Automated Manifest Update (#2919)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: #2919 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #2919.
This commit is contained in:
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: actual-data-backup-source-local
|
|
||||||
namespace: actual
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: actual
|
|
||||||
app.kubernetes.io/part-of: actual
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: actual-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: actual-data
|
|
||||||
trigger:
|
|
||||||
schedule: 0 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: actual-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: audiobookshelf-config-backup-secret-local
|
|
||||||
namespace: audiobookshelf
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: audiobookshelf
|
|
||||||
app.kubernetes.io/part-of: audiobookshelf
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: audiobookshelf-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: audiobookshelf-metadata-backup-secret-local
|
|
||||||
namespace: audiobookshelf
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-metadata-0.7.0
|
|
||||||
app.kubernetes.io/instance: audiobookshelf
|
|
||||||
app.kubernetes.io/part-of: audiobookshelf
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: audiobookshelf-config-backup-source-local
|
|
||||||
namespace: audiobookshelf
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: audiobookshelf
|
|
||||||
app.kubernetes.io/part-of: audiobookshelf
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: audiobookshelf-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: audiobookshelf-config
|
|
||||||
trigger:
|
|
||||||
schedule: 2 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: audiobookshelf-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: audiobookshelf-metadata-backup-source-local
|
|
||||||
namespace: audiobookshelf
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-metadata-0.7.0
|
|
||||||
app.kubernetes.io/instance: audiobookshelf
|
|
||||||
app.kubernetes.io/part-of: audiobookshelf
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: audiobookshelf-metadata-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: audiobookshelf-metadata
|
|
||||||
trigger:
|
|
||||||
schedule: 4 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: audiobookshelf-metadata-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: backrest-config-backup-secret-local
|
|
||||||
namespace: backrest
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: backrest
|
|
||||||
app.kubernetes.io/part-of: backrest
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: backrest-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: backrest-data-backup-secret-local
|
|
||||||
namespace: backrest
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: backrest
|
|
||||||
app.kubernetes.io/part-of: backrest
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: backrest-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/backrest/backrest-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: backrest-config-backup-source-local
|
|
||||||
namespace: backrest
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: backrest
|
|
||||||
app.kubernetes.io/part-of: backrest
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: backrest-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: backrest-config
|
|
||||||
trigger:
|
|
||||||
schedule: 8 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: backrest-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: backrest-data-backup-source-local
|
|
||||||
namespace: backrest
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: backrest
|
|
||||||
app.kubernetes.io/part-of: backrest
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: backrest-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: backrest-data
|
|
||||||
trigger:
|
|
||||||
schedule: 6 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: backrest-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: bazarr-config-backup-secret-local
|
|
||||||
namespace: bazarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: bazarr
|
|
||||||
app.kubernetes.io/part-of: bazarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: bazarr-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/bazarr/bazarr-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: bazarr-config-backup-source-local
|
|
||||||
namespace: bazarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: bazarr
|
|
||||||
app.kubernetes.io/part-of: bazarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: bazarr-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: bazarr-config
|
|
||||||
trigger:
|
|
||||||
schedule: 10 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: bazarr-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: booklore-config-backup-secret-local
|
|
||||||
namespace: booklore
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: booklore
|
|
||||||
app.kubernetes.io/part-of: booklore
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: booklore-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/booklore/booklore-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: booklore-data-backup-secret-local
|
|
||||||
namespace: booklore
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: booklore
|
|
||||||
app.kubernetes.io/part-of: booklore
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: booklore-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/booklore/booklore-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: booklore-config-backup-source-local
|
|
||||||
namespace: booklore
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: booklore
|
|
||||||
app.kubernetes.io/part-of: booklore
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: booklore-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: booklore-config
|
|
||||||
trigger:
|
|
||||||
schedule: 12 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: booklore-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: booklore-data-backup-source-local
|
|
||||||
namespace: booklore
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: booklore
|
|
||||||
app.kubernetes.io/part-of: booklore
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: booklore-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: booklore-data
|
|
||||||
trigger:
|
|
||||||
schedule: 14 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: booklore-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 10Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: code-server-config-backup-secret-local
|
|
||||||
namespace: code-server
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: code-server
|
|
||||||
app.kubernetes.io/part-of: code-server
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: code-server-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/code-server/code-server-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: code-server-config-backup-source-local
|
|
||||||
namespace: code-server
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: code-server
|
|
||||||
app.kubernetes.io/part-of: code-server
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: code-server-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: code-server-config
|
|
||||||
trigger:
|
|
||||||
schedule: 16 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: code-server-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: ephemera-backup-secret-local
|
|
||||||
namespace: ephemera
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: ephemera
|
|
||||||
app.kubernetes.io/part-of: ephemera
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: ephemera-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ephemera/ephemera"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: ephemera-backup-source-local
|
|
||||||
namespace: ephemera
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: ephemera
|
|
||||||
app.kubernetes.io/part-of: ephemera
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: ephemera-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: ephemera
|
|
||||||
trigger:
|
|
||||||
schedule: 16 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: ephemera-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: freshrss-data-backup-secret-local
|
|
||||||
namespace: freshrss
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: freshrss
|
|
||||||
app.kubernetes.io/part-of: freshrss
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: freshrss-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/freshrss/freshrss-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,39 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: freshrss-data-backup-source-local
|
|
||||||
namespace: freshrss
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: freshrss
|
|
||||||
app.kubernetes.io/part-of: freshrss
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: freshrss-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: freshrss-data
|
|
||||||
trigger:
|
|
||||||
schedule: 18 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: freshrss-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 568
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 568
|
|
||||||
runAsUser: 568
|
|
||||||
supplementalGroups:
|
|
||||||
- 44
|
|
||||||
- 100
|
|
||||||
- 109
|
|
||||||
- 65539
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: gatus-backup-secret-local
|
|
||||||
namespace: gatus
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: gatus
|
|
||||||
app.kubernetes.io/part-of: gatus
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: gatus-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gatus/gatus"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: gatus-backup-source-local
|
|
||||||
namespace: gatus
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: gatus
|
|
||||||
app.kubernetes.io/part-of: gatus
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: gatus-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: gatus
|
|
||||||
trigger:
|
|
||||||
schedule: 22 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: gatus-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: gitea-postgresql-18-cluster
|
name: gitea-postgresql-18-cluster
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
spec:
|
spec:
|
||||||
instances: 3
|
instances: 3
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: gitea-postgresql-18-backup-garage-local-secret
|
name: gitea-postgresql-18-backup-garage-local-secret
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: gitea-postgresql-18-backup-garage-local-secret
|
app.kubernetes.io/name: gitea-postgresql-18-backup-garage-local-secret
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: gitea-postgresql-18-recovery-secret
|
name: gitea-postgresql-18-recovery-secret
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: gitea-postgresql-18-recovery-secret
|
app.kubernetes.io/name: gitea-postgresql-18-recovery-secret
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: gitea-shared-storage-backup-secret-local
|
|
||||||
namespace: gitea
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-storage-0.7.0
|
|
||||||
app.kubernetes.io/instance: gitea
|
|
||||||
app.kubernetes.io/part-of: gitea
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: gitea-shared-storage-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/gitea/gitea-shared-storage"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: gitea-postgresql-18-backup-garage-local
|
name: gitea-postgresql-18-backup-garage-local
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: gitea-postgresql-18-backup-garage-local
|
app.kubernetes.io/name: gitea-postgresql-18-backup-garage-local
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: "gitea-postgresql-18-recovery"
|
name: "gitea-postgresql-18-recovery"
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: "gitea-postgresql-18-recovery"
|
app.kubernetes.io/name: "gitea-postgresql-18-recovery"
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: gitea-postgresql-18-alert-rules
|
name: gitea-postgresql-18-alert-rules
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
spec:
|
spec:
|
||||||
groups:
|
groups:
|
||||||
@@ -21,7 +21,7 @@ spec:
|
|||||||
Pod {{ $labels.pod }}
|
Pod {{ $labels.pod }}
|
||||||
has been waiting for longer than 5 minutes
|
has been waiting for longer than 5 minutes
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_backends_waiting_total > 300
|
cnpg_backends_waiting_total{namespace="gitea"} > 300
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -34,7 +34,7 @@ spec:
|
|||||||
There are over 10 deadlock conflicts in
|
There are over 10 deadlock conflicts in
|
||||||
{{ $labels.pod }}
|
{{ $labels.pod }}
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_pg_stat_database_deadlocks > 10
|
cnpg_pg_stat_database_deadlocks{namespace="gitea"} > 10
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -151,7 +151,7 @@ spec:
|
|||||||
CloudNativePG Cluster Pod {{ $labels.pod }}
|
CloudNativePG Cluster Pod {{ $labels.pod }}
|
||||||
is taking more than 5 minutes (300 seconds) for a query.
|
is taking more than 5 minutes (300 seconds) for a query.
|
||||||
expr: |-
|
expr: |-
|
||||||
cnpg_backends_max_tx_duration_seconds > 300
|
cnpg_backends_max_tx_duration_seconds{namespace="gitea"} > 300
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -222,7 +222,7 @@ spec:
|
|||||||
Over 300,000,000 transactions from frozen xid
|
Over 300,000,000 transactions from frozen xid
|
||||||
on pod {{ $labels.pod }}
|
on pod {{ $labels.pod }}
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_pg_database_xid_age > 300000000
|
cnpg_pg_database_xid_age{namespace="gitea"} > 300000000
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -247,7 +247,7 @@ spec:
|
|||||||
Replica {{ $labels.pod }}
|
Replica {{ $labels.pod }}
|
||||||
is failing to replicate
|
is failing to replicate
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
|
cnpg_pg_replication_in_recovery{namespace="gitea"} > cnpg_pg_replication_is_wal_receiver_up{namespace="gitea"}
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
|
|||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: gitea-shared-storage-backup-source-local
|
|
||||||
namespace: gitea
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-storage-0.7.0
|
|
||||||
app.kubernetes.io/instance: gitea
|
|
||||||
app.kubernetes.io/part-of: gitea
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: gitea-shared-storage-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: gitea-shared-storage
|
|
||||||
trigger:
|
|
||||||
schedule: 0 0 0 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 3
|
|
||||||
repository: gitea-shared-storage-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 1
|
|
||||||
hourly: 1
|
|
||||||
monthly: 0
|
|
||||||
weekly: 3
|
|
||||||
yearly: 0
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-filesystem
|
|
||||||
volumeSnapshotClassName: ceph-filesystem-snapshot
|
|
||||||
cacheCapacity: 10Gi
|
|
||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: "gitea-postgresql-18-scheduled-backup-live-backup"
|
name: "gitea-postgresql-18-scheduled-backup-live-backup"
|
||||||
namespace: gitea
|
namespace: gitea
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: gitea-postgresql-18
|
app.kubernetes.io/name: gitea-postgresql-18
|
||||||
app.kubernetes.io/instance: gitea
|
app.kubernetes.io/instance: gitea
|
||||||
app.kubernetes.io/part-of: gitea
|
app.kubernetes.io/part-of: gitea
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: "gitea-postgresql-18-scheduled-backup-live-backup"
|
app.kubernetes.io/name: "gitea-postgresql-18-scheduled-backup-live-backup"
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: home-assistant-config-backup-secret-local
|
|
||||||
namespace: home-assistant
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: home-assistant
|
|
||||||
app.kubernetes.io/part-of: home-assistant
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: home-assistant-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/home-assistant/home-assistant-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: home-assistant-config-backup-source-local
|
|
||||||
namespace: home-assistant
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: home-assistant
|
|
||||||
app.kubernetes.io/part-of: home-assistant
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: home-assistant-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: home-assistant-config
|
|
||||||
trigger:
|
|
||||||
schedule: 24 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: home-assistant-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: huntarr-config-backup-secret-local
|
|
||||||
namespace: huntarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: huntarr
|
|
||||||
app.kubernetes.io/part-of: huntarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: huntarr-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/huntarr/huntarr-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: huntarr-config-backup-source-local
|
|
||||||
namespace: huntarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: huntarr
|
|
||||||
app.kubernetes.io/part-of: huntarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: huntarr-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: huntarr-config
|
|
||||||
trigger:
|
|
||||||
schedule: 26 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: huntarr-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: immich-postgresql-18-cluster
|
name: immich-postgresql-18-cluster
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
spec:
|
spec:
|
||||||
instances: 3
|
instances: 3
|
||||||
|
|||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: immich-backup-secret-local
|
|
||||||
namespace: immich
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: immich
|
|
||||||
app.kubernetes.io/part-of: immich
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: immich-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/immich/immich"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: immich-postgresql-18-backup-garage-local-secret
|
name: immich-postgresql-18-backup-garage-local-secret
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: immich-postgresql-18-backup-garage-local-secret
|
app.kubernetes.io/name: immich-postgresql-18-backup-garage-local-secret
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: immich-postgresql-18-recovery-secret
|
name: immich-postgresql-18-recovery-secret
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: immich-postgresql-18-recovery-secret
|
app.kubernetes.io/name: immich-postgresql-18-recovery-secret
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: immich-postgresql-18-backup-garage-local
|
name: immich-postgresql-18-backup-garage-local
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: immich-postgresql-18-backup-garage-local
|
app.kubernetes.io/name: immich-postgresql-18-backup-garage-local
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: "immich-postgresql-18-recovery"
|
name: "immich-postgresql-18-recovery"
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: "immich-postgresql-18-recovery"
|
app.kubernetes.io/name: "immich-postgresql-18-recovery"
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: immich-postgresql-18-alert-rules
|
name: immich-postgresql-18-alert-rules
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
spec:
|
spec:
|
||||||
groups:
|
groups:
|
||||||
@@ -21,7 +21,7 @@ spec:
|
|||||||
Pod {{ $labels.pod }}
|
Pod {{ $labels.pod }}
|
||||||
has been waiting for longer than 5 minutes
|
has been waiting for longer than 5 minutes
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_backends_waiting_total > 300
|
cnpg_backends_waiting_total{namespace="immich"} > 300
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -34,7 +34,7 @@ spec:
|
|||||||
There are over 10 deadlock conflicts in
|
There are over 10 deadlock conflicts in
|
||||||
{{ $labels.pod }}
|
{{ $labels.pod }}
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_pg_stat_database_deadlocks > 10
|
cnpg_pg_stat_database_deadlocks{namespace="immich"} > 10
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -151,7 +151,7 @@ spec:
|
|||||||
CloudNativePG Cluster Pod {{ $labels.pod }}
|
CloudNativePG Cluster Pod {{ $labels.pod }}
|
||||||
is taking more than 5 minutes (300 seconds) for a query.
|
is taking more than 5 minutes (300 seconds) for a query.
|
||||||
expr: |-
|
expr: |-
|
||||||
cnpg_backends_max_tx_duration_seconds > 300
|
cnpg_backends_max_tx_duration_seconds{namespace="immich"} > 300
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -222,7 +222,7 @@ spec:
|
|||||||
Over 300,000,000 transactions from frozen xid
|
Over 300,000,000 transactions from frozen xid
|
||||||
on pod {{ $labels.pod }}
|
on pod {{ $labels.pod }}
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_pg_database_xid_age > 300000000
|
cnpg_pg_database_xid_age{namespace="immich"} > 300000000
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
@@ -247,7 +247,7 @@ spec:
|
|||||||
Replica {{ $labels.pod }}
|
Replica {{ $labels.pod }}
|
||||||
is failing to replicate
|
is failing to replicate
|
||||||
expr: |
|
expr: |
|
||||||
cnpg_pg_replication_in_recovery > cnpg_pg_replication_is_wal_receiver_up
|
cnpg_pg_replication_in_recovery{namespace="immich"} > cnpg_pg_replication_is_wal_receiver_up{namespace="immich"}
|
||||||
for: 1m
|
for: 1m
|
||||||
labels:
|
labels:
|
||||||
severity: warning
|
severity: warning
|
||||||
|
|||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: immich-backup-source-local
|
|
||||||
namespace: immich
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: immich
|
|
||||||
app.kubernetes.io/part-of: immich
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: immich-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: immich
|
|
||||||
trigger:
|
|
||||||
schedule: 28 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: immich-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 10Gi
|
|
||||||
@@ -4,11 +4,11 @@ metadata:
|
|||||||
name: "immich-postgresql-18-scheduled-backup-live-backup"
|
name: "immich-postgresql-18-scheduled-backup-live-backup"
|
||||||
namespace: immich
|
namespace: immich
|
||||||
labels:
|
labels:
|
||||||
helm.sh/chart: postgres-18-cluster-7.4.4
|
helm.sh/chart: postgres-18-cluster-7.4.5
|
||||||
app.kubernetes.io/name: immich-postgresql-18
|
app.kubernetes.io/name: immich-postgresql-18
|
||||||
app.kubernetes.io/instance: immich
|
app.kubernetes.io/instance: immich
|
||||||
app.kubernetes.io/part-of: immich
|
app.kubernetes.io/part-of: immich
|
||||||
app.kubernetes.io/version: "7.4.4"
|
app.kubernetes.io/version: "7.4.5"
|
||||||
app.kubernetes.io/managed-by: Helm
|
app.kubernetes.io/managed-by: Helm
|
||||||
app.kubernetes.io/name: "immich-postgresql-18-scheduled-backup-live-backup"
|
app.kubernetes.io/name: "immich-postgresql-18-scheduled-backup-live-backup"
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: jellyfin-config-backup-secret-local
|
|
||||||
namespace: jellyfin
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: jellyfin
|
|
||||||
app.kubernetes.io/part-of: jellyfin
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: jellyfin-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellyfin/jellyfin-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: jellyfin-config-backup-source-local
|
|
||||||
namespace: jellyfin
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: jellyfin
|
|
||||||
app.kubernetes.io/part-of: jellyfin
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: jellyfin-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: jellyfin-config
|
|
||||||
trigger:
|
|
||||||
schedule: 30 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: jellyfin-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 10Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: jellystat-data-backup-secret-local
|
|
||||||
namespace: jellystat
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: jellystat
|
|
||||||
app.kubernetes.io/part-of: jellystat
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: jellystat-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/jellystat/jellystat-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: karakeep-backup-secret-local
|
|
||||||
namespace: karakeep
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: karakeep
|
|
||||||
app.kubernetes.io/part-of: karakeep
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: karakeep-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/karakeep/karakeep"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: karakeep-backup-source-local
|
|
||||||
namespace: karakeep
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: karakeep
|
|
||||||
app.kubernetes.io/part-of: karakeep
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: karakeep-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: karakeep
|
|
||||||
trigger:
|
|
||||||
schedule: 34 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: karakeep-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: libation-backup-secret-local
|
|
||||||
namespace: libation
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: libation
|
|
||||||
app.kubernetes.io/part-of: libation
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: libation-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/libation/libation"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: libation-backup-source-local
|
|
||||||
namespace: libation
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: libation
|
|
||||||
app.kubernetes.io/part-of: libation
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: libation-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: libation
|
|
||||||
trigger:
|
|
||||||
schedule: 36 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: libation-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: lidarr-config-backup-secret-local
|
|
||||||
namespace: lidarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: lidarr
|
|
||||||
app.kubernetes.io/part-of: lidarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: lidarr-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidarr/lidarr-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: lidarr-config-backup-source-local
|
|
||||||
namespace: lidarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: lidarr
|
|
||||||
app.kubernetes.io/part-of: lidarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: lidarr-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: lidarr-config
|
|
||||||
trigger:
|
|
||||||
schedule: 38 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: lidarr-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: lidatube-config-backup-secret-local
|
|
||||||
namespace: lidatube
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: lidatube
|
|
||||||
app.kubernetes.io/part-of: lidatube
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: lidatube-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/lidatube/lidatube-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: lidatube-config-backup-source-local
|
|
||||||
namespace: lidatube
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: lidatube
|
|
||||||
app.kubernetes.io/part-of: lidatube
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: lidatube-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: lidatube-config
|
|
||||||
trigger:
|
|
||||||
schedule: 40 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: lidatube-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: listenarr-backup-secret-local
|
|
||||||
namespace: listenarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: listenarr
|
|
||||||
app.kubernetes.io/part-of: listenarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: listenarr-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/listenarr/listenarr"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: listenarr-backup-source-local
|
|
||||||
namespace: listenarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: listenarr
|
|
||||||
app.kubernetes.io/part-of: listenarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: listenarr-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: listenarr
|
|
||||||
trigger:
|
|
||||||
schedule: 42 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: listenarr-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: matrix-hookshot-backup-secret-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-hookshot-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: matrix-hookshot-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-hookshot"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: matrix-synapse-backup-secret-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-synapse-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: matrix-synapse-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/matrix-synapse"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: mautrix-discord-backup-secret-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-discord-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: mautrix-discord-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-discord"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: mautrix-whatsapp-backup-secret-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-whatsapp-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: mautrix-whatsapp-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/matrix-synapse/mautrix-whatsapp"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: matrix-hookshot-backup-source-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-hookshot-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: matrix-hookshot-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: matrix-hookshot
|
|
||||||
trigger:
|
|
||||||
schedule: 46 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: matrix-hookshot-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: matrix-synapse-backup-source-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-synapse-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: matrix-synapse-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: matrix-synapse
|
|
||||||
trigger:
|
|
||||||
schedule: 44 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: matrix-synapse-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,32 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: mautrix-discord-backup-source-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-discord-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: mautrix-discord-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: mautrix-discord
|
|
||||||
trigger:
|
|
||||||
schedule: 48 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: mautrix-discord-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
runAsGroup: 1337
|
|
||||||
runAsUser: 1337
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,32 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: mautrix-whatsapp-backup-source-local
|
|
||||||
namespace: matrix-synapse
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-whatsapp-0.7.0
|
|
||||||
app.kubernetes.io/instance: matrix-synapse
|
|
||||||
app.kubernetes.io/part-of: matrix-synapse
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: mautrix-whatsapp-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: mautrix-whatsapp
|
|
||||||
trigger:
|
|
||||||
schedule: 50 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: mautrix-whatsapp-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
runAsGroup: 1337
|
|
||||||
runAsUser: 1337
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: navidrome-data-backup-secret-local
|
|
||||||
namespace: navidrome
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: navidrome
|
|
||||||
app.kubernetes.io/part-of: navidrome
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: navidrome-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/navidrome/navidrome-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: navidrome-data-backup-source-local
|
|
||||||
namespace: navidrome
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: navidrome
|
|
||||||
app.kubernetes.io/part-of: navidrome
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: navidrome-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: navidrome-data
|
|
||||||
trigger:
|
|
||||||
schedule: 52 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: navidrome-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: ollama-web-data-backup-secret-local
|
|
||||||
namespace: ollama
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: ollama
|
|
||||||
app.kubernetes.io/part-of: ollama
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: ollama-web-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/ollama/ollama-web-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,32 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: ollama-web-data-backup-source-local
|
|
||||||
namespace: ollama
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: ollama
|
|
||||||
app.kubernetes.io/part-of: ollama
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: ollama-web-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: ollama-web-data
|
|
||||||
trigger:
|
|
||||||
schedule: 54 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: ollama-web-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
runAsGroup: 1337
|
|
||||||
runAsUser: 1337
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: postiz-config-backup-secret-local
|
|
||||||
namespace: postiz
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: postiz
|
|
||||||
app.kubernetes.io/part-of: postiz
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: postiz-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: postiz-uploads-backup-secret-local
|
|
||||||
namespace: postiz
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-upload-0.7.0
|
|
||||||
app.kubernetes.io/instance: postiz
|
|
||||||
app.kubernetes.io/part-of: postiz
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: postiz-uploads-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/postiz/postiz-uploads"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: postiz-config-backup-source-local
|
|
||||||
namespace: postiz
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: postiz
|
|
||||||
app.kubernetes.io/part-of: postiz
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: postiz-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: postiz-config
|
|
||||||
trigger:
|
|
||||||
schedule: 56 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: postiz-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: postiz-uploads-backup-source-local
|
|
||||||
namespace: postiz
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-upload-0.7.0
|
|
||||||
app.kubernetes.io/instance: postiz
|
|
||||||
app.kubernetes.io/part-of: postiz
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: postiz-uploads-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: postiz-uploads
|
|
||||||
trigger:
|
|
||||||
schedule: 58 8 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: postiz-uploads-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: prowlarr-config-backup-secret-local
|
|
||||||
namespace: prowlarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: prowlarr
|
|
||||||
app.kubernetes.io/part-of: prowlarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: prowlarr-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/prowlarr/prowlarr-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,39 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: prowlarr-config-backup-source-local
|
|
||||||
namespace: prowlarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: prowlarr
|
|
||||||
app.kubernetes.io/part-of: prowlarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: prowlarr-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: prowlarr-config
|
|
||||||
trigger:
|
|
||||||
schedule: 0 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: prowlarr-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 568
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 568
|
|
||||||
runAsUser: 568
|
|
||||||
supplementalGroups:
|
|
||||||
- 44
|
|
||||||
- 100
|
|
||||||
- 109
|
|
||||||
- 65539
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent-config-data-backup-secret-local
|
|
||||||
namespace: qbittorrent
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: qbittorrent
|
|
||||||
app.kubernetes.io/part-of: qbittorrent
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: qbittorrent-config-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/qbittorrent/qbittorrent-config-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent-qbit-manage-config-data-backup-secret-local
|
|
||||||
namespace: qbittorrent
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-qbit-manage-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: qbittorrent
|
|
||||||
app.kubernetes.io/part-of: qbittorrent
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: qbittorrent-qbit-manage-config-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/qbittorrent/qbittorrent-qbit-manage-config-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent-qui-config-data-backup-secret-local
|
|
||||||
namespace: qbittorrent
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-qui-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: qbittorrent
|
|
||||||
app.kubernetes.io/part-of: qbittorrent
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: qbittorrent-qui-config-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/qbittorrent/qbittorrent-qui-config-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent-config-data-backup-source-local
|
|
||||||
namespace: qbittorrent
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: qbittorrent
|
|
||||||
app.kubernetes.io/part-of: qbittorrent
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: qbittorrent-config-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: qbittorrent-config-data
|
|
||||||
trigger:
|
|
||||||
schedule: 2 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: qbittorrent-config-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-filesystem
|
|
||||||
volumeSnapshotClassName: ceph-filesystem-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent-qbit-manage-config-data-backup-source-local
|
|
||||||
namespace: qbittorrent
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-qbit-manage-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: qbittorrent
|
|
||||||
app.kubernetes.io/part-of: qbittorrent
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: qbittorrent-qbit-manage-config-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: qbittorrent-qbit-manage-config-data
|
|
||||||
trigger:
|
|
||||||
schedule: 4 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: qbittorrent-qbit-manage-config-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: qbittorrent-qui-config-data-backup-source-local
|
|
||||||
namespace: qbittorrent
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-qui-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: qbittorrent
|
|
||||||
app.kubernetes.io/part-of: qbittorrent
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: qbittorrent-qui-config-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: qbittorrent-qui-config-data
|
|
||||||
trigger:
|
|
||||||
schedule: 6 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: qbittorrent-qui-config-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: radarr-4k-config-backup-secret-local
|
|
||||||
namespace: radarr-4k
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr-4k
|
|
||||||
app.kubernetes.io/part-of: radarr-4k
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-4k-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr-4k/radarr-4k-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: radarr-4k-config-backup-source-local
|
|
||||||
namespace: radarr-4k
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr-4k
|
|
||||||
app.kubernetes.io/part-of: radarr-4k
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-4k-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: radarr-4k-config
|
|
||||||
trigger:
|
|
||||||
schedule: 10 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: radarr-4k-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: radarr-anime-config-backup-secret-local
|
|
||||||
namespace: radarr-anime
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr-anime
|
|
||||||
app.kubernetes.io/part-of: radarr-anime
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-anime-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr-anime/radarr-anime-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: radarr-anime-config-backup-source-local
|
|
||||||
namespace: radarr-anime
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr-anime
|
|
||||||
app.kubernetes.io/part-of: radarr-anime
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-anime-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: radarr-anime-config
|
|
||||||
trigger:
|
|
||||||
schedule: 12 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: radarr-anime-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: radarr-standup-config-backup-secret-local
|
|
||||||
namespace: radarr-standup
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr-standup
|
|
||||||
app.kubernetes.io/part-of: radarr-standup
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-standup-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr-standup/radarr-standup-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: radarr-standup-config-backup-source-local
|
|
||||||
namespace: radarr-standup
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr-standup
|
|
||||||
app.kubernetes.io/part-of: radarr-standup
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-standup-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: radarr-standup-config
|
|
||||||
trigger:
|
|
||||||
schedule: 14 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: radarr-standup-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: radarr-config-backup-secret-local
|
|
||||||
namespace: radarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr
|
|
||||||
app.kubernetes.io/part-of: radarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/radarr/radarr-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: radarr-config-backup-source-local
|
|
||||||
namespace: radarr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: radarr
|
|
||||||
app.kubernetes.io/part-of: radarr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: radarr-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: radarr-config
|
|
||||||
trigger:
|
|
||||||
schedule: 8 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: radarr-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: rayflume-data-backup-secret-local
|
|
||||||
namespace: rayflume
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: rayflume
|
|
||||||
app.kubernetes.io/part-of: rayflume
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: rayflume-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/rayflume/rayflume-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: rayflume-data-backup-source-local
|
|
||||||
namespace: rayflume
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: rayflume
|
|
||||||
app.kubernetes.io/part-of: rayflume
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: rayflume-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: rayflume-data
|
|
||||||
trigger:
|
|
||||||
schedule: 16 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: rayflume-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: roundcube-data-backup-secret-local
|
|
||||||
namespace: roundcube
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: roundcube
|
|
||||||
app.kubernetes.io/part-of: roundcube
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: roundcube-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/roundcube/roundcube-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: roundcube-data-backup-source-local
|
|
||||||
namespace: roundcube
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: roundcube
|
|
||||||
app.kubernetes.io/part-of: roundcube
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: roundcube-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: roundcube-data
|
|
||||||
trigger:
|
|
||||||
schedule: 16 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: roundcube-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: searxng-browser-data-backup-secret-local
|
|
||||||
namespace: searxng
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: searxng
|
|
||||||
app.kubernetes.io/part-of: searxng
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: searxng-browser-data-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/searxng/searxng-browser-data"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: searxng-browser-data-backup-source-local
|
|
||||||
namespace: searxng
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-data-0.7.0
|
|
||||||
app.kubernetes.io/instance: searxng
|
|
||||||
app.kubernetes.io/part-of: searxng
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: searxng-browser-data-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: searxng-browser-data
|
|
||||||
trigger:
|
|
||||||
schedule: 18 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: searxng-browser-data-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: seerr-seerr-chart-config-backup-secret-local
|
|
||||||
namespace: seerr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: seerr
|
|
||||||
app.kubernetes.io/part-of: seerr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: seerr-seerr-chart-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/seerr/seerr-seerr-chart-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: seerr-seerr-chart-config-backup-source-local
|
|
||||||
namespace: seerr
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: seerr
|
|
||||||
app.kubernetes.io/part-of: seerr
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: seerr-seerr-chart-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: seerr-seerr-chart-config
|
|
||||||
trigger:
|
|
||||||
schedule: 20 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: seerr-seerr-chart-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
@@ -1,58 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: sonarr-4k-config-backup-secret-local
|
|
||||||
namespace: sonarr-4k
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: sonarr-4k
|
|
||||||
app.kubernetes.io/part-of: sonarr-4k
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: sonarr-4k-config-backup-secret-local
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
target:
|
|
||||||
template:
|
|
||||||
mergePolicy: Merge
|
|
||||||
engineVersion: v2
|
|
||||||
data:
|
|
||||||
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/sonarr-4k/sonarr-4k-config"
|
|
||||||
data:
|
|
||||||
- secretKey: BUCKET_ENDPOINT
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: BUCKET_ENDPOINT
|
|
||||||
- secretKey: RESTIC_PASSWORD
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /volsync/restic/garage-local
|
|
||||||
metadataPolicy: None
|
|
||||||
property: RESTIC_PASSWORD
|
|
||||||
- secretKey: AWS_DEFAULT_REGION
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_REGION
|
|
||||||
- secretKey: AWS_ACCESS_KEY_ID
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_KEY_ID
|
|
||||||
- secretKey: AWS_SECRET_ACCESS_KEY
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /garage/home-infra/volsync-backups
|
|
||||||
metadataPolicy: None
|
|
||||||
property: ACCESS_SECRET_KEY
|
|
||||||
@@ -1,34 +0,0 @@
|
|||||||
apiVersion: volsync.backube/v1alpha1
|
|
||||||
kind: ReplicationSource
|
|
||||||
metadata:
|
|
||||||
name: sonarr-4k-config-backup-source-local
|
|
||||||
namespace: sonarr-4k
|
|
||||||
labels:
|
|
||||||
helm.sh/chart: volsync-target-config-0.7.0
|
|
||||||
app.kubernetes.io/instance: sonarr-4k
|
|
||||||
app.kubernetes.io/part-of: sonarr-4k
|
|
||||||
app.kubernetes.io/version: "0.7.0"
|
|
||||||
app.kubernetes.io/managed-by: Helm
|
|
||||||
app.kubernetes.io/name: sonarr-4k-config-backup
|
|
||||||
spec:
|
|
||||||
sourcePVC: sonarr-4k-config
|
|
||||||
trigger:
|
|
||||||
schedule: 24 11 * * *
|
|
||||||
restic:
|
|
||||||
pruneIntervalDays: 7
|
|
||||||
repository: sonarr-4k-config-backup-secret-local
|
|
||||||
retain:
|
|
||||||
daily: 7
|
|
||||||
hourly: 0
|
|
||||||
monthly: 3
|
|
||||||
weekly: 4
|
|
||||||
yearly: 1
|
|
||||||
moverSecurityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
fsGroupChangePolicy: OnRootMismatch
|
|
||||||
runAsGroup: 1000
|
|
||||||
runAsUser: 1000
|
|
||||||
copyMethod: Snapshot
|
|
||||||
storageClassName: ceph-block
|
|
||||||
volumeSnapshotClassName: ceph-blockpool-snapshot
|
|
||||||
cacheCapacity: 1Gi
|
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user