### Goal The first iteration of Geo with Logical Replication (LR) is implemented to serve Dedicated, which is using Charts for deployment. Therefore, most of the work to dat has been done to ensure LR can work when Geo is deployed through Charts. This follow-up epic groups the work needed to ensure Geo can be deployed with LR on Omnibus and GET. ### Work breakdown - **Omnibus:** Two new operator attributes for the readonly credentials. Omnibus auto-generates the credentials helper, wires it into `database.yml`, and auto-adds the `geo_privileged` Sidekiq queue. See https://gitlab.com/gitlab-org/gitlab/-/work_items/600561 - **GET (gitlab-environment-toolkit):** Adjust the existing prototype MRs to use the new Omnibus attributes. Add a promotion-teardown playbook. Fix the `bring-primary-back` ordering for the readonly case. See https://gitlab.com/gitlab-org/gitlab/-/work_items/600563 ### Dependencies Blocked by: gitlab-org/gitlab#599652 — Gitlab::Patch::DatabaseConfig must correctly strip config_command from the raw YAML used by Rake tasks, otherwise `db:migrate:geo` and similar fail on Geo secondaries using the Omnibus integration.