add db
All checks were successful
lint-test-helm / lint-helm (push) Successful in 25s
render-manifests-push / render-manifests-push (push) Successful in 2m2s
renovate / renovate (push) Successful in 54s

This commit is contained in:
2025-12-27 15:42:55 -06:00
parent 419b6471ef
commit 093c54bb74
4 changed files with 94 additions and 94 deletions

View File

@@ -34,55 +34,55 @@ spec:
metadataPolicy: None
property: metric
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: garage-db-backup-secret-remote
namespace: garage
spec:
data:
- remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
secretKey: BUCKET_ENDPOINT
- remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
secretKey: RESTIC_PASSWORD
- remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
secretKey: AWS_DEFAULT_REGION
- remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
secretKey: AWS_ACCESS_KEY_ID
- remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY
secretKey: AWS_SECRET_ACCESS_KEY
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
data:
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/garage/garage-db"
engineVersion: v2
mergePolicy: Merge
# ---
# apiVersion: external-secrets.io/v1
# kind: ExternalSecret
# metadata:
# name: garage-db-backup-secret-remote
# namespace: garage
# spec:
# data:
# - remoteRef:
# conversionStrategy: Default
# decodingStrategy: None
# key: /volsync/restic/garage-remote
# metadataPolicy: None
# property: BUCKET_ENDPOINT
# secretKey: BUCKET_ENDPOINT
# - remoteRef:
# conversionStrategy: Default
# decodingStrategy: None
# key: /volsync/restic/garage-remote
# metadataPolicy: None
# property: RESTIC_PASSWORD
# secretKey: RESTIC_PASSWORD
# - remoteRef:
# conversionStrategy: Default
# decodingStrategy: None
# key: /garage/home-infra/volsync-backups
# metadataPolicy: None
# property: ACCESS_REGION
# secretKey: AWS_DEFAULT_REGION
# - remoteRef:
# conversionStrategy: Default
# decodingStrategy: None
# key: /garage/home-infra/volsync-backups
# metadataPolicy: None
# property: ACCESS_KEY_ID
# secretKey: AWS_ACCESS_KEY_ID
# - remoteRef:
# conversionStrategy: Default
# decodingStrategy: None
# key: /garage/home-infra/volsync-backups
# metadataPolicy: None
# property: ACCESS_SECRET_KEY
# secretKey: AWS_SECRET_ACCESS_KEY
# secretStoreRef:
# kind: ClusterSecretStore
# name: vault
# target:
# template:
# data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/garage/garage-db"
# engineVersion: v2
# mergePolicy: Merge

View File

@@ -1,12 +1,12 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: garage-db
namespace: garage
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 50Gi
storageClassName: ceph-block
# apiVersion: v1
# kind: PersistentVolumeClaim
# metadata:
# name: garage-db
# namespace: garage
# spec:
# accessModes:
# - ReadWriteOnce
# resources:
# requests:
# storage: 50Gi
# storageClassName: ceph-block

View File

@@ -1,16 +1,16 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationDestination
metadata:
name: garage-db
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: garage-db
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
trigger:
manual: restore-once
restic:
repository: garage-db-backup-secret-remote
destinationPVC: garage-db
copyMethod: Direct
# apiVersion: volsync.backube/v1alpha1
# kind: ReplicationDestination
# metadata:
# name: garage-db
# namespace: {{ .Release.Namespace }}
# labels:
# app.kubernetes.io/name: garage-db
# app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec:
# trigger:
# manual: restore-once
# restic:
# repository: garage-db-backup-secret-remote
# destinationPVC: garage-db
# copyMethod: Direct

View File

@@ -195,20 +195,20 @@ garage:
readOnly: true
mountPropagation: None
subPath: garage.toml
# db:
# forceRename: garage-db
# storageClass: ceph-block
# accessMode: ReadWriteOnce
# size: 50Gi
# retain: true
# advancedMounts:
# main:
# main:
# - path: /var/lib/garage/meta
# readOnly: false
# debug:
# - path: /var/lib/garage/meta
# readOnly: false
db:
forceRename: garage-db
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 50Gi
retain: true
advancedMounts:
main:
main:
- path: /var/lib/garage/meta
readOnly: false
debug:
- path: /var/lib/garage/meta
readOnly: false
data:
storageClass: synology-iscsi-delete
accessMode: ReadWriteOnce