docs: record the MinIO switch and the unversioned storage stack
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GmpYHPSLGmXGZMyLpn2Lbe
This commit is contained in:
parent
db83255c58
commit
e1e23a99e6
1 changed files with 12 additions and 3 deletions
15
TODO.md
15
TODO.md
|
|
@ -19,6 +19,9 @@ Live state as of 2026-09-10. Everything not listed here is deployed and green.
|
||||||
scan now reaches mail, but the file pass has not finished a full cycle
|
scan now reaches mail, but the file pass has not finished a full cycle
|
||||||
since the Milvus rebuild, so no mail has been indexed yet. Watch for
|
since the Milvus rebuild, so no mail has been indexed yet. Watch for
|
||||||
`[SCAN-*] Mail messages: N seen, M queued`.
|
`[SCAN-*] Mail messages: N seen, M queued`.
|
||||||
|
- [ ] **Put ped-ai-storage under version control.** It holds the compose,
|
||||||
|
`check.py` and `bootstrap_basic.py` for a live stack and is not a git repo,
|
||||||
|
so changes there are unreviewable and unrecoverable.
|
||||||
- [ ] **Rebuild the operator image.** Its baked-in `/opt/storage/check.py` has
|
- [ ] **Rebuild the operator image.** Its baked-in `/opt/storage/check.py` has
|
||||||
drifted from the host copy: it lacks the `s3:ListBucket` grant (dropping it
|
drifted from the host copy: it lacks the `s3:ListBucket` grant (dropping it
|
||||||
broke image generation on 2026-09-09) and still resolves the store as
|
broke image generation on 2026-09-09) and still resolves the store as
|
||||||
|
|
@ -40,8 +43,14 @@ Live state as of 2026-09-10. Everything not listed here is deployed and green.
|
||||||
- **Embedded etcd is unusable with authorization on.** Every non-root Milvus user
|
- **Embedded etcd is unusable with authorization on.** Every non-root Milvus user
|
||||||
failed `etcdserver: invalid auth token`. Both stores now run a separate etcd
|
failed `etcdserver: invalid auth token`. Both stores now run a separate etcd
|
||||||
container, matching the profile that always worked.
|
container, matching the profile that always worked.
|
||||||
- **`COMMON_STORAGETYPE=local` writes objects relative to the working directory.**
|
- **Both Milvus stores now keep objects in MinIO**, matching what clinical always
|
||||||
`/milvus/files` must be a volume or a recreate destroys the segments while etcd
|
did. `COMMON_STORAGETYPE=local` wrote segment files relative to the working
|
||||||
keeps referencing them. Fixed for basic; clinical uses MinIO and is unaffected.
|
directory, so a recreate destroyed them while etcd kept referencing them and the
|
||||||
|
collection hung at Loading forever. S3 semantics also mean either store can be
|
||||||
|
pointed at a managed bucket without touching Milvus — which is what makes a
|
||||||
|
Terraform-managed deployment straightforward.
|
||||||
|
- **Milvus object-store credentials live in `milvus-user.yaml`** in the protected
|
||||||
|
secrets dir, not in the compose, because Milvus has no file-based option for
|
||||||
|
them and the compose should stay reviewable.
|
||||||
|
|
||||||
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue