From 8220e804e3c91261526f529b0e6b39ec2f77af95 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Wed, 17 Dec 2025 15:44:16 +0000 Subject: [PATCH] Automated Manifest Update (#2634) This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2634 Co-authored-by: gitea-bot Co-committed-by: gitea-bot --- .../libation/CronJob-libation-main.yaml | 11 +--- .../libation/Deployment-libation-debug.yaml | 10 ---- ...ecret-libation-backup-secret-external.yaml | 58 +++++++++++++++++++ ...alSecret-libation-backup-secret-local.yaml | 58 +++++++++++++++++++ ...lSecret-libation-backup-secret-remote.yaml | 58 +++++++++++++++++++ ...ource-libation-backup-source-external.yaml | 29 ++++++++++ ...onSource-libation-backup-source-local.yaml | 29 ++++++++++ ...nSource-libation-backup-source-remote.yaml | 29 ++++++++++ 8 files changed, 264 insertions(+), 18 deletions(-) create mode 100644 clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-external.yaml create mode 100644 clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-local.yaml create mode 100644 clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-remote.yaml create mode 100644 clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-external.yaml create mode 100644 clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-local.yaml create mode 100644 clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-remote.yaml diff --git a/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml b/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml index 39f89e8a7..216b4ccd2 100644 --- a/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml +++ b/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml @@ -51,13 +51,8 @@ spec: memory: 128Mi volumeMounts: - mountPath: /config - name: config - - mountPath: /data - name: data + name: config-new volumes: - - name: config + - name: config-new persistentVolumeClaim: - claimName: libation-config - - name: data - persistentVolumeClaim: - claimName: libation-nfs-storage + claimName: libation diff --git a/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml b/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml index dfaadde54..c3986e293 100644 --- a/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml +++ b/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml @@ -45,19 +45,9 @@ spec: cpu: 10m memory: 32Mi volumeMounts: - - mountPath: /config-old - name: config - mountPath: /config name: config-new - - mountPath: /data - name: data volumes: - - name: config - persistentVolumeClaim: - claimName: libation-config - name: config-new persistentVolumeClaim: claimName: libation - - name: data - persistentVolumeClaim: - claimName: libation-nfs-storage diff --git a/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-external.yaml b/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-external.yaml new file mode 100644 index 000000000..c8eaf500d --- /dev/null +++ b/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: libation-backup-secret-external + namespace: libation + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: libation + app.kubernetes.io/part-of: libation + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: libation-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/libation/libation" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-local.yaml b/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-local.yaml new file mode 100644 index 000000000..04bd5a4b7 --- /dev/null +++ b/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: libation-backup-secret-local + namespace: libation + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: libation + app.kubernetes.io/part-of: libation + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: libation-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/libation/libation" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-remote.yaml b/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-remote.yaml new file mode 100644 index 000000000..9504b53fa --- /dev/null +++ b/clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: libation-backup-secret-remote + namespace: libation + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: libation + app.kubernetes.io/part-of: libation + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: libation-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/libation/libation" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-external.yaml b/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-external.yaml new file mode 100644 index 000000000..a392ef19f --- /dev/null +++ b/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: libation-backup-source-external + namespace: libation + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: libation + app.kubernetes.io/part-of: libation + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: libation-backup +spec: + sourcePVC: libation + trigger: + schedule: 0 4 * * * + restic: + pruneIntervalDays: 7 + repository: libation-backup-secret-external + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-local.yaml b/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-local.yaml new file mode 100644 index 000000000..a6574f6b3 --- /dev/null +++ b/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: libation-backup-source-local + namespace: libation + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: libation + app.kubernetes.io/part-of: libation + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: libation-backup +spec: + sourcePVC: libation + trigger: + schedule: 0 2 * * * + restic: + pruneIntervalDays: 7 + repository: libation-backup-secret-local + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-remote.yaml b/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-remote.yaml new file mode 100644 index 000000000..287258f49 --- /dev/null +++ b/clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: libation-backup-source-remote + namespace: libation + labels: + helm.sh/chart: volsync-target-config-0.5.0 + app.kubernetes.io/instance: libation + app.kubernetes.io/part-of: libation + app.kubernetes.io/version: "0.5.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: libation-backup +spec: + sourcePVC: libation + trigger: + schedule: 0 3 * * * + restic: + pruneIntervalDays: 7 + repository: libation-backup-secret-remote + retain: + daily: 3 + hourly: 1 + monthly: 2 + weekly: 2 + yearly: 4 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi