alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

Automated Manifest Update (#2917)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2917
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #2917.
This commit is contained in:
gitea-bot
2025-12-28 00:08:20 +00:00
committed by Alex Lebens
parent 1c422f0977
commit b803b67ec6
212 changed files with 4675 additions and 308 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
clusters/cl01tl/manifests/actual/ExternalSecret-actual-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: actual-data-backup-secret-local
namespace: actual
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: actual
app.kubernetes.io/part-of: actual
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: actual-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/actual/actual-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/actual/ReplicationSource-actual-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: actual-data-backup-source-local
namespace: actual
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: actual
app.kubernetes.io/part-of: actual
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: actual-data-backup
spec:
sourcePVC: actual-data
trigger:
schedule: 0 8 * * *
restic:
pruneIntervalDays: 7
repository: actual-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-config-backup-secret-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-metadata-backup-secret-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-metadata-0.7.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-config-backup-source-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup
spec:
sourcePVC: audiobookshelf-config
trigger:
schedule: 2 8 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-metadata-backup-source-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-metadata-0.7.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup
spec:
sourcePVC: audiobookshelf-metadata
trigger:
schedule: 4 8 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-metadata-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: backrest-config-backup-secret-local
namespace: backrest
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: backrest
app.kubernetes.io/part-of: backrest
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: backrest-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/backrest/ExternalSecret-backrest-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: backrest-data-backup-secret-local
namespace: backrest
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: backrest
app.kubernetes.io/part-of: backrest
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: backrest-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: backrest-config-backup-source-local
namespace: backrest
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: backrest
app.kubernetes.io/part-of: backrest
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: backrest-config-backup
spec:
sourcePVC: backrest-config
trigger:
schedule: 8 8 * * *
restic:
pruneIntervalDays: 7
repository: backrest-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/backrest/ReplicationSource-backrest-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: backrest-data-backup-source-local
namespace: backrest
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: backrest
app.kubernetes.io/part-of: backrest
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: backrest-data-backup
spec:
sourcePVC: backrest-data
trigger:
schedule: 6 8 * * *
restic:
pruneIntervalDays: 7
repository: backrest-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/bazarr/ExternalSecret-bazarr-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: bazarr-config-backup-secret-local
namespace: bazarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: bazarr
app.kubernetes.io/part-of: bazarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: bazarr-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

34
clusters/cl01tl/manifests/bazarr/ReplicationSource-bazarr-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: bazarr-config-backup-source-local
namespace: bazarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: bazarr
app.kubernetes.io/part-of: bazarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: bazarr-config-backup
spec:
sourcePVC: bazarr-config
trigger:
schedule: 10 8 * * *
restic:
pruneIntervalDays: 7
repository: bazarr-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/booklore/ExternalSecret-booklore-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: booklore-config-backup-secret-local
namespace: booklore
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: booklore
app.kubernetes.io/part-of: booklore
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: booklore-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/booklore/booklore-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/booklore/ReplicationSource-booklore-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: booklore-config-backup-source-local
namespace: booklore
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: booklore
app.kubernetes.io/part-of: booklore
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: booklore-config-backup
spec:
sourcePVC: booklore-config
trigger:
schedule: 12 8 * * *
restic:
pruneIntervalDays: 7
repository: booklore-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/code-server/ExternalSecret-code-server-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: code-server-config-backup-secret-local
namespace: code-server
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: code-server-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/code-server-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

34
clusters/cl01tl/manifests/code-server/ReplicationSource-code-server-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: code-server-config-backup-source-local
namespace: code-server
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: code-server
app.kubernetes.io/part-of: code-server
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: code-server-config-backup
spec:
sourcePVC: code-server-config
trigger:
schedule: 16 8 * * *
restic:
pruneIntervalDays: 7
repository: code-server-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/ephemera/ExternalSecret-ephemera-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: ephemera-backup-secret-local
namespace: ephemera
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: ephemera
app.kubernetes.io/part-of: ephemera
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ephemera-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/ephemera/ReplicationSource-ephemera-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: ephemera-backup-source-local
namespace: ephemera
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: ephemera
app.kubernetes.io/part-of: ephemera
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ephemera-backup
spec:
sourcePVC: ephemera
trigger:
schedule: 16 8 * * *
restic:
pruneIntervalDays: 7
repository: ephemera-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/freshrss/Cluster-freshrss-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: freshrss-postgresql-18-cluster
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

58
clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: freshrss-data-backup-secret-local
namespace: freshrss
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: freshrss-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: freshrss-postgresql-18-backup-garage-local-secret
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: freshrss-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: freshrss-postgresql-18-recovery-secret
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: freshrss-postgresql-18-recovery-secret
spec:

4
clusters/cl01tl/manifests/freshrss/ObjectStore-freshrss-postgresql-18-backup-garage-local.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: freshrss-postgresql-18-backup-garage-local
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: freshrss-postgresql-18-backup-garage-local
spec:

4
clusters/cl01tl/manifests/freshrss/ObjectStore-freshrss-postgresql-18-recovery.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "freshrss-postgresql-18-recovery"
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "freshrss-postgresql-18-recovery"
spec:

14
clusters/cl01tl/manifests/freshrss/PrometheusRule-freshrss-postgresql-18-alert-rules.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: freshrss-postgresql-18-alert-rules
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
groups:
@@ -21,7 +21,7 @@ spec:
Pod {{ $labels.pod }}
has been waiting for longer than 5 minutes
expr: |
cnpg_backends_waiting_total > 300
cnpg_backends_waiting_total{namespace="freshrss"} > 300
for: 1m
labels:
severity: warning
@@ -34,7 +34,7 @@ spec:
There are over 10 deadlock conflicts in
{{ $labels.pod }}
expr: |
cnpg_pg_stat_database_deadlocks > 10
cnpg_pg_stat_database_deadlocks{namespace="freshrss"} > 10
for: 1m
labels:
severity: warning
@@ -151,7 +151,7 @@ spec:
CloudNativePG Cluster Pod {{ $labels.pod }}
is taking more than 5 minutes (300 seconds) for a query.
expr: |-
cnpg_backends_max_tx_duration_seconds > 300
cnpg_backends_max_tx_duration_seconds{namespace="freshrss"} > 300
for: 1m
labels:
severity: warning
@@ -222,7 +222,7 @@ spec:
Over 300,000,000 transactions from frozen xid
on pod {{ $labels.pod }}
expr: |
cnpg_pg_database_xid_age > 300000000
cnpg_pg_database_xid_age{namespace="freshrss"} > 300000000
for: 1m
labels:
severity: warning
@@ -247,7 +247,7 @@ spec:
Replica {{ $labels.pod }}
is failing to replicate
expr: |
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
cnpg_pg_replication_in_recovery{namespace="freshrss"} > cnpg_pg_replication_is_wal_receiver_up{namespace="freshrss"}
for: 1m
labels:
severity: warning

39
clusters/cl01tl/manifests/freshrss/ReplicationSource-freshrss-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,39 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: freshrss-data-backup-source-local
namespace: freshrss
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: freshrss-data-backup
spec:
sourcePVC: freshrss-data
trigger:
schedule: 18 8 * * *
restic:
pruneIntervalDays: 7
repository: freshrss-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 568
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 568
runAsUser: 568
supplementalGroups:
- 44
- 100
- 109
- 65539
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/freshrss/ScheduledBackup-freshrss-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "freshrss-postgresql-18-scheduled-backup-live-backup"
namespace: freshrss
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: freshrss-postgresql-18
app.kubernetes.io/instance: freshrss
app.kubernetes.io/part-of: freshrss
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "freshrss-postgresql-18-scheduled-backup-live-backup"
spec:

4
clusters/cl01tl/manifests/gatus/Cluster-gatus-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: gatus-postgresql-18-cluster
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

58
clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: gatus-backup-secret-local
namespace: gatus
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: gatus-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gatus/gatus"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: gatus-postgresql-18-backup-garage-local-secret
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: gatus-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/gatus/ExternalSecret-gatus-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: gatus-postgresql-18-recovery-secret
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: gatus-postgresql-18-recovery-secret
spec:

4
clusters/cl01tl/manifests/gatus/ObjectStore-gatus-postgresql-18-backup-garage-local.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: gatus-postgresql-18-backup-garage-local
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: gatus-postgresql-18-backup-garage-local
spec:

4
clusters/cl01tl/manifests/gatus/ObjectStore-gatus-postgresql-18-recovery.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "gatus-postgresql-18-recovery"
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "gatus-postgresql-18-recovery"
spec:

14
clusters/cl01tl/manifests/gatus/PrometheusRule-gatus-postgresql-18-alert-rules.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: gatus-postgresql-18-alert-rules
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
groups:
@@ -21,7 +21,7 @@ spec:
Pod {{ $labels.pod }}
has been waiting for longer than 5 minutes
expr: |
cnpg_backends_waiting_total > 300
cnpg_backends_waiting_total{namespace="gatus"} > 300
for: 1m
labels:
severity: warning
@@ -34,7 +34,7 @@ spec:
There are over 10 deadlock conflicts in
{{ $labels.pod }}
expr: |
cnpg_pg_stat_database_deadlocks > 10
cnpg_pg_stat_database_deadlocks{namespace="gatus"} > 10
for: 1m
labels:
severity: warning
@@ -151,7 +151,7 @@ spec:
CloudNativePG Cluster Pod {{ $labels.pod }}
is taking more than 5 minutes (300 seconds) for a query.
expr: |-
cnpg_backends_max_tx_duration_seconds > 300
cnpg_backends_max_tx_duration_seconds{namespace="gatus"} > 300
for: 1m
labels:
severity: warning
@@ -222,7 +222,7 @@ spec:
Over 300,000,000 transactions from frozen xid
on pod {{ $labels.pod }}
expr: |
cnpg_pg_database_xid_age > 300000000
cnpg_pg_database_xid_age{namespace="gatus"} > 300000000
for: 1m
labels:
severity: warning
@@ -247,7 +247,7 @@ spec:
Replica {{ $labels.pod }}
is failing to replicate
expr: |
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
cnpg_pg_replication_in_recovery{namespace="gatus"} > cnpg_pg_replication_is_wal_receiver_up{namespace="gatus"}
for: 1m
labels:
severity: warning

29
clusters/cl01tl/manifests/gatus/ReplicationSource-gatus-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: gatus-backup-source-local
namespace: gatus
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: gatus-backup
spec:
sourcePVC: gatus
trigger:
schedule: 22 8 * * *
restic:
pruneIntervalDays: 7
repository: gatus-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/gatus/ScheduledBackup-gatus-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "gatus-postgresql-18-scheduled-backup-live-backup"
namespace: gatus
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: gatus-postgresql-18
app.kubernetes.io/instance: gatus
app.kubernetes.io/part-of: gatus
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "gatus-postgresql-18-scheduled-backup-live-backup"
spec:

58
clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: home-assistant-config-backup-secret-local
namespace: home-assistant
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: home-assistant
app.kubernetes.io/part-of: home-assistant
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: home-assistant-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/home-assistant/home-assistant-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

34
clusters/cl01tl/manifests/home-assistant/ReplicationSource-home-assistant-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: home-assistant-config-backup-source-local
namespace: home-assistant
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: home-assistant
app.kubernetes.io/part-of: home-assistant
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: home-assistant-config-backup
spec:
sourcePVC: home-assistant-config
trigger:
schedule: 24 8 * * *
restic:
pruneIntervalDays: 7
repository: home-assistant-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/huntarr/ExternalSecret-huntarr-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: huntarr-config-backup-secret-local
namespace: huntarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: huntarr
app.kubernetes.io/part-of: huntarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: huntarr-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/huntarr/huntarr-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/huntarr/ReplicationSource-huntarr-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: huntarr-config-backup-source-local
namespace: huntarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: huntarr
app.kubernetes.io/part-of: huntarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: huntarr-config-backup
spec:
sourcePVC: huntarr-config
trigger:
schedule: 26 8 * * *
restic:
pruneIntervalDays: 7
repository: huntarr-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/jellyfin/ExternalSecret-jellyfin-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: jellyfin-config-backup-secret-local
namespace: jellyfin
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: jellyfin
app.kubernetes.io/part-of: jellyfin
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellyfin-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellyfin/jellyfin-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/jellyfin/ReplicationSource-jellyfin-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: jellyfin-config-backup-source-local
namespace: jellyfin
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: jellyfin
app.kubernetes.io/part-of: jellyfin
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellyfin-config-backup
spec:
sourcePVC: jellyfin-config
trigger:
schedule: 30 8 * * *
restic:
pruneIntervalDays: 7
repository: jellyfin-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 10Gi

4
clusters/cl01tl/manifests/jellystat/Cluster-jellystat-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: jellystat-postgresql-18-cluster
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

58
clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: jellystat-data-backup-secret-local
namespace: jellystat
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellystat/jellystat-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: jellystat-postgresql-18-backup-garage-local-secret
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/jellystat/ExternalSecret-jellystat-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: jellystat-postgresql-18-recovery-secret
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-postgresql-18-recovery-secret
spec:

4
clusters/cl01tl/manifests/jellystat/ObjectStore-jellystat-postgresql-18-backup-garage-local.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: jellystat-postgresql-18-backup-garage-local
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-postgresql-18-backup-garage-local
spec:

4
clusters/cl01tl/manifests/jellystat/ObjectStore-jellystat-postgresql-18-recovery.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "jellystat-postgresql-18-recovery"
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "jellystat-postgresql-18-recovery"
spec:

14
clusters/cl01tl/manifests/jellystat/PrometheusRule-jellystat-postgresql-18-alert-rules.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: jellystat-postgresql-18-alert-rules
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
groups:
@@ -21,7 +21,7 @@ spec:
Pod {{ $labels.pod }}
has been waiting for longer than 5 minutes
expr: |
cnpg_backends_waiting_total > 300
cnpg_backends_waiting_total{namespace="jellystat"} > 300
for: 1m
labels:
severity: warning
@@ -34,7 +34,7 @@ spec:
There are over 10 deadlock conflicts in
{{ $labels.pod }}
expr: |
cnpg_pg_stat_database_deadlocks > 10
cnpg_pg_stat_database_deadlocks{namespace="jellystat"} > 10
for: 1m
labels:
severity: warning
@@ -151,7 +151,7 @@ spec:
CloudNativePG Cluster Pod {{ $labels.pod }}
is taking more than 5 minutes (300 seconds) for a query.
expr: |-
cnpg_backends_max_tx_duration_seconds > 300
cnpg_backends_max_tx_duration_seconds{namespace="jellystat"} > 300
for: 1m
labels:
severity: warning
@@ -222,7 +222,7 @@ spec:
Over 300,000,000 transactions from frozen xid
on pod {{ $labels.pod }}
expr: |
cnpg_pg_database_xid_age > 300000000
cnpg_pg_database_xid_age{namespace="jellystat"} > 300000000
for: 1m
labels:
severity: warning
@@ -247,7 +247,7 @@ spec:
Replica {{ $labels.pod }}
is failing to replicate
expr: |
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
cnpg_pg_replication_in_recovery{namespace="jellystat"} > cnpg_pg_replication_is_wal_receiver_up{namespace="jellystat"}
for: 1m
labels:
severity: warning

29
clusters/cl01tl/manifests/jellystat/ReplicationSource-jellystat-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: jellystat-data-backup-source-local
namespace: jellystat
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: jellystat-data-backup
spec:
sourcePVC: jellystat-data
trigger:
schedule: 32 8 * * *
restic:
pruneIntervalDays: 7
repository: jellystat-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/jellystat/ScheduledBackup-jellystat-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "jellystat-postgresql-18-scheduled-backup-live-backup"
namespace: jellystat
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: jellystat-postgresql-18
app.kubernetes.io/instance: jellystat
app.kubernetes.io/part-of: jellystat
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "jellystat-postgresql-18-scheduled-backup-live-backup"
spec:

58
clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: karakeep-backup-secret-local
namespace: karakeep
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: karakeep
app.kubernetes.io/part-of: karakeep
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: karakeep-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/karakeep/karakeep"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/karakeep/ReplicationSource-karakeep-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: karakeep-backup-source-local
namespace: karakeep
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: karakeep
app.kubernetes.io/part-of: karakeep
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: karakeep-backup
spec:
sourcePVC: karakeep
trigger:
schedule: 34 8 * * *
restic:
pruneIntervalDays: 7
repository: karakeep-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/libation/ExternalSecret-libation-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: libation-backup-secret-local
namespace: libation
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: libation
app.kubernetes.io/part-of: libation
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: libation-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/libation/libation"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

29
clusters/cl01tl/manifests/libation/ReplicationSource-libation-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: libation-backup-source-local
namespace: libation
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: libation
app.kubernetes.io/part-of: libation
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: libation-backup
spec:
sourcePVC: libation
trigger:
schedule: 36 8 * * *
restic:
pruneIntervalDays: 7
repository: libation-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: lidarr-postgresql-18-cluster
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

58
clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: lidarr-config-backup-secret-local
namespace: lidarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr/lidarr-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: lidarr-postgresql-18-backup-garage-local-secret
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: lidarr-postgresql-18-recovery-secret
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-postgresql-18-recovery-secret
spec:

4
clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: lidarr-postgresql-18-backup-garage-local
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local
spec:

4
clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "lidarr-postgresql-18-recovery"
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "lidarr-postgresql-18-recovery"
spec:

14
clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: lidarr-postgresql-18-alert-rules
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
groups:
@@ -21,7 +21,7 @@ spec:
Pod {{ $labels.pod }}
has been waiting for longer than 5 minutes
expr: |
cnpg_backends_waiting_total > 300
cnpg_backends_waiting_total{namespace="lidarr"} > 300
for: 1m
labels:
severity: warning
@@ -34,7 +34,7 @@ spec:
There are over 10 deadlock conflicts in
{{ $labels.pod }}
expr: |
cnpg_pg_stat_database_deadlocks > 10
cnpg_pg_stat_database_deadlocks{namespace="lidarr"} > 10
for: 1m
labels:
severity: warning
@@ -151,7 +151,7 @@ spec:
CloudNativePG Cluster Pod {{ $labels.pod }}
is taking more than 5 minutes (300 seconds) for a query.
expr: |-
cnpg_backends_max_tx_duration_seconds > 300
cnpg_backends_max_tx_duration_seconds{namespace="lidarr"} > 300
for: 1m
labels:
severity: warning
@@ -222,7 +222,7 @@ spec:
Over 300,000,000 transactions from frozen xid
on pod {{ $labels.pod }}
expr: |
cnpg_pg_database_xid_age > 300000000
cnpg_pg_database_xid_age{namespace="lidarr"} > 300000000
for: 1m
labels:
severity: warning
@@ -247,7 +247,7 @@ spec:
Replica {{ $labels.pod }}
is failing to replicate
expr: |
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
cnpg_pg_replication_in_recovery{namespace="lidarr"} > cnpg_pg_replication_is_wal_receiver_up{namespace="lidarr"}
for: 1m
labels:
severity: warning

34
clusters/cl01tl/manifests/lidarr/ReplicationSource-lidarr-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: lidarr-config-backup-source-local
namespace: lidarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidarr-config-backup
spec:
sourcePVC: lidarr-config
trigger:
schedule: 38 8 * * *
restic:
pruneIntervalDays: 7
repository: lidarr-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "lidarr-postgresql-18-scheduled-backup-live-backup"
namespace: lidarr
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: lidarr-postgresql-18
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "lidarr-postgresql-18-scheduled-backup-live-backup"
spec:

58
clusters/cl01tl/manifests/lidatube/ExternalSecret-lidatube-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: lidatube-config-backup-secret-local
namespace: lidatube
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: lidatube
app.kubernetes.io/part-of: lidatube
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidatube-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidatube/lidatube-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

34
clusters/cl01tl/manifests/lidatube/ReplicationSource-lidatube-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: lidatube-config-backup-source-local
namespace: lidatube
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: lidatube
app.kubernetes.io/part-of: lidatube
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: lidatube-config-backup
spec:
sourcePVC: lidatube-config
trigger:
schedule: 40 8 * * *
restic:
pruneIntervalDays: 7
repository: lidatube-config-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

58
clusters/cl01tl/manifests/listenarr/ExternalSecret-listenarr-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: listenarr-backup-secret-local
namespace: listenarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: listenarr
app.kubernetes.io/part-of: listenarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: listenarr-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/listenarr/listenarr"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

34
clusters/cl01tl/manifests/listenarr/ReplicationSource-listenarr-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: listenarr-backup-source-local
namespace: listenarr
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: listenarr
app.kubernetes.io/part-of: listenarr
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: listenarr-backup
spec:
sourcePVC: listenarr
trigger:
schedule: 42 8 * * *
restic:
pruneIntervalDays: 7
repository: listenarr-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/matrix-synapse/Cluster-matrix-synapse-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-cluster
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

4
clusters/cl01tl/manifests/matrix-synapse/Database-matrix-synapse-postgresql-18-database-mautrix-discord.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-database-mautrix-discord
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
name: mautrix-discord

4
clusters/cl01tl/manifests/matrix-synapse/Database-matrix-synapse-postgresql-18-database-mautrix-whatsapp.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-database-mautrix-whatsapp
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
name: mautrix-whatsapp

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-hookshot-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-hookshot-backup-secret-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-hookshot-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-hookshot-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-hookshot"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-synapse-backup-secret-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-synapse-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-synapse"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-backup-garage-local-secret
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-recovery-secret
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-postgresql-18-recovery-secret
spec:

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-discord-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: mautrix-discord-backup-secret-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-discord-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-discord-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-mautrix-whatsapp-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: mautrix-whatsapp-backup-secret-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-whatsapp-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-whatsapp-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/matrix-synapse/ObjectStore-matrix-synapse-postgresql-18-backup-garage-local.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-backup-garage-local
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-postgresql-18-backup-garage-local
spec:

4
clusters/cl01tl/manifests/matrix-synapse/ObjectStore-matrix-synapse-postgresql-18-recovery.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "matrix-synapse-postgresql-18-recovery"
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "matrix-synapse-postgresql-18-recovery"
spec:

14
clusters/cl01tl/manifests/matrix-synapse/PrometheusRule-matrix-synapse-postgresql-18-alert-rules.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: matrix-synapse-postgresql-18-alert-rules
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
groups:
@@ -21,7 +21,7 @@ spec:
Pod {{ $labels.pod }}
has been waiting for longer than 5 minutes
expr: |
cnpg_backends_waiting_total > 300
cnpg_backends_waiting_total{namespace="matrix-synapse"} > 300
for: 1m
labels:
severity: warning
@@ -34,7 +34,7 @@ spec:
There are over 10 deadlock conflicts in
{{ $labels.pod }}
expr: |
cnpg_pg_stat_database_deadlocks > 10
cnpg_pg_stat_database_deadlocks{namespace="matrix-synapse"} > 10
for: 1m
labels:
severity: warning
@@ -151,7 +151,7 @@ spec:
CloudNativePG Cluster Pod {{ $labels.pod }}
is taking more than 5 minutes (300 seconds) for a query.
expr: |-
cnpg_backends_max_tx_duration_seconds > 300
cnpg_backends_max_tx_duration_seconds{namespace="matrix-synapse"} > 300
for: 1m
labels:
severity: warning
@@ -222,7 +222,7 @@ spec:
Over 300,000,000 transactions from frozen xid
on pod {{ $labels.pod }}
expr: |
cnpg_pg_database_xid_age > 300000000
cnpg_pg_database_xid_age{namespace="matrix-synapse"} > 300000000
for: 1m
labels:
severity: warning
@@ -247,7 +247,7 @@ spec:
Replica {{ $labels.pod }}
is failing to replicate
expr: |
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
cnpg_pg_replication_in_recovery{namespace="matrix-synapse"} > cnpg_pg_replication_is_wal_receiver_up{namespace="matrix-synapse"}
for: 1m
labels:
severity: warning

29
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-hookshot-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: matrix-hookshot-backup-source-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-hookshot-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-hookshot-backup
spec:
sourcePVC: matrix-hookshot
trigger:
schedule: 46 8 * * *
restic:
pruneIntervalDays: 7
repository: matrix-hookshot-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-matrix-synapse-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: matrix-synapse-backup-source-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-synapse-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: matrix-synapse-backup
spec:
sourcePVC: matrix-synapse
trigger:
schedule: 44 8 * * *
restic:
pruneIntervalDays: 7
repository: matrix-synapse-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

32
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-discord-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: mautrix-discord-backup-source-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-discord-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-discord-backup
spec:
sourcePVC: mautrix-discord
trigger:
schedule: 48 8 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-discord-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
runAsGroup: 1337
runAsUser: 1337
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

32
clusters/cl01tl/manifests/matrix-synapse/ReplicationSource-mautrix-whatsapp-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: mautrix-whatsapp-backup-source-local
namespace: matrix-synapse
labels:
helm.sh/chart: volsync-target-whatsapp-0.7.0
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: mautrix-whatsapp-backup
spec:
sourcePVC: mautrix-whatsapp
trigger:
schedule: 50 8 * * *
restic:
pruneIntervalDays: 7
repository: mautrix-whatsapp-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
runAsGroup: 1337
runAsUser: 1337
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/matrix-synapse/ScheduledBackup-matrix-synapse-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "matrix-synapse-postgresql-18-scheduled-backup-live-backup"
namespace: matrix-synapse
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: matrix-synapse-postgresql-18
app.kubernetes.io/instance: matrix-synapse
app.kubernetes.io/part-of: matrix-synapse
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "matrix-synapse-postgresql-18-scheduled-backup-live-backup"
spec:

58
clusters/cl01tl/manifests/navidrome/ExternalSecret-navidrome-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: navidrome-data-backup-secret-local
namespace: navidrome
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: navidrome
app.kubernetes.io/part-of: navidrome
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: navidrome-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/navidrome/navidrome-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

34
clusters/cl01tl/manifests/navidrome/ReplicationSource-navidrome-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: navidrome-data-backup-source-local
namespace: navidrome
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: navidrome
app.kubernetes.io/part-of: navidrome
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: navidrome-data-backup
spec:
sourcePVC: navidrome-data
trigger:
schedule: 52 8 * * *
restic:
pruneIntervalDays: 7
repository: navidrome-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsUser: 1000
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/ollama/Cluster-ollama-web-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: ollama-web-postgresql-18-cluster
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

58
clusters/cl01tl/manifests/ollama/ExternalSecret-ollama-web-data-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: ollama-web-data-backup-secret-local
namespace: ollama
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-data-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ollama/ollama-web-data"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/ollama/ExternalSecret-ollama-web-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: ollama-web-postgresql-18-backup-garage-local-secret
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/ollama/ExternalSecret-ollama-web-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: ollama-web-postgresql-18-recovery-secret
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-postgresql-18-recovery-secret
spec:

4
clusters/cl01tl/manifests/ollama/ObjectStore-ollama-web-postgresql-18-backup-garage-local.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: ollama-web-postgresql-18-backup-garage-local
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-postgresql-18-backup-garage-local
spec:

4
clusters/cl01tl/manifests/ollama/ObjectStore-ollama-web-postgresql-18-recovery.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "ollama-web-postgresql-18-recovery"
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "ollama-web-postgresql-18-recovery"
spec:

14
clusters/cl01tl/manifests/ollama/PrometheusRule-ollama-web-postgresql-18-alert-rules.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: ollama-web-postgresql-18-alert-rules
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
groups:
@@ -21,7 +21,7 @@ spec:
Pod {{ $labels.pod }}
has been waiting for longer than 5 minutes
expr: |
cnpg_backends_waiting_total > 300
cnpg_backends_waiting_total{namespace="ollama"} > 300
for: 1m
labels:
severity: warning
@@ -34,7 +34,7 @@ spec:
There are over 10 deadlock conflicts in
{{ $labels.pod }}
expr: |
cnpg_pg_stat_database_deadlocks > 10
cnpg_pg_stat_database_deadlocks{namespace="ollama"} > 10
for: 1m
labels:
severity: warning
@@ -151,7 +151,7 @@ spec:
CloudNativePG Cluster Pod {{ $labels.pod }}
is taking more than 5 minutes (300 seconds) for a query.
expr: |-
cnpg_backends_max_tx_duration_seconds > 300
cnpg_backends_max_tx_duration_seconds{namespace="ollama"} > 300
for: 1m
labels:
severity: warning
@@ -222,7 +222,7 @@ spec:
Over 300,000,000 transactions from frozen xid
on pod {{ $labels.pod }}
expr: |
cnpg_pg_database_xid_age > 300000000
cnpg_pg_database_xid_age{namespace="ollama"} > 300000000
for: 1m
labels:
severity: warning
@@ -247,7 +247,7 @@ spec:
Replica {{ $labels.pod }}
is failing to replicate
expr: |
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
cnpg_pg_replication_in_recovery{namespace="ollama"} > cnpg_pg_replication_is_wal_receiver_up{namespace="ollama"}
for: 1m
labels:
severity: warning

32
clusters/cl01tl/manifests/ollama/ReplicationSource-ollama-web-data-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: ollama-web-data-backup-source-local
namespace: ollama
labels:
helm.sh/chart: volsync-target-data-0.7.0
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: ollama-web-data-backup
spec:
sourcePVC: ollama-web-data
trigger:
schedule: 54 8 * * *
restic:
pruneIntervalDays: 7
repository: ollama-web-data-backup-secret-local
retain:
daily: 7
hourly: 0
monthly: 3
weekly: 4
yearly: 1
moverSecurityContext:
runAsGroup: 1337
runAsUser: 1337
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

4
clusters/cl01tl/manifests/ollama/ScheduledBackup-ollama-web-postgresql-18-scheduled-backup-live-backup.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: "ollama-web-postgresql-18-scheduled-backup-live-backup"
namespace: ollama
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: ollama-web-postgresql-18
app.kubernetes.io/instance: ollama
app.kubernetes.io/part-of: ollama
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: "ollama-web-postgresql-18-scheduled-backup-live-backup"
spec:

4
clusters/cl01tl/manifests/postiz/Cluster-postiz-postgresql-18-cluster.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: postiz-postgresql-18-cluster
namespace: postiz
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: postiz-postgresql-18
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
spec:
instances: 3

58
clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-config-backup-secret-local
namespace: postiz
labels:
helm.sh/chart: volsync-target-config-0.7.0
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

4
clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-postgresql-18-backup-garage-local-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: postiz-postgresql-18-backup-garage-local-secret
namespace: postiz
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: postiz-postgresql-18
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-postgresql-18-backup-garage-local-secret
spec:

4
clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-postgresql-18-recovery-secret.yaml
View File

@@ -4,11 +4,11 @@ metadata:
name: postiz-postgresql-18-recovery-secret
namespace: postiz
labels:
helm.sh/chart: postgres-18-cluster-7.4.4
helm.sh/chart: postgres-18-cluster-7.4.5
app.kubernetes.io/name: postiz-postgresql-18
app.kubernetes.io/instance: postiz
app.kubernetes.io/part-of: postiz
app.kubernetes.io/version: "7.4.4"
app.kubernetes.io/version: "7.4.5"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postiz-postgresql-18-recovery-secret
spec:

Some files were not shown because too many files have changed in this diff Show More