alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

Automated Manifest Update (#2745)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2745
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #2745.
This commit is contained in:
gitea-bot
2025-12-20 04:25:16 +00:00
committed by Alex Lebens
parent 24835e8118
commit 28af32e607
6 changed files with 118 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
clusters/cl01tl/manifests/vault/ConfigMap-vault-snapshot-script.yaml
View File

@@ -8,15 +8,45 @@ metadata:
app.kubernetes.io/instance: vault
app.kubernetes.io/part-of: vault
data:
update.sh: |
BACKUP_FOLDER=/opt/backup
BACKUP_FILE=$(ls -t $BACKUP_FOLDER | head -n 1)
snapshot.sh: |
MAX_RETRIES=5
SUCCESS=false
for ((i=1; i<=$MAX_RETRIES; i++)); do
if apk update --short &> /dev/null; then
echo ">> Attempt $i: Repositories are reachable";
SUCCESS=true;
break;
else
echo ">> Attempt $i: Connection failed, retrying in 5 seconds ...";
sleep 5;
fi;
done;
if [ "$SUCCESS" = false ]; then
echo ">> ERROR: Could not connect to apk repositories after $MAX_RETRIES attempts, exiting ...";
exit 1;
fi
if ! command -v jq 2>&1 >/dev/null;
then
echo "jq could not be found, installing";
apk add --no-cache jq;
if [ $? -eq 0 ]; then
echo ">> Installation successful";
else
echo ">> Installation failed with exit code $?";
exit 1;
fi;
fi;
echo " ";
echo ">> Running S3 backup for Vault snapshot";
echo ">> Fetching Vault token";
export VAULT_TOKEN=$(vault write auth/approle/login role_id=$VAULT_APPROLE_ROLE_ID secret_id=$VAULT_APPROLE_SECRET_ID -format=json | jq -r .auth.client_token);
if s3cmd put --no-check-md5 --no-check-certificate -v "$BACKUP_FOLDER/$BACKUP_FILE" "${BUCKET}/cl01tl/cl01tl-vault-snapshots/$BACKUP_FILE"; then
echo ">> Upload succeeded"
else
echo ">> ERROR: Upload failed"
fi
echo " ";
echo ">> Taking Vault snapsot ...";
vault operator raft snapshot save /opt/backup/vault-snapshot-$(date +"%Y%m%d-%H-%M").snap
echo " ";
echo ">> Completed Vault snapshot";