From 3c5e0303a0ee2ff9cb849b83b6e7d3efb4815e08 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Wed, 11 Mar 2026 21:48:29 +0000 Subject: [PATCH] chore: Update manifests after change --- ...cret-actual-data-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...ce-actual-data-backup-source-external.yaml | 2 +- ...urce-actual-data-backup-source-remote.yaml | 29 ++++++++++ .../manifests/outline/Deployment-outline.yaml | 2 + ...e-outline-data-backup-source-external.yaml | 2 + ...urce-outline-data-backup-source-local.yaml | 2 + 6 files changed, 94 insertions(+), 1 deletion(-) create mode 100644 clusters/cl01tl/manifests/actual/ExternalSecret-actual-data-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-remote.yaml diff --git a/clusters/cl01tl/manifests/actual/ExternalSecret-actual-data-backup-secret-remote.yaml b/clusters/cl01tl/manifests/actual/ExternalSecret-actual-data-backup-secret-remote.yaml new file mode 100644 index 000000000..3d60e8774 --- /dev/null +++ b/clusters/cl01tl/manifests/actual/ExternalSecret-actual-data-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: actual-data-backup-secret-remote + namespace: actual + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: actual + app.kubernetes.io/part-of: actual + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: actual-data-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/actual/actual-data" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-external.yaml b/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-external.yaml index 00d36adeb..6849bd003 100644 --- a/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-external.yaml +++ b/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-external.yaml @@ -13,7 +13,7 @@ metadata: spec: sourcePVC: actual-data trigger: - schedule: 0 9 * * * + schedule: 0 10 * * * restic: pruneIntervalDays: 7 repository: actual-data-backup-secret-external diff --git a/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-remote.yaml b/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-remote.yaml new file mode 100644 index 000000000..d4ea5d84a --- /dev/null +++ b/clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: actual-data-backup-source-remote + namespace: actual + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: actual + app.kubernetes.io/part-of: actual + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: actual-data-backup +spec: + sourcePVC: actual-data + trigger: + schedule: 0 9 * * * + restic: + pruneIntervalDays: 7 + repository: actual-data-backup-secret-remote + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/outline/Deployment-outline.yaml b/clusters/cl01tl/manifests/outline/Deployment-outline.yaml index 3c210c5fb..bbdb5577f 100644 --- a/clusters/cl01tl/manifests/outline/Deployment-outline.yaml +++ b/clusters/cl01tl/manifests/outline/Deployment-outline.yaml @@ -29,6 +29,8 @@ spec: enableServiceLinks: false serviceAccountName: default automountServiceAccountToken: true + securityContext: + fsGroup: 1001 hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-external.yaml b/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-external.yaml index 353732ad0..3941003e4 100644 --- a/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-external.yaml +++ b/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-external.yaml @@ -23,6 +23,8 @@ spec: monthly: 3 weekly: 4 yearly: 1 + moverSecurityContext: + fsGroup: 1001 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-local.yaml b/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-local.yaml index 8b386a2a8..fde9ae0ed 100644 --- a/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-local.yaml +++ b/clusters/cl01tl/manifests/outline/ReplicationSource-outline-data-backup-source-local.yaml @@ -23,6 +23,8 @@ spec: monthly: 3 weekly: 4 yearly: 1 + moverSecurityContext: + fsGroup: 1001 copyMethod: Snapshot storageClassName: ceph-block volumeSnapshotClassName: ceph-blockpool-snapshot