Files
zeekay fc22721446 infra: dedicated Hanzo Base for hanzo.app project metadata
hanzo-app-base (ns hanzo, do-sfo3-hanzo-k8s): SQLite-only Base instance,
IAM-native against hanzo.id (external-auth-only, JWKS), internal ClusterIP.
Defines the projects collection (user_id, space_id, prompts json,
created/updated) with UNIQUE(user_id, space_id) + (user_id, created) via a
JS migration applied at boot. NetworkPolicy pins the only caller to
hanzo-app pods. No image rebuild, no plaintext secrets.

Note: base:0.39.11 reads IAM_ENDPOINT (not IAM_URL) to activate IAM.
2026-07-26 01:42:22 -07:00
..