diff --git a/clusters/cl01tl/applications/directus/templates/external-secret.yaml b/clusters/cl01tl/applications/directus/templates/external-secret.yaml index a87abf098..4f27f20ea 100644 --- a/clusters/cl01tl/applications/directus/templates/external-secret.yaml +++ b/clusters/cl01tl/applications/directus/templates/external-secret.yaml @@ -176,3 +176,33 @@ spec: key: /digital-ocean/home-infra/postgres-backups metadataPolicy: None property: secret + +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: directus-postgresql-17-cluster-backup-secret-weekly + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: directus-postgresql-17-cluster-backup-secret-weekly + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/postgres-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/postgres-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/applications/directus/values.yaml b/clusters/cl01tl/applications/directus/values.yaml index 14c96232e..b6a644a77 100644 --- a/clusters/cl01tl/applications/directus/values.yaml +++ b/clusters/cl01tl/applications/directus/values.yaml @@ -178,8 +178,22 @@ postgres-17-cluster: destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster index: 1 retentionPolicy: "2d" + - name: garage + destinationPath: s3://postgres-backups/cl01tl/directus/directus-postgresql-17-cluster + index: 1 + endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900 + endpointCredentials: directus-postgresql-17-cluster-backup-secret-weekly + retentionPolicy: "30d" + isWALArchiver: false + data: + compression: bzip2 + jobs: 2 scheduledBackups: - name: daily-backup suspend: false schedule: "0 0 0 * * *" backupName: external + - name: weekly-backup + suspend: false + schedule: "0 0 4 * * SAT" + backupName: garage