Files
eSlider de1c7c9558
CI & Release / Verify simulator (push) Successful in 10s
CI & Release / Trivy scan (push) Successful in 9s
CI & Release / Semantic Release (push) Successful in 4s
chore: stop tracking local Terraform state and provider cache
Keep .terraform.lock.hcl for reproducible provider pins; gitignore
state files and the .terraform/ working directory.
2026-07-08 20:18:06 +01:00
..

Terraform — ground warehouse (T3)

The stationary half of the system: the historical warehouse that receives sealed partitions after every flight (03 — Storage tiers). It is the longest-lived, most conventional infrastructure in the design — and therefore the most natural Terraform territory.

Runs in the same k3d cluster as ../sim-env but in its own namespace with its own state: the fleet is disposable, the warehouse is not, and the two lifecycles must never share a terraform destroy.

Resource Purpose
Deployment minio + PVC + NodePort 30901 Object-store facade of the warehouse for downstream consumers (training pipelines, replay)
CronJob offload Post-flight offload: copies Hive partitions verbatim from the fleet lake (T1) into the warehouse (T3), then mirrors into MinIO
Deployment warehouse-explorer + NodePort 30089 Second explorer instance over the warehouse path — historical read-only SQL across all flights

Usage

terraform init
terraform apply
terraform output

After a couple of offload runs, the warehouse explorer shows the same partition tree as the live lake but accumulated across flights — the T1 layout is the T3 layout, which is the whole point: no transform step, no schema drift, DuckDB queries work identically on both ends.

Simulation vs production

  • The CronJob compresses "drone lands, docks, offloads, prunes" into a periodic rsync-style copy. Production offload is event-driven per docking and verifies checksums from the flight's partition manifest before pruning the on-board lake.
  • MinIO credentials here are throwaway defaults; production credentials are sealed per site and never in state or VCS.