Operations¶
Purpose¶
The "something's broken, check/fix it now" section - health verification, logs, monitoring, backup, and troubleshooting, for any environment.
Read-only vs. mutating - the distinction this whole section respects¶
| Examples | Safe to run anytime, any environment | |
|---|---|---|
| Read-only diagnostic | kubectl get/describe/logs, helm list/history, .\scripts\verify-staging.ps1, terraform validate |
Yes |
| Mutating | kubectl scale/delete, helm upgrade/rollback, .\scripts\stop-staging.ps1 -Yes, .\scripts\rollback-staging.ps1 -Yes, terraform apply/destroy |
Only deliberately, and never against production without explicit approval |
Every command reference in this section is labeled with which category it's in.
Pages in this section¶
- Verification -
verify-staging.ps1, the primary post-deploy validation command. - Monitoring - what's wired up (Prometheus
ServiceMonitor/PrometheusRule) versus documented-but-disabled by default. - Backup - the MySQL backup CronJob, encryption, retention.
- Rollback - Helm and Terraform rollback, consolidated.
- Troubleshooting - the full read-only command reference: pods, logs, ingress, DNS/hosts.
Fastest path to "is it working?"¶
.\scripts\verify-staging.ps1 -Context k3d-akshaya-staging -Namespace staging -ReleaseName akshaya-local -IngressHost staging.akshaya.local -IngressPort 80
-Context/overrides for real staging - see Verification).
Expected: Summary: 14 PASS, 0 WARNING, 0 FAIL.