diff --git a/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-17-cluster-backup-secret-weekly.yaml b/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-cluster-backup-secret-garage.yaml similarity index 66% rename from clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-17-cluster-backup-secret-weekly.yaml rename to clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-cluster-backup-secret-garage.yaml index bbb937166..255a6c9c1 100644 --- a/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-17-cluster-backup-secret-weekly.yaml +++ b/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-cluster-backup-secret-garage.yaml @@ -1,10 +1,10 @@ apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: - name: directus-postgresql-17-cluster-backup-secret-weekly + name: directus-postgresql-18-cluster-backup-secret-garage namespace: directus labels: - app.kubernetes.io/name: directus-postgresql-17-cluster-backup-secret-weekly + app.kubernetes.io/name: directus-postgresql-18-cluster-backup-secret-garage app.kubernetes.io/instance: directus app.kubernetes.io/part-of: directus spec: @@ -26,3 +26,10 @@ spec: key: /garage/home-infra/postgres-backups metadataPolicy: None property: ACCESS_SECRET_KEY + - secretKey: ACCESS_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/postgres-backups + metadataPolicy: None + property: ACCESS_REGION diff --git a/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-cluster-backup-secret.yaml b/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-cluster-backup-secret.yaml new file mode 100644 index 000000000..1da22da6d --- /dev/null +++ b/clusters/cl01tl/manifests/directus/ExternalSecret-directus-postgresql-18-cluster-backup-secret.yaml @@ -0,0 +1,28 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: directus-postgresql-18-cluster-backup-secret + namespace: directus + labels: + app.kubernetes.io/name: directus-postgresql-18-cluster-backup-secret + app.kubernetes.io/instance: directus + app.kubernetes.io/part-of: directus +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret