Jinemi/thermograph
4
0
Fork 0
Code Issues 2 Pull requests 3 Projects Releases Packages Wiki Activity Actions
415 commits 8 branches 0 tags 8 MiB
Commit graph

2 commits

Author SHA1 Message Date
Emi Griffith
82e68e89f0 Run the ERA5 lake service in every environment
All checks were successful
PR build (required check) / changes (pull_request) Successful in 9s
Details
secrets-guard / encrypted (pull_request) Successful in 8s
Details
PR build (required check) / build-frontend (pull_request) Has been skipped
Details
PR build (required check) / build-backend (pull_request) Has been skipped
Details
PR build (required check) / validate-observability (pull_request) Has been skipped
Details
PR build (required check) / gate (pull_request) Successful in 2s
Details 
The lake was prod-stack-only; beta and LAN fell straight to NASA. Now the
compose stack gets the same service (backend image, THERMOGRAPH_ROLE=lake,
never host-published) and the backend points at it via THERMOGRAPH_LAKE_URL:

- deploy.sh rolls lake with every backend deploy (same image, different
  role); deploy-stack.sh's backend leg updates it too, tolerating stacks
  that predate the service.
- Creds: beta via the vault (added to beta.yaml); LAN via the Actions S3
  secrets injected by backend-deploy-dev.yml (dev renders no vault). Without
  creds the service stays healthy and answers 503 — reads fall through to
  NASA, so a credential gap can never take a page down.
- Dev overlay lifts the CPU caps like every other service.
 2026-07-23 15:31:06 -07:00
Emi Griffith
ae1d9bb534 Subtree-merge thermograph-infra (origin/main) into infra/ 
git-subtree-dir: infra
git-subtree-mainline: d6df04eab2
git-subtree-split: 99b4b3f78d
 2026-07-22 22:01:11 -07:00