security: access control for particles (#169)

* setup firebase custom token * docs * docs * feat: allow admin removing members from a network * fix: properly handle fallback avatar and names This is especially helpful in the case of members who were removed from a network
2026-04-16 15:14:34 -07:00
parent 28b1ff542b
commit ef899ee5cd
36 changed files with 805 additions and 169 deletions
@@ -0,0 +1,38 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: memberreconciler
+spec:
+  schedule: "0 2 * * *"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app: memberreconciler
+        spec:
+          serviceAccountName: default-service-account
+          nodeSelector:
+            cloud.google.com/gke-spot: "true"
+          restartPolicy: Never
+          containers:
+          - name: memberreconciler
+            image: "memberreconciler"
+            resources:
+              requests:
+                memory: "64Mi"
+                cpu: 50m
+              limits:
+                memory: "64Mi"
+                cpu: 50m
+            env:
+            - name: "GCP_PROJECT"
+              value: "flowy-dev-440017"
+            - name: "LLINK_POSTGRES_CONNECTION_URL"
+              valueFrom:
+                secretKeyRef:
+                  name: shared-secrets
+                  key: LLINK_POSTGRES_CONNECTION_URL