alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

add db
All checks were successful
lint-test-helm / lint-helm (push) Successful in 25s
Details
render-manifests-push / render-manifests-push (push) Successful in 2m2s
Details
renovate / renovate (push) Successful in 54s
Details

Browse Source
This commit is contained in:
Alex Lebens
2025-12-27 15:42:55 -06:00
parent 419b6471ef
commit 093c54bb74
4 changed files with 94 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files

104
clusters/cl01tl/helm/garage/templates/external-secret.yaml
View File

@@ -34,55 +34,55 @@ spec:
metadataPolicy: None metadataPolicy: None
property: metric property: metric
--- # ---
apiVersion: external-secrets.io/v1 # apiVersion: external-secrets.io/v1
kind: ExternalSecret # kind: ExternalSecret
metadata: # metadata:
name: garage-db-backup-secret-remote # name: garage-db-backup-secret-remote
namespace: garage # namespace: garage
spec: # spec:
data: # data:
- remoteRef: # - remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /volsync/restic/garage-remote # key: /volsync/restic/garage-remote
metadataPolicy: None # metadataPolicy: None
property: BUCKET_ENDPOINT # property: BUCKET_ENDPOINT
secretKey: BUCKET_ENDPOINT # secretKey: BUCKET_ENDPOINT
- remoteRef: # - remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /volsync/restic/garage-remote # key: /volsync/restic/garage-remote
metadataPolicy: None # metadataPolicy: None
property: RESTIC_PASSWORD # property: RESTIC_PASSWORD
secretKey: RESTIC_PASSWORD # secretKey: RESTIC_PASSWORD
- remoteRef: # - remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /garage/home-infra/volsync-backups # key: /garage/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: ACCESS_REGION # property: ACCESS_REGION
secretKey: AWS_DEFAULT_REGION # secretKey: AWS_DEFAULT_REGION
- remoteRef: # - remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /garage/home-infra/volsync-backups # key: /garage/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: ACCESS_KEY_ID # property: ACCESS_KEY_ID
secretKey: AWS_ACCESS_KEY_ID # secretKey: AWS_ACCESS_KEY_ID
- remoteRef: # - remoteRef:
conversionStrategy: Default # conversionStrategy: Default
decodingStrategy: None # decodingStrategy: None
key: /garage/home-infra/volsync-backups # key: /garage/home-infra/volsync-backups
metadataPolicy: None # metadataPolicy: None
property: ACCESS_SECRET_KEY # property: ACCESS_SECRET_KEY
secretKey: AWS_SECRET_ACCESS_KEY # secretKey: AWS_SECRET_ACCESS_KEY
secretStoreRef: # secretStoreRef:
kind: ClusterSecretStore # kind: ClusterSecretStore
name: vault # name: vault
target: # target:
template: # template:
data: # data:
RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/garage/garage-db" # RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/garage/garage-db"
engineVersion: v2 # engineVersion: v2
mergePolicy: Merge # mergePolicy: Merge

24
clusters/cl01tl/helm/garage/templates/persistent-volume-claim.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: v1 # apiVersion: v1
kind: PersistentVolumeClaim # kind: PersistentVolumeClaim
metadata: # metadata:
name: garage-db # name: garage-db
namespace: garage # namespace: garage
spec: # spec:
accessModes: # accessModes:
- ReadWriteOnce # - ReadWriteOnce
resources: # resources:
requests: # requests:
storage: 50Gi # storage: 50Gi
storageClassName: ceph-block # storageClassName: ceph-block

32
clusters/cl01tl/helm/garage/templates/replication-destination.yaml
View File

@@ -1,16 +1,16 @@
apiVersion: volsync.backube/v1alpha1 # apiVersion: volsync.backube/v1alpha1
kind: ReplicationDestination # kind: ReplicationDestination
metadata: # metadata:
name: garage-db # name: garage-db
namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
labels: # labels:
app.kubernetes.io/name: garage-db # app.kubernetes.io/name: garage-db
app.kubernetes.io/instance: {{ .Release.Name }} # app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }} # app.kubernetes.io/part-of: {{ .Release.Name }}
spec: # spec:
trigger: # trigger:
manual: restore-once # manual: restore-once
restic: # restic:
repository: garage-db-backup-secret-remote # repository: garage-db-backup-secret-remote
destinationPVC: garage-db # destinationPVC: garage-db
copyMethod: Direct # copyMethod: Direct

28
clusters/cl01tl/helm/garage/values.yaml
View File

@@ -195,20 +195,20 @@ garage:
readOnly: true readOnly: true
mountPropagation: None mountPropagation: None
subPath: garage.toml subPath: garage.toml
# db: db:
# forceRename: garage-db forceRename: garage-db
# storageClass: ceph-block storageClass: ceph-block
# accessMode: ReadWriteOnce accessMode: ReadWriteOnce
# size: 50Gi size: 50Gi
# retain: true retain: true
# advancedMounts: advancedMounts:
# main: main:
# main: main:
# - path: /var/lib/garage/meta - path: /var/lib/garage/meta
# readOnly: false readOnly: false
# debug: debug:
# - path: /var/lib/garage/meta - path: /var/lib/garage/meta
# readOnly: false readOnly: false
data: data:
storageClass: synology-iscsi-delete storageClass: synology-iscsi-delete
accessMode: ReadWriteOnce accessMode: ReadWriteOnce