exclude-db-from-priming-clear

Skill: Exclude Database From Priming Quick-Clear

When to invoke

• Chained automatically from wire-service-deployment's Step 11, for any new service-cp-* that has just provisioned its own dedicated Postgres database.
• Standalone, for an existing service-cp-* whose database was swept by a quick_clear run and needs the same protection retroactively.

Invocation command: /exclude-db-from-priming-clear

Background

hmcts/cpp-aks-ops/aks_priming_deploy.yaml runs a quick_clear job (condition: eq('${{ parameters.quick_clear }}', true)) that discovers every database on the shared nonprod Postgres flexible server — via az postgres flexible-server db list (dev) or SELECT datname FROM pg_database (non-dev) — and truncates all tables in each one, except a small hardcoded deny-list of system databases: template0, template1, postgres, repmgr, azure_maintenance, azure_sys, hrds, and any previously-excluded service databases.

Any new service database that appears on that server is swept by default. hrds already being in the deny-list shows this "add the db name to the deny-list" fix pattern is established precedent, not a new mechanism this skill invents.

This skill does not change that mechanism (see the design doc's rejected alternative — flipping to an allow-list) — it only keeps the existing deny-list current for every service-cp-*-owned database.

Step 1 — Detect a dedicated database

Run from the root of the service-cp-* repo:

python3 - <<'EOF'
import re, os

candidate = None

if os.path.exists("docker-compose.yml"):
    with open("docker-compose.yml") as f:
        m = re.search(r"POSTGRES_DB:[ \t]*(\S+)", f.read())
        if m:
            candidate = m.group(1).strip()

if not candidate and os.path.exists("src/main/resources/application.yaml"):
    with open("src/main/resources/application.yaml") as f:
        text = f.read()
    m = re.search(
        r"datasource:\s*\n\s*url:\s*.*jdbc:postgresql://[^/]+/([a-zA-Z0-9_]+)",
        text,
    )
    if m:
        candidate = m.group(1)

print(f"DB_DETECTED:{candidate}" if candidate else "NO_DB_OWNED")
EOF