alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 5 Actions Activity

chore: Update manifests after change

Browse Source
This commit is contained in:
Gitea
2026-05-07 20:36:55 +00:00
parent cbd70c80d5
commit ba2f972854
18 changed files with 89 additions and 338 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-external-rclone.yaml
View File

@@ -11,11 +11,11 @@ metadata:
helm.sh/chart: rclone-postgres-backups-external-0.7.0
namespace: cloudnative-pg
spec:
suspend: false
suspend: true
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "0 6 * * 1"
schedule: "0 6 * * 6"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:
@@ -40,7 +40,7 @@ spec:
containers:
- args:
- delete
- dest:postgres-backups-775957147abfbc73
- dest:postgres-backups-ecc1010276b61716
- --min-age
- 45d
- --verbose
@@ -48,29 +48,29 @@ spec:
- name: RCLONE_CONFIG_DEST_TYPE
value: s3
- name: RCLONE_CONFIG_DEST_PROVIDER
value: Other
value: DigitalOcean
- name: RCLONE_CONFIG_DEST_ENV_AUTH
value: "false"
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_ENDPOINT
valueFrom:
secretKeyRef:
key: DEST_ENDPOINT
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
value: "true"
image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
@@ -78,8 +78,8 @@ spec:
name: prune
- args:
- sync
- src:postgres-backups
- dest:postgres-backups-775957147abfbc73
- src:openbao-backups
- dest:postgres-backups-ecc1010276b61716
- --s3-no-check-bucket
- --max-age
- 45d
@@ -101,50 +101,50 @@ spec:
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: postgres-backups-rclone-source-config
name: openbao-backups-rclone-source-config
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: postgres-backups-rclone-source-config
name: openbao-backups-rclone-source-config
- name: RCLONE_CONFIG_SRC_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: postgres-backups-rclone-source-config
name: openbao-backups-rclone-source-config
- name: RCLONE_CONFIG_SRC_ENDPOINT
valueFrom:
secretKeyRef:
key: SRC_ENDPOINT
name: postgres-backups-rclone-source-config
name: openbao-backups-rclone-source-config
- name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
value: "true"
- name: RCLONE_CONFIG_DEST_TYPE
value: s3
- name: RCLONE_CONFIG_DEST_PROVIDER
value: Other
value: DigitalOcean
- name: RCLONE_CONFIG_DEST_ENV_AUTH
value: "false"
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_ENDPOINT
valueFrom:
secretKeyRef:
key: DEST_ENDPOINT
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
- name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
value: "true"
image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc

2
clusters/cl01tl/manifests/cloudnative-pg/CronJob-cloudnative-pg-postgres-backups-remote-rclone.yaml
View File

@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "30 6 * * 1"
schedule: "0 6 * * 6"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:

33
clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-openbao-backups-rclone-source-config.yaml Normal file
View File

@@ -0,0 +1,33 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: openbao-backups-rclone-source-config
namespace: cloudnative-pg
labels:
helm.sh/chart: rclone-postgres-backups-external-0.7.0
app.kubernetes.io/instance: cloudnative-pg
app.kubernetes.io/part-of: cloudnative-pg
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: openbao-backups-rclone-source-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: /garage/home-infra/postgres-backups
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
key: /garage/home-infra/postgres-backups
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
key: /garage/home-infra/postgres-backups
property: ACCESS_REGION
- secretKey: SRC_ENDPOINT
remoteRef:
key: /garage/config
property: ENDPOINT_LOCAL

12
clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-775957147abfbc73-rclone-destination-config.yaml → clusters/cl01tl/manifests/cloudnative-pg/ExternalSecret-postgres-backups-ecc1010276b61716-rclone-destination-config.yaml
View File

@@ -1,7 +1,7 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postgres-backups-775957147abfbc73-rclone-destination-config
name: postgres-backups-ecc1010276b61716-rclone-destination-config
namespace: cloudnative-pg
labels:
helm.sh/chart: rclone-postgres-backups-external-0.7.0
@@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/part-of: cloudnative-pg
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: postgres-backups-775957147abfbc73-rclone-destination-config
app.kubernetes.io/name: postgres-backups-ecc1010276b61716-rclone-destination-config
spec:
secretStoreRef:
kind: ClusterSecretStore
@@ -17,17 +17,17 @@ spec:
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: /backblaze/home-infra/postgres-backups
key: /digital-ocean/home-infra/postgres-backups
property: AWS_ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
key: /backblaze/home-infra/postgres-backups
key: /digital-ocean/home-infra/postgres-backups
property: AWS_SECRET_ACCESS_KEY
- secretKey: ACCESS_REGION
remoteRef:
key: /backblaze/home-infra/postgres-backups
key: /digital-ocean/home-infra/postgres-backups
property: AWS_REGION
- secretKey: DEST_ENDPOINT
remoteRef:
key: /backblaze/config
key: /digital-ocean/config
property: ENDPOINT

108
clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml
View File

@@ -1,108 +0,0 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: directus-directus-assets-external-rclone
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: directus
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: directus-assets-external-rclone
app.kubernetes.io/version: v1.74.0
helm.sh/chart: rclone-directus-assets-external-0.7.0
namespace: directus
spec:
suspend: false
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "0 6 * * 2"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:
spec:
parallelism: 1
backoffLimit: 3
template:
metadata:
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: directus
app.kubernetes.io/name: directus-assets-external-rclone
spec:
enableServiceLinks: false
serviceAccountName: default
automountServiceAccountToken: true
hostIPC: false
hostNetwork: false
hostPID: false
dnsPolicy: ClusterFirst
restartPolicy: Never
containers:
- args:
- sync
- src:directus-assets
- dest:directus-assets-37363a16b71dc59b
- --s3-no-check-bucket
- --verbose
env:
- name: RCLONE_S3_PROVIDER
value: Other
- name: RCLONE_CONFIG_SRC_TYPE
value: s3
- name: RCLONE_CONFIG_SRC_PROVIDER
value: Other
- name: RCLONE_CONFIG_SRC_ENV_AUTH
value: "false"
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: directus-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: directus-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: directus-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_ENDPOINT
valueFrom:
secretKeyRef:
key: SRC_ENDPOINT
name: directus-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
value: "true"
- name: RCLONE_CONFIG_DEST_TYPE
value: s3
- name: RCLONE_CONFIG_DEST_PROVIDER
value: Other
- name: RCLONE_CONFIG_DEST_ENV_AUTH
value: "false"
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: directus-assets-37363a16b71dc59b-rclone-destination-config
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: directus-assets-37363a16b71dc59b-rclone-destination-config
- name: RCLONE_CONFIG_DEST_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: directus-assets-37363a16b71dc59b-rclone-destination-config
- name: RCLONE_CONFIG_DEST_ENDPOINT
valueFrom:
secretKeyRef:
key: DEST_ENDPOINT
name: directus-assets-37363a16b71dc59b-rclone-destination-config
- name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
value: "true"
image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
imagePullPolicy: IfNotPresent
name: sync

8
clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-remote-rclone.yaml → clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-rclone.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: directus-directus-assets-remote-rclone
name: directus-directus-assets-rclone
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: directus
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: directus-assets-remote-rclone
app.kubernetes.io/name: directus-assets-rclone
app.kubernetes.io/version: v1.74.0
helm.sh/chart: rclone-directus-assets-remote-0.7.0
namespace: directus
@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "30 6 * * 2"
schedule: "0 0 * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:
@@ -27,7 +27,7 @@ spec:
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: directus
app.kubernetes.io/name: directus-assets-remote-rclone
app.kubernetes.io/name: directus-assets-rclone
spec:
enableServiceLinks: false
serviceAccountName: default

33
clusters/cl01tl/manifests/directus/ExternalSecret-directus-assets-37363a16b71dc59b-rclone-destination-config.yaml
View File

@@ -1,33 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: directus-assets-37363a16b71dc59b-rclone-destination-config
namespace: directus
labels:
helm.sh/chart: rclone-directus-assets-external-0.7.0
app.kubernetes.io/instance: directus
app.kubernetes.io/part-of: directus
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: directus-assets-37363a16b71dc59b-rclone-destination-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: /backblaze/home-infra/directus-assets
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
key: /backblaze/home-infra/directus-assets
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
key: /backblaze/home-infra/directus-assets
property: ACCESS_REGION
- secretKey: DEST_ENDPOINT
remoteRef:
key: /backblaze/config
property: ENDPOINT

2
clusters/cl01tl/manifests/harbor/Deployment-harbor-registry.yaml
View File

@@ -54,7 +54,7 @@ spec:
terminationGracePeriodSeconds: 120
containers:
- name: registry
image: goharbor/registry-photon:v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
image: goharbor/registry-photon:v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:

2
clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
View File

@@ -57,7 +57,7 @@ spec:
- env:
- name: TZ
value: America/Chicago
image: ghcr.io/home-assistant/home-assistant:2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
image: ghcr.io/home-assistant/home-assistant:2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
name: main
resources:
requests:

108
clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml
View File

@@ -1,108 +0,0 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: karakeep-karakeep-assets-external-rclone
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: karakeep
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: karakeep-assets-external-rclone
app.kubernetes.io/version: v1.74.0
helm.sh/chart: rclone-karakeep-assets-external-0.7.0
namespace: karakeep
spec:
suspend: false
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "0 6 * * 3"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:
spec:
parallelism: 1
backoffLimit: 3
template:
metadata:
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: karakeep
app.kubernetes.io/name: karakeep-assets-external-rclone
spec:
enableServiceLinks: false
serviceAccountName: default
automountServiceAccountToken: true
hostIPC: false
hostNetwork: false
hostPID: false
dnsPolicy: ClusterFirst
restartPolicy: Never
containers:
- args:
- sync
- src:karakeep-assets
- dest:karakeep-assets-bcb0bc04dac3e3fd
- --s3-no-check-bucket
- --verbose
env:
- name: RCLONE_S3_PROVIDER
value: Other
- name: RCLONE_CONFIG_SRC_TYPE
value: s3
- name: RCLONE_CONFIG_SRC_PROVIDER
value: Other
- name: RCLONE_CONFIG_SRC_ENV_AUTH
value: "false"
- name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: karakeep-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: karakeep-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: karakeep-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_ENDPOINT
valueFrom:
secretKeyRef:
key: SRC_ENDPOINT
name: karakeep-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
value: "true"
- name: RCLONE_CONFIG_DEST_TYPE
value: s3
- name: RCLONE_CONFIG_DEST_PROVIDER
value: Other
- name: RCLONE_CONFIG_DEST_ENV_AUTH
value: "false"
- name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
- name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
- name: RCLONE_CONFIG_DEST_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
- name: RCLONE_CONFIG_DEST_ENDPOINT
valueFrom:
secretKeyRef:
key: DEST_ENDPOINT
name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
- name: RCLONE_CONFIG_DEST_FORCE_PATH_STYLE
value: "true"
image: rclone/rclone:1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
imagePullPolicy: IfNotPresent
name: sync

2
clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml
View File

@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "30 6 * * 3"
schedule: "10 0 * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:

33
clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config.yaml
View File

@@ -1,33 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
namespace: karakeep
labels:
helm.sh/chart: rclone-karakeep-assets-external-0.7.0
app.kubernetes.io/instance: karakeep
app.kubernetes.io/part-of: karakeep
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: karakeep-assets-bcb0bc04dac3e3fd-rclone-destination-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: /backblaze/home-infra/karakeep-assets
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
key: /backblaze/home-infra/karakeep-assets
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
key: /backblaze/home-infra/karakeep-assets
property: ACCESS_REGION
- secretKey: DEST_ENDPOINT
remoteRef:
key: /backblaze/config
property: ENDPOINT

2
clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml
View File

@@ -73,7 +73,7 @@ spec:
secretKeyRef:
name: matrix-synapse-valkey-config
key: password
image: "ghcr.io/element-hq/synapse:v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c"
image: "ghcr.io/element-hq/synapse:v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297"
imagePullPolicy: IfNotPresent
securityContext: {}
ports:

2
clusters/cl01tl/manifests/ntfy/CronJob-ntfy-ntfy-attachments-rclone.yaml
View File

@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "0 1 * * *"
schedule: "50 0 * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:

2
clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-external-rclone.yaml
View File

@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "0 6 * * 4"
schedule: "10 1 * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:

2
clusters/cl01tl/manifests/openbao/CronJob-openbao-openbao-backups-remote-rclone.yaml
View File

@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "30 6 * * 4"
schedule: "0 1 * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:

18
clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-770aef58c931fcf4-rclone.yaml → clusters/cl01tl/manifests/rclone/CronJob-rclone-web-assets-rclone.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: rclone-web-assets-770aef58c931fcf4-rclone
name: rclone-web-assets-rclone
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: rclone
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone
app.kubernetes.io/name: web-assets-rclone
app.kubernetes.io/version: v1.74.0
helm.sh/chart: rclone-web-assets-remote-0.7.0
namespace: rclone
@@ -15,7 +15,7 @@ spec:
concurrencyPolicy: Forbid
startingDeadlineSeconds: 30
timeZone: America/Chicago
schedule: "0 6 * * 6"
schedule: "30 0 * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 1
jobTemplate:
@@ -27,7 +27,7 @@ spec:
labels:
app.kubernetes.io/controller: main
app.kubernetes.io/instance: rclone
app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone
app.kubernetes.io/name: web-assets-rclone
spec:
enableServiceLinks: false
serviceAccountName: default
@@ -40,7 +40,7 @@ spec:
containers:
- args:
- sync
- src:web-assets-770aef58c931fcf4
- src:web-assets
- dest:web-assets
- --s3-no-check-bucket
- --verbose
@@ -57,22 +57,22 @@ spec:
valueFrom:
secretKeyRef:
key: ACCESS_KEY_ID
name: web-assets-770aef58c931fcf4-rclone-source-config
name: web-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
key: ACCESS_SECRET_KEY
name: web-assets-770aef58c931fcf4-rclone-source-config
name: web-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_REGION
valueFrom:
secretKeyRef:
key: ACCESS_REGION
name: web-assets-770aef58c931fcf4-rclone-source-config
name: web-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_ENDPOINT
valueFrom:
secretKeyRef:
key: SRC_ENDPOINT
name: web-assets-770aef58c931fcf4-rclone-source-config
name: web-assets-rclone-source-config
- name: RCLONE_CONFIG_SRC_FORCE_PATH_STYLE
value: "true"
- name: RCLONE_CONFIG_DEST_TYPE

20
clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-770aef58c931fcf4-rclone-source-config.yaml → clusters/cl01tl/manifests/rclone/ExternalSecret-web-assets-rclone-source-config.yaml
View File

@@ -1,7 +1,7 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: web-assets-770aef58c931fcf4-rclone-source-config
name: web-assets-rclone-source-config
namespace: rclone
labels:
helm.sh/chart: rclone-web-assets-remote-0.7.0
@@ -9,7 +9,7 @@ metadata:
app.kubernetes.io/part-of: rclone
app.kubernetes.io/version: "0.7.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: web-assets-770aef58c931fcf4-rclone-source-config
app.kubernetes.io/name: web-assets-rclone-source-config
spec:
secretStoreRef:
kind: ClusterSecretStore
@@ -17,17 +17,17 @@ spec:
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: /backblaze/home-infra/web-assets
property: AWS_ACCESS_KEY_ID
key: /garage/home-infra/web-assets
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
key: /backblaze/home-infra/web-assets
property: AWS_SECRET_ACCESS_KEY
key: /garage/home-infra/web-assets
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
key: /backblaze/home-infra/web-assets
property: AWS_REGION
key: /garage/home-infra/web-assets
property: ACCESS_REGION
- secretKey: SRC_ENDPOINT
remoteRef:
key: /backblaze/config
property: ENDPOINT
key: /garage/config
property: ENDPOINT_LOCAL