From 1d3d00efc5dea6e65e4b5560ace9dd219431a797 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Tue, 16 Dec 2025 03:57:33 +0000 Subject: [PATCH] Automated Manifest Update (#2582) This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2582 Co-authored-by: gitea-bot Co-committed-by: gitea-bot --- ...-server-config-backup-source-external.yaml | 5 ++ ...ode-server-config-backup-source-local.yaml | 5 ++ ...de-server-config-backup-source-remote.yaml | 5 ++ ...cret-ephemera-backup-secret-external.yaml} | 21 ++++--- ...alSecret-ephemera-backup-secret-local.yaml | 58 +++++++++++++++++++ ...lSecret-ephemera-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...urce-ephemera-backup-source-external.yaml} | 15 +++-- ...onSource-ephemera-backup-source-local.yaml | 29 ++++++++++ ...nSource-ephemera-backup-source-remote.yaml | 29 ++++++++++ ...freshrss-data-backup-secret-external.yaml} | 19 +++--- ...ret-freshrss-data-backup-secret-local.yaml | 58 +++++++++++++++++++ ...et-freshrss-data-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...freshrss-data-backup-source-external.yaml} | 18 +++--- ...rce-freshrss-data-backup-source-local.yaml | 39 +++++++++++++ ...ce-freshrss-data-backup-source-remote.yaml | 39 +++++++++++++ 15 files changed, 426 insertions(+), 30 deletions(-) rename clusters/cl01tl/manifests/ephemera/{ExternalSecret-ephemera-config-backup-secret.yaml => ExternalSecret-ephemera-backup-secret-external.yaml} (73%) create mode 100644 clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-remote.yaml rename clusters/cl01tl/manifests/ephemera/{ReplicationSource-ephemera-config-backup-source.yaml => ReplicationSource-ephemera-backup-source-external.yaml} (63%) create mode 100644 clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-remote.yaml rename clusters/cl01tl/manifests/freshrss/{ExternalSecret-freshrss-data-backup-secret.yaml => ExternalSecret-freshrss-data-backup-secret-external.yaml} (73%) create mode 100644 clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-remote.yaml rename clusters/cl01tl/manifests/freshrss/{ReplicationSource-freshrss-data-backup-source.yaml => ReplicationSource-freshrss-data-backup-source-external.yaml} (70%) create mode 100644 clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-remote.yaml diff --git a/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-external.yaml b/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-external.yaml index 53b6f6276..aab2ed09f 100644 --- a/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-external.yaml +++ b/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-external.yaml @@ -23,6 +23,11 @@ spec: monthly: 2 weekly: 2 yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-local.yaml b/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-local.yaml index 00cef8d53..bef97e183 100644 --- a/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-local.yaml +++ b/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-local.yaml @@ -23,6 +23,11 @@ spec: monthly: 2 weekly: 2 yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-remote.yaml b/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-remote.yaml index c0d5326cd..bef0f48e9 100644 --- a/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-remote.yaml +++ b/clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-remote.yaml @@ -23,6 +23,11 @@ spec: monthly: 2 weekly: 2 yearly: 4 + moverSecurityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1000 + runAsUser: 1000 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-config-backup-secret.yaml b/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-external.yaml similarity index 73% rename from clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-config-backup-secret.yaml rename to clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-external.yaml index 368517105..e9d2b3200 100644 --- a/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-config-backup-secret.yaml +++ b/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-external.yaml @@ -1,12 +1,15 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: ephemera-config-backup-secret + name: ephemera-backup-secret-external namespace: ephemera labels: - app.kubernetes.io/name: ephemera-config-backup-secret + helm.sh/chart: volsync-target-config-0.3.0 app.kubernetes.io/instance: ephemera app.kubernetes.io/part-of: ephemera + app.kubernetes.io/version: "0.3.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ephemera-backup-secret-external spec: secretStoreRef: kind: ClusterSecretStore @@ -16,27 +19,27 @@ spec: mergePolicy: Merge engineVersion: v2 data: - RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera-config" + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera" data: - secretKey: BUCKET_ENDPOINT remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None - property: S3_BUCKET_ENDPOINT + property: BUCKET_ENDPOINT - secretKey: RESTIC_PASSWORD remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None property: RESTIC_PASSWORD - secretKey: AWS_DEFAULT_REGION remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None property: AWS_DEFAULT_REGION - secretKey: AWS_ACCESS_KEY_ID @@ -45,11 +48,11 @@ spec: decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: access_key + property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: secret_key + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-local.yaml b/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-local.yaml new file mode 100644 index 000000000..74c4ceb91 --- /dev/null +++ b/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: ephemera-backup-secret-local + namespace: ephemera + labels: + helm.sh/chart: volsync-target-config-0.3.0 + app.kubernetes.io/instance: ephemera + app.kubernetes.io/part-of: ephemera + app.kubernetes.io/version: "0.3.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ephemera-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-remote.yaml b/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-remote.yaml new file mode 100644 index 000000000..a44ff429f --- /dev/null +++ b/clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: ephemera-backup-secret-remote + namespace: ephemera + labels: + helm.sh/chart: volsync-target-config-0.3.0 + app.kubernetes.io/instance: ephemera + app.kubernetes.io/part-of: ephemera + app.kubernetes.io/version: "0.3.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ephemera-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-config-backup-source.yaml b/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-external.yaml similarity index 63% rename from clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-config-backup-source.yaml rename to clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-external.yaml index 33d81d8ca..740903024 100644 --- a/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-config-backup-source.yaml +++ b/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-external.yaml @@ -1,26 +1,29 @@ apiVersion: volsync.backube/v1alpha1 kind: ReplicationSource metadata: - name: ephemera-config-backup-source + name: ephemera-backup-source-external namespace: ephemera labels: - app.kubernetes.io/name: ephemera-config-backup-source + helm.sh/chart: volsync-target-config-0.3.0 app.kubernetes.io/instance: ephemera app.kubernetes.io/part-of: ephemera + app.kubernetes.io/version: "0.3.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ephemera-backup spec: sourcePVC: ephemera trigger: schedule: 0 4 * * * restic: pruneIntervalDays: 7 - repository: ephemera-config-backup-secret + repository: ephemera-backup-secret-external retain: - hourly: 1 daily: 3 - weekly: 2 + hourly: 1 monthly: 2 + weekly: 2 yearly: 4 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot - cacheCapacity: 10Gi + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-local.yaml b/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-local.yaml new file mode 100644 index 000000000..5ff880ae0 --- /dev/null +++ b/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: ephemera-backup-source-local + namespace: ephemera + labels: + helm.sh/chart: volsync-target-config-0.3.0 + app.kubernetes.io/instance: ephemera + app.kubernetes.io/part-of: ephemera + app.kubernetes.io/version: "0.3.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ephemera-backup +spec: + sourcePVC: ephemera + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: ephemera-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-remote.yaml b/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-remote.yaml new file mode 100644 index 000000000..870e41f52 --- /dev/null +++ b/clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: ephemera-backup-source-remote + namespace: ephemera + labels: + helm.sh/chart: volsync-target-config-0.3.0 + app.kubernetes.io/instance: ephemera + app.kubernetes.io/part-of: ephemera + app.kubernetes.io/version: "0.3.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ephemera-backup +spec: + sourcePVC: ephemera + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: ephemera-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret.yaml b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-external.yaml similarity index 73% rename from clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret.yaml rename to clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-external.yaml index bcc5111d6..8a434a4d7 100644 --- a/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret.yaml +++ b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-external.yaml @@ -1,12 +1,15 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: freshrss-data-backup-secret + name: freshrss-data-backup-secret-external namespace: freshrss labels: - app.kubernetes.io/name: freshrss-data-backup-secret + helm.sh/chart: volsync-target-data-0.5.0 app.kubernetes.io/instance: freshrss app.kubernetes.io/part-of: freshrss + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss-data-backup-secret-external spec: secretStoreRef: kind: ClusterSecretStore @@ -22,21 +25,21 @@ spec: remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None - property: S3_BUCKET_ENDPOINT + property: BUCKET_ENDPOINT - secretKey: RESTIC_PASSWORD remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /volsync/restic/digital-ocean metadataPolicy: None property: RESTIC_PASSWORD - secretKey: AWS_DEFAULT_REGION remoteRef: conversionStrategy: Default decodingStrategy: None - key: /cl01tl/volsync/restic/config + key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None property: AWS_DEFAULT_REGION - secretKey: AWS_ACCESS_KEY_ID @@ -45,11 +48,11 @@ spec: decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: access_key + property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /digital-ocean/home-infra/volsync-backups metadataPolicy: None - property: secret_key + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-local.yaml b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-local.yaml new file mode 100644 index 000000000..1906388f3 --- /dev/null +++ b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: freshrss-data-backup-secret-local + namespace: freshrss + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: freshrss + app.kubernetes.io/part-of: freshrss + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss-data-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-remote.yaml b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-remote.yaml new file mode 100644 index 000000000..ce901a71b --- /dev/null +++ b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: freshrss-data-backup-secret-remote + namespace: freshrss + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: freshrss + app.kubernetes.io/part-of: freshrss + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss-data-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source.yaml b/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-external.yaml similarity index 70% rename from clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source.yaml rename to clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-external.yaml index 77c9b3f33..099b21e9b 100644 --- a/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source.yaml +++ b/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-external.yaml @@ -1,30 +1,33 @@ apiVersion: volsync.backube/v1alpha1 kind: ReplicationSource metadata: - name: freshrss-data-backup-source + name: freshrss-data-backup-source-external namespace: freshrss labels: - app.kubernetes.io/name: freshrss-data-backup-source + helm.sh/chart: volsync-target-data-0.5.0 app.kubernetes.io/instance: freshrss app.kubernetes.io/part-of: freshrss + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss-data-backup spec: sourcePVC: freshrss-data trigger: schedule: 0 4 * * * restic: pruneIntervalDays: 7 - repository: freshrss-data-backup-secret + repository: freshrss-data-backup-secret-external retain: - hourly: 1 daily: 3 - weekly: 2 + hourly: 1 monthly: 2 + weekly: 2 yearly: 4 moverSecurityContext: - runAsUser: 568 - runAsGroup: 568 fsGroup: 568 fsGroupChangePolicy: OnRootMismatch + runAsGroup: 568 + runAsUser: 568 supplementalGroups: - 44 - 100 @@ -33,3 +36,4 @@ spec: copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-local.yaml b/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-local.yaml new file mode 100644 index 000000000..99c979cdb --- /dev/null +++ b/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-local.yaml @@ -0,0 +1,39 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: freshrss-data-backup-source-local + namespace: freshrss + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: freshrss + app.kubernetes.io/part-of: freshrss + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss-data-backup +spec: + sourcePVC: freshrss-data + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: freshrss-data-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 568 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 568 + runAsUser: 568 + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-remote.yaml b/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-remote.yaml new file mode 100644 index 000000000..b3cc1565c --- /dev/null +++ b/clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-remote.yaml @@ -0,0 +1,39 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: freshrss-data-backup-source-remote + namespace: freshrss + labels: + helm.sh/chart: volsync-target-data-0.5.0 + app.kubernetes.io/instance: freshrss + app.kubernetes.io/part-of: freshrss + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss-data-backup +spec: + sourcePVC: freshrss-data + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: freshrss-data-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + moverSecurityContext: + fsGroup: 568 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 568 + runAsUser: 568 + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi