f8e8f31306
Reverses the earlier on-demand-only call now that the content is actively maintained. New stacks/stem95su/gdrive-sync.tf: - CronJob stem95su-gdrive-sync (*/15) mounts the content PVC RW and `rclone sync`s the read-only Drive folder "claude" (stem claude/files) onto it. In-cluster, so it mirrors straight to NFS (no rsync/ssh hop). rclone/rclone:1.74.3; scope=drive.readonly; empty-source guard + --max-delete 25; .DS_Store excluded. A dead token surfaces as a failed Job. - ESO ExternalSecret stem95su-rclone <- Vault secret/stem95su (rclone_conf). Requires the GCP OAuth app published to Production (else the refresh token expires ~weekly); re-mint + update secret/stem95su after publishing. Verified: manual job ran guard OK + rclone "nothing to transfer", site 200. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| gdrive-sync.tf | ||
| main.tf | ||
| secrets | ||
| terragrunt.hcl | ||
| variables.tf | ||