alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

add backups

Browse Source
This commit is contained in:
Alex Lebens
2025-02-17 13:56:21 -06:00
parent 832c8264c4
commit 975b515b26
2 changed files with 76 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
clusters/cl01tl/platform/vault/Chart.yaml
View File

@@ -8,6 +8,7 @@ keywords:
home: https://wiki.alexlebens.dev/doc/vault-TJ1ocQp9WB home: https://wiki.alexlebens.dev/doc/vault-TJ1ocQp9WB
sources: sources:
- https://github.com/hashicorp/vault - https://github.com/hashicorp/vault
- https://github.com/lrstanley/vault-unseal
- https://hub.docker.com/r/hashicorp/vault - https://hub.docker.com/r/hashicorp/vault
- https://github.com/hashicorp/vault-helm - https://github.com/hashicorp/vault-helm
maintainers: maintainers:

150
clusters/cl01tl/platform/vault/templates/external-secret.yaml
View File

@@ -1,79 +1,79 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: vault-snapshot-agent-token name: vault-snapshot-agent-token
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: vault-snapshot-agent-token app.kubernetes.io/name: vault-snapshot-agent-token
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: snapshot app.kubernetes.io/component: snapshot
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# data: data:
# - secretKey: VAULT_APPROLE_ROLE_ID - secretKey: VAULT_APPROLE_ROLE_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/vault/snapshot/approle key: /cl01tl/vault/snapshot/approle
# metadataPolicy: None metadataPolicy: None
# property: role-id property: role-id
# - secretKey: VAULT_APPROLE_SECRET_ID - secretKey: VAULT_APPROLE_SECRET_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/vault/snapshot/approle key: /cl01tl/vault/snapshot/approle
# metadataPolicy: None metadataPolicy: None
# property: secret-id property: secret-id
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: vault-snapshot-s3 name: vault-snapshot-s3
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: vault-snapshot-s3 app.kubernetes.io/name: vault-snapshot-s3
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: snapshot app.kubernetes.io/component: snapshot
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# data: data:
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/vault-backup key: /digital-ocean/home-infra/vault-backup
# metadataPolicy: None metadataPolicy: None
# property: AWS_ACCESS_KEY_ID property: AWS_ACCESS_KEY_ID
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/vault-backup key: /digital-ocean/home-infra/vault-backup
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ENDPOINT_URL - secretKey: AWS_ENDPOINT_URL
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/vault-backup key: /digital-ocean/home-infra/vault-backup
# metadataPolicy: None metadataPolicy: None
# property: AWS_ENDPOINT_URL property: AWS_ENDPOINT_URL
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/vault-backup key: /digital-ocean/home-infra/vault-backup
# metadataPolicy: None metadataPolicy: None
# property: AWS_SECRET_ACCESS_KEY property: AWS_SECRET_ACCESS_KEY
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1