alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Activity

Automated Manifest Update (#3961)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #3961
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #3961.
This commit is contained in:
gitea-bot
2026-02-13 20:07:27 +00:00
committed by Alex Lebens
parent 2aca41efd2
commit accc1eddd4
11 changed files with 284 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml
View File

@@ -52,6 +52,15 @@ spec:
barmanObjectName: "rybbit-postgresql-18-backup-garage-local"
serverName: "rybbit-postgresql-18-backup-1"
bootstrap:
initdb:
recovery:
database: app
owner: app
source: rybbit-postgresql-18-backup-1
externalClusters:
- name: rybbit-postgresql-18-backup-1
plugin:
name: barman-cloud.cloudnative-pg.io
enabled: true
isWALArchiver: false
parameters:
barmanObjectName: "rybbit-postgresql-18-recovery"
serverName: rybbit-postgresql-18-backup-1

2
clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml
View File

@@ -43,7 +43,7 @@ spec:
value: https://rybbit.alexlebens.dev
- name: NEXT_PUBLIC_DISABLE_SIGNUP
value: "false"
image: ghcr.io/rybbit-io/rybbit-client:v2.4.0
image: harbor.alexlebens.net/images/rybbit-client:v2.4.0
imagePullPolicy: IfNotPresent
name: main
resources:

8
clusters/cl01tl/manifests/rybbit/ExternalSecret-data-backup-secret-external.yaml → clusters/cl01tl/manifests/rybbit/ExternalSecret-clickhouse-data-backup-secret-external.yaml
View File

@@ -1,15 +1,15 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: data-backup-secret-external
name: clickhouse-data-backup-secret-external
namespace: rybbit
labels:
helm.sh/chart: volsync-target-config-0.7.0
helm.sh/chart: volsync-target-clickhouse-data-0.7.0
app.kubernetes.io/instance: rybbit
app.kubernetes.io/part-of: rybbit
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup-secret-external
app.kubernetes.io/name: clickhouse-data-backup-secret-external
spec:
secretStoreRef:
kind: ClusterSecretStore
@@ -19,7 +19,7 @@ spec:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/rybbit/data"
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/rybbit/clickhouse-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:

58
clusters/cl01tl/manifests/rybbit/ExternalSecret-clickhouse-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: clickhouse-data-backup-secret-local
namespace: rybbit
labels:
helm.sh/chart: volsync-target-clickhouse-data-0.7.0
app.kubernetes.io/instance: rybbit
app.kubernetes.io/part-of: rybbit
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: clickhouse-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/rybbit/clickhouse-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/rybbit/ReplicationSource-clickhouse-data-backup-source-external.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: clickhouse-data-backup-source-external
namespace: rybbit
labels:
helm.sh/chart: volsync-target-clickhouse-data-0.7.0
app.kubernetes.io/instance: rybbit
app.kubernetes.io/part-of: rybbit
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: clickhouse-data-backup
spec:
sourcePVC: clickhouse-data
trigger:
schedule: 40 12 * * *
restic:
pruneIntervalDays: 7
repository: clickhouse-data-backup-secret-external
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

12
clusters/cl01tl/manifests/rybbit/ReplicationSource-data-backup-source-external.yaml → clusters/cl01tl/manifests/rybbit/ReplicationSource-clickhouse-data-backup-source-local.yaml
View File

@@ -1,22 +1,22 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: data-backup-source-external
name: clickhouse-data-backup-source-local
namespace: rybbit
labels:
helm.sh/chart: volsync-target-config-0.7.0
helm.sh/chart: volsync-target-clickhouse-data-0.7.0
app.kubernetes.io/instance: rybbit
app.kubernetes.io/part-of: rybbit
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: data-backup
app.kubernetes.io/name: clickhouse-data-backup
spec:
sourcePVC: data
sourcePVC: clickhouse-data
trigger:
schedule: 0 9 * * *
schedule: 40 11 * * *
restic:
pruneIntervalDays: 7
repository: data-backup-secret-external
repository: clickhouse-data-backup-secret-local
retain:
daily: 7
hourly: 0

2
clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -13,7 +13,7 @@ metadata:
app.kubernetes.io/name: "rybbit-postgresql-18-scheduled-backup-live-backup"
spec:
immediate: true
suspend: true
suspend: false
schedule: "0 0 0 * * *"
backupOwnerReference: self
cluster:

58
clusters/cl01tl/manifests/yubal/ExternalSecret-yubal-backup-secret-external.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: yubal-backup-secret-external
namespace: yubal
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: yubal
app.kubernetes.io/part-of: yubal
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: yubal-backup-secret-external
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/yubal/yubal"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_SECRET_ACCESS_KEY

58
clusters/cl01tl/manifests/yubal/ExternalSecret-yubal-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: yubal-backup-secret-local
namespace: yubal
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: yubal
app.kubernetes.io/part-of: yubal
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: yubal-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/yubal/yubal"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/yubal/ReplicationSource-yubal-backup-source-external.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: yubal-backup-source-external
namespace: yubal
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: yubal
app.kubernetes.io/part-of: yubal
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: yubal-backup
spec:
sourcePVC: yubal
trigger:
schedule: 42 12 * * *
restic:
pruneIntervalDays: 7
repository: yubal-backup-secret-external
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/yubal/ReplicationSource-yubal-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: yubal-backup-source-local
namespace: yubal
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: yubal
app.kubernetes.io/part-of: yubal
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: yubal-backup
spec:
sourcePVC: yubal
trigger:
schedule: 42 11 * * *
restic:
pruneIntervalDays: 7
repository: yubal-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi