Flyway needs public in the search_path to access TimescaleDB extension functions (create_hypertable). The app datasource must NOT include public to prevent accidental cross-schema reads from production data. - spring.flyway.url: currentSchema=<branch>,public (extensions accessible) - spring.datasource.url: currentSchema=<branch> (strict isolation) - SPRING_FLYWAY_URL env var added to K8s base manifest Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>