poimen-memory/k8s/tekton/agent-memory-migration-task.yaml

apiVersion: tekton.dev/v1
kind: Task
metadata:
  name: agent-memory-migration
  namespace: tekton-pipelines
spec:
  description: Apply agent memory schema migration (004) to production database
  params:
    - name: migration-version
      description: Migration version number
      default: "004"
    - name: database-name
      description: Database name
      default: "memory"
  workspaces:
    - name: source
      description: Git source with migrations
    - name: db-credentials
      description: Database credentials secret
  steps:
    - name: apply-migration
      image: postgres:16-alpine
      workingDir: $(workspaces.source.path)
      env:
        - name: PGPASSWORD
          valueFrom:
            secretKeyRef:
              name: memory-db-app
              key: password
        - name: PGHOST
          value: memory-db-rw.poimen.svc.cluster.local
        - name: PGUSER
          value: app
        - name: PGDATABASE
          value: $(params.database-name)
      script: |
        #!/bin/sh
        set -e
        
        echo "Applying migration $(params.migration-version)_agent_memory_schema.sql"
        
        # Wait for database to be ready
        until pg_isready -h $PGHOST -U $PGUSER -d $PGDATABASE; do
          echo "Waiting for database..."
          sleep 2
        done
        
        # Apply migration
        psql -h $PGHOST -U $PGUSER -d $PGDATABASE \
          -f migrations/$(params.migration-version)_agent_memory_schema.sql
        
        # Verify tables created
        TABLES=$(psql -h $PGHOST -U $PGUSER -d $PGDATABASE -t -c \
          "SELECT count(*) FROM information_schema.tables WHERE table_schema='public' AND table_name IN ('agent_prompt', 'agent_skill', 'agent_decision', 'role_prompt_mapping', 'agent_metrics')")
        
        if [ "$TABLES" -eq 5 ]; then
          echo "✓ All agent memory tables created successfully"
          exit 0
        else
          echo "✗ Migration failed: expected 5 tables, found $TABLES"
          exit 1
        fi

    - name: verify-indexes
      image: postgres:16-alpine
      env:
        - name: PGPASSWORD
          valueFrom:
            secretKeyRef:
              name: memory-db-app
              key: password
        - name: PGHOST
          value: memory-db-rw.poimen.svc.cluster.local
        - name: PGUSER
          value: app
        - name: PGDATABASE
          value: $(params.database-name)
      script: |
        #!/bin/sh
        set -e
        
        echo "Verifying indexes..."
        
        INDEXES=$(psql -h $PGHOST -U $PGUSER -d $PGDATABASE -t -c \
          "SELECT count(*) FROM pg_indexes WHERE schemaname='public' AND tablename LIKE 'agent_%'")
        
        if [ "$INDEXES" -gt 0 ]; then
          echo "✓ Found $INDEXES indexes on agent tables"
          psql -h $PGHOST -U $PGUSER -d $PGDATABASE -c \
            "SELECT indexname FROM pg_indexes WHERE schemaname='public' AND tablename LIKE 'agent_%' ORDER BY indexname;" 
        else
          echo "✗ No indexes found on agent tables"
          exit 1
        fi

    - name: verify-schemas
      image: postgres:16-alpine
      env:
        - name: PGPASSWORD
          valueFrom:
            secretKeyRef:
              name: memory-db-app
              key: password
        - name: PGHOST
          value: memory-db-rw.poimen.svc.cluster.local
        - name: PGUSER
          value: app
        - name: PGDATABASE
          value: $(params.database-name)
      script: |
        #!/bin/sh
        set -e
        
        echo "Verifying table schemas..."
        
        # Verify agent_prompt table
        psql -h $PGHOST -U $PGUSER -d $PGDATABASE -c "
          SELECT column_name, data_type, is_nullable
          FROM information_schema.columns
          WHERE table_name='agent_prompt'
          ORDER BY ordinal_position;"
        
        echo "✓ Agent prompt schema verified"
        
        # Verify role_prompt_mapping has foreign key
        psql -h $PGHOST -U $PGUSER -d $PGDATABASE -c "
          SELECT constraint_name, constraint_type
          FROM information_schema.table_constraints
          WHERE table_name='role_prompt_mapping';"
        
        echo "✓ All table schemas verified"