PostgreSQL 17 High Availability

Read colors.yml before changing desired state or running a lifecycle command.

Safety

• Keep secrets out of colors.yml; use gitignored COLORS_PAR_* exports.
• Never set COLORS_PAR_PROFILE and never edit generated .colors/ files.
• Default to build and create --dry-run; real create/delete needs explicit authorization.
• Keep compute-prevent-destroy: true. Lift it for one authorized delete with COLORS_PAR_COMPUTE_PREVENT_DESTROY=false.
• Restrict postgres-ssh-sources and postgres-client-sources; do not use 0.0.0.0/0.

Commands