import { setupHA as setupHetznerDnsHA } from '../../../hetzner-dns.js';
 import { initBackend } from '../../../iac/index.js';
@@ -34,7 +34,7 @@ import { perfAsync } from '../../../perf.js';
 import { HetznerProvider } from '../../../providers/hetzner.js';
 import { createPrefixedTracker } from '../../../tracker.js';
 import { StateTracker } from '../../state.js';
-import { destroyK8s } from '../index.js';
+import { readReplPassword } from '../../utils.js';
 import { deployK3s } from '../k3s.js';
 
 /**
@@ -266,6 +266,11 @@ export async function deployK8sHA(options) {
         maxWorkers: options.maxWorkers,
         localTunnelPort: 5001,
         perfPrefix: 'k3s.standby',
+        // DR restore seeds the PRIMARY only. The standby re-syncs from the
+        // promoted primary via replication — running wal-g backup-fetch here
+        // too would create a divergent timeline. Force off regardless of the
+        // top-level -restore flag.
+        restore: null,
       }),
     ),
   ]);
@@ -472,137 +477,6 @@ export async function deployK8sHA(options) {
   };
 }
 
-/**
- * Destroy an HA deployment
- * @param {object} options - Destruction options
- * @returns {Promise<void>}
- */
-export async function destroyK8sHA(options) {
-  const s = p.spinner();
-
-  // Destroy both clusters
-  s.start('Destroying primary cluster');
-  await destroyK8s({ ...options, environment: `${options.environment}-primary` });
-  s.stop('Primary cluster destroyed');
-
-  s.start('Destroying standby cluster');
-  await destroyK8s({ ...options, environment: `${options.environment}-standby` });
-  s.stop('Standby cluster destroyed');
-
-  p.log.success('HA deployment destroyed');
-}
-
-/**
- * Get HA deployment status across regions
- * @param {object} options - Status options
- * @returns {Promise<object>}
- */
-export async function getK8sHAStatus(options = {}) {
-  const env = options.environment || 'prod';
-  const primaryKubeconfig = join(process.cwd(), '.vibecarbon', `kubeconfig-${env}-primary`);
-  const standbyKubeconfig = join(process.cwd(), '.vibecarbon', `kubeconfig-${env}-standby`);
-
-  const status = {
-    primary: { available: false },
-    standby: { available: false },
-    replication: { status: 'unknown' },
-  };
-
-  // Check primary
-  try {
-    const primaryPods = runCommand('kubectl get pods -n vibecarbon -o json', {
-      silent: true,
-      returnOutput: true,
-      env: { ...process.env, KUBECONFIG: primaryKubeconfig },
-    });
-    status.primary = {
-      available: true,
-      pods: JSON.parse(primaryPods),
-    };
-  } catch {
-    // Primary not available
-  }
-
-  // Check standby
-  try {
-    const standbyPods = runCommand('kubectl get pods -n vibecarbon -o json', {
-      silent: true,
-      returnOutput: true,
-      env: { ...process.env, KUBECONFIG: standbyKubeconfig },
-    });
-    status.standby = {
-      available: true,
-      pods: JSON.parse(standbyPods),
-    };
-  } catch {
-    // Standby not available
-  }
-
-  return status;
-}
-
-/**
- * Trigger manual failover
- * @param {object} options - Failover options
- * @param {string} options.targetRegion - Region to promote to primary
- * @returns {Promise<void>}
- */
-export async function triggerFailover(options) {
-  const s = p.spinner();
-
-  s.start(`Initiating failover to ${options.targetRegion}`);
-
-  // Read the activate-standby.sh script for reference
-  const activateScript = join(HA_SCRIPTS_PATH, 'activate-standby.sh');
-  if (!existsSync(activateScript)) {
-    throw new Error('Failover script not found');
-  }
-
-  // Steps from activate-standby.sh:
-  // 1. Promote PostgreSQL standby to primary
-  // 2. Verify database is writable
-  // 3. Scale up Supabase services
-  // 4. Scale up application
-  // 5. Update DNS/load balancer
-
-  const envName = options.environment || 'prod';
-  const targetKubeconfig =
-    options.targetRegion === 'standby'
-      ? join(process.cwd(), '.vibecarbon', `kubeconfig-${envName}-standby`)
-      : join(process.cwd(), '.vibecarbon', `kubeconfig-${envName}-primary`);
-
-  const env = { ...process.env, KUBECONFIG: targetKubeconfig };
-
-  // Promote PostgreSQL (pg_ctl refuses to run as root — must run as postgres user)
-  runCommand(
-    'kubectl exec -n vibecarbon supabase-supabase-db-0 -- su postgres -c "pg_ctl promote -D /var/lib/postgresql/data"',
-    { env, ignoreError: true },
-  );
-
-  // Scale up services. Supabase pods live under Helm chart Deployments
-  // named `supabase-supabase-<component>`; pre-Helm they were just
-  // `auth` / `rest` / `realtime` / `storage`. The app Deployment is our
-  // own so it stays `app`.
-  runCommand('kubectl scale deployment/app -n vibecarbon --replicas=2', { env });
-  runCommand('kubectl scale deployment/supabase-supabase-auth -n vibecarbon --replicas=2', { env });
-  runCommand('kubectl scale deployment/supabase-supabase-rest -n vibecarbon --replicas=2', { env });
-  runCommand('kubectl scale deployment/supabase-supabase-realtime -n vibecarbon --replicas=2', {
-    env,
-  });
-  runCommand('kubectl scale deployment/supabase-supabase-storage -n vibecarbon --replicas=1', {
-    env,
-  });
-
-  s.stop(`Failover to ${options.targetRegion} complete`);
-
-  p.log.success('Failover completed successfully');
-  p.log.info('');
-  p.log.info('Next steps:');
-  p.log.info('1. Verify application is accessible');
-  p.log.info('2. Update DNS if Cloudflare is not configured');
-  p.log.info('3. Investigate and recover the original primary');
-}
-
 /**
  * Setup PostgreSQL streaming replication
  * @param {object} options - Replication options
@@ -621,21 +495,11 @@ export async function setupReplication(options) {
   const _standbySupabaseIp = options.standbySupabaseIp || standbyIp;
 
   // replPassword is generated at create time from crypto.randomBytes and is
-  // restricted to base64url characters — no shell escaping needed.
-  // Read from process.env first (CI), then .env.local (the `vibecarbon create`
-  // default write target). Without the .env.local fallback, HA deploys fail
-  // the moment the CLI is invoked without the env var pre-exported — which
-  // is exactly what happened to the e2e harness in the overnight run.
-  let replPassword = process.env.REPL_PASSWORD;
-  if (!replPassword) {
-    const envLocalPath = join(process.cwd(), '.env.local');
-    if (existsSync(envLocalPath)) {
-      const content = readFileSync(envLocalPath, 'utf-8');
-      const m =
-        content.match(/^REPL_PASSWORD="([^"]+)"/m) || content.match(/^REPL_PASSWORD='([^']+)'/m);
-      if (m) replPassword = m[1];
-    }
-  }
+  // restricted to base64url characters — no shell escaping needed. Read from
+  // process.env first (CI), then .env.local (the `vibecarbon create` default
+  // write target). Without the .env.local fallback, HA deploys fail the moment
+  // the CLI is invoked without the env var pre-exported.
+  const replPassword = readReplPassword();
   if (!replPassword) {
     throw new Error(
       'REPL_PASSWORD is not set in process.env or .env.local — HA deploys require a replication password generated at create time.',

package/src/lib/deploy/k8s/index.js

@@ -1,15 +1,13 @@
 /**
  * Kubernetes Deployment Module
  *
- * Thin destroy/status wrappers shared by the single-cluster and HA paths.
+ * Thin destroy wrapper shared by the single-cluster and HA paths.
  * The primary deploy entry point is `deployK3s` in `./k3s.js`. All K8s
  * modes run k3s on plain Ubuntu VMs (Hetzner cx23 by default). Callers
  * should import it directly.
  */
 
-import { join } from 'node:path';
 import * as p from '@clack/prompts';
-import { runCommand } from '../../command.js';
 
 /**
  * Destroy a K8s deployment
@@ -42,21 +40,3 @@ export async function destroyK8s(options) {
     throw error;
   }
 }
-
-/**
- * Get K8s cluster status
- */
-export async function getK8sStatus(options) {
-  const { environment } = options;
-  const kubeconfig = join(process.cwd(), '.vibecarbon', `kubeconfig-${environment}`);
-
-  try {
-    const output = runCommand(['kubectl', 'get', 'nodes', '-o', 'json'], {
-      silent: true,
-      env: { ...process.env, KUBECONFIG: kubeconfig },
-    });
-    return JSON.parse(output);
-  } catch {
-    return { items: [] };
-  }
-}