clusters/cl01tl/manifests/cilium/Certificate-hubble-relay-client-certs.yaml

@@ -0,0 +1,22 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: hubble-relay-client-certs
+  namespace: kube-system
+spec:
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: ca-issuer
+  secretName: hubble-relay-client-certs
+  commonName: "*.hubble-relay.cilium.io"
+  dnsNames:
+    - "*.hubble-relay.cilium.io"
+  duration: 8760h0m0s
+  privateKey:
+    rotationPolicy: Always
+  isCA: false
+  usages:
+    - signing
+    - key encipherment
+    - client auth

clusters/cl01tl/manifests/cilium/Certificate-hubble-server-certs.yaml

@@ -0,0 +1,23 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: hubble-server-certs
+  namespace: kube-system
+spec:
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: ca-issuer
+  secretName: hubble-server-certs
+  commonName: "*.default.hubble-grpc.cilium.io"
+  dnsNames:
+    - "*.default.hubble-grpc.cilium.io"
+  duration: 8760h0m0s
+  privateKey:
+    rotationPolicy: Always
+  isCA: false
+  usages:
+    - signing
+    - key encipherment
+    - server auth
+    - client auth

clusters/cl01tl/manifests/cilium/Secret-cilium-ca.yaml

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: cilium-ca
-  namespace: kube-system
-data:
-  ca.crt: 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
-  ca.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb2dJQkFBS0NBUUVBc1N5aXhONGRFWlMxRG9aYWtac3JrYnhrRFMxc2FaM0M0N3FsMkZpSXlXOFBKdEt3ClpEV09kQW9sOWtuc01ZbWZhZnE1UkVUNE80MXI1UEJmOEp3STV0bFczQ2VrOXVKMjdCdXFlRlJDNFlVeGpsbnUKNEVQVVAvM3k2WEplaUhlNDM4THNVYnZnSFFHd3JUNzkvNTNUckdWRmNIa3RHUmUxK2NHNlhKUDY0OWk4a0c5Ngo4LzFWemFpTWtUV3c2Y1JacksrMWVpMHJVK3BDY2NwTWM2RGc4WCs1WXBFTllKWU9iL2RZb1V6S056OTB6RTlYCmVjWU9QMDQxUHdad2tXVnUvMWZpa3IvTXl5R3E1bmJ4YTE0RVgrVGxPdEJJN2tvZTgrY1RDZldGYzVsMkZPWmMKWmNSZEllYWJhKzZzVytGbzhpZ2YyTnFydEpOWUU4U1pVbkdtcVFJREFRQUJBb0lCQUR0eFlscnl1b1gvZ28rUQovQ29HQ2FRbnRObkc5NnlueFk5cU8rSk9NZmFEVUc0U0dpUkU0N3FDL1NHWXc2b0xKblVFTGN4OTUxcnpvOU4zCjRuaHpvWGp5U25ZcXh1b2VLUkFtYUJkZkRlRmtNckF6OURWQ0RLQTdyNWdyU3hRMk5zeThOVlZtMTFaa0RzYlIKYjU2bmNURlIrTzQzZWE0RmlvUjFQdlY0b0tCNHRCTnA3TjRGM2pDWmo0WEFkVzBTOXdwdFN5dnVYVW9YSFBaUQpOaUllYUI5V01Dd1QwdGJ2NkIyQ3lNcjlPYTMvMUZRSVZNNGtxVXZRR2dhbnp1T284NmxyNUxvazdzdStRRDd5CnpocXpzL0JaWkFhY2cyRC9MWXhNS1R1ZTVndTZaYnhHMFUwaktxY3M0ZnBaVkwxMDAyTjhKNkhTWDdZYkE5WnoKSlE1Z0swRUNnWUVBeW1nV1owYk9WQVQ3a0taREZQTXA3RlRaWngzUkJTZ1NWbitrSGNQYk95WmdOTE9MTWF1aApwSmJKbFBTU3pWNm9SR2lSNllRdjY2UlBmZ3Z0OUYxVjNLS2VXcTU5SGdCc0VvKzlOcTZ6ckdLby9ZN28rRVFoCkc4K2d1aW5SVEM0a1phT3h5b3h4eHZnOEhrNjJHbmpzVjVzZFdvK29oZTNEbnB2SHhhWEFNNFVDZ1lFQTRCWTEKWm5ybTNjR0J0K0xBWG16amZ0WnByeXJXVmpvaTBaSDNkM01oYWFaeDZHbCtIZVlDS2JRcThYclRYR3NocWVVRApVcGZxVjRFaHd4YnlDOVdHR2pwMEtXd1duYVZZNjFCbkphVm56MDJaamZuYlhxbzVQR0lseHIwZVlnbHNHd2Q3CnFrQ29hMHBSU3NldHFOd3ZzTXVGWnVrTTMzN2YwTHl4QStkL2RkVUNnWUIwKzgvbkJQOS9oQm01c3I2V3Z5djkKMGRTTlNxaGlLSlRndFlrdlF1SFV3QXRlcWw3SzZIM1dXT2hOVlVYN3VMZmNRZXdEWVVrcEVxQjNJNEgyZUhPRgp2OTl5WGVNbWtldmtsbnN2dmExTzl2N2cvZFljbDVQak5RK2FTVTBVa0o2c3QvMnNLWndnK1p3VmtEeWo5RHYxCkxrdTY2Y2puRDFLK3V4NnRWMjFNMlFLQmdCSmNmMytvTG1hWlJvSEV5TEowQmFnTTlaZnUwS1U4R2tKRnpac3kKQ2RqWVZKa1FtODdqVytZQzUwbm1JSStBRDhBV0RkR2t0UVQ2aGNPd2k2REFuRDVsNzhLOUlwVkVTU2J1N2FTKwpDdVdIbkQ5djY3TzBDd0NSb2pySW9FYTBNdkY4Q1h3SDFFVUdUK2JxdWFZT2RMSHQyejUxZGlLU0NORFh4VUZtCnBLRUpBb0dBVTNoQ2gwQ3RLeERGeHJhODNSdVJEc25NeUhZS21xdWpvVTRFbStWM3Z6emY1Q3hLbjIwdXMwcGIKSzJXSnFTVlhRV05qUWQxL250TUtKTFZVcWF4Tkx3WHd5VUtKa0JTMVBaL1RSQStyNE9RbXZSdktHSGZtU3J1QgozVDJFSWtodXBndnBOYjlEQVlIYW1YYXE1dExqV1c5VnZERmkrQmtKQ0tMOWloV1pPZEU9Ci0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==

clusters/cl01tl/manifests/cilium/Secret-hubble-relay-client-certs.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: hubble-relay-client-certs
-  namespace: kube-system
-type: kubernetes.io/tls
-data:
-  ca.crt: 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
-  tls.crt: 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
-  tls.key: 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

clusters/cl01tl/manifests/cilium/Secret-hubble-server-certs.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: hubble-server-certs
-  namespace: kube-system
-type: kubernetes.io/tls
-data:
-  ca.crt: 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
-  tls.crt: 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
-  tls.key: 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

clusters/cl01tl/manifests/grafana-operator/Cluster-grafana-operator-postgresql-18-cluster.yaml

@@ -29,13 +29,6 @@ spec:
       parameters:
         barmanObjectName: "grafana-operator-postgresql-18-garage-local-backup"
         serverName: "grafana-operator-postgresql-18-backup-1"
-  externalClusters:
-    - name: recovery
-      plugin:
-        name: barman-cloud.cloudnative-pg.io
-        parameters:
-          barmanObjectName: "grafana-operator-postgresql-18-recovery"
-          serverName: grafana-operator-postgresql-18-backup-1
   storage:
     size: 10Gi
     storageClass: local-path
@@ -65,15 +58,22 @@ spec:
     enablePodMonitor: true
     disableDefaultQueries: false
   bootstrap:
-    recovery:
+    initdb:
-      database: app
+      import:
-      source: grafana-operator-postgresql-18-backup-1
+        source:
+          externalCluster: importSource
+        type: microservice
+        databases:
+          - app
+        schemaOnly: false
   externalClusters:
-    - name: grafana-operator-postgresql-18-backup-1
+    - name: importSource
-      plugin:
+      connectionParameters:
-        name: barman-cloud.cloudnative-pg.io
+        host: "grafana-operator-postgresql-17-cluster-rw"
-        enabled: true
+        port: "5432"
-        isWALArchiver: false
+        user: "app"
-        parameters:
+        dbname: "app"
-          barmanObjectName: "grafana-operator-postgresql-18-recovery"
+        sslmode: "disable"
-          serverName: grafana-operator-postgresql-18-backup-1
+      password:
+        name: grafana-operator-postgresql-17-cluster-app
+        key: password

clusters/cl01tl/manifests/grafana-operator/ObjectStore-grafana-operator-postgresql-18-recovery.yaml

@@ -1,29 +0,0 @@
-apiVersion: barmancloud.cnpg.io/v1
-kind: ObjectStore
-metadata:
-  name: "grafana-operator-postgresql-18-recovery"
-  namespace: grafana-operator
-  labels:
-    helm.sh/chart: postgres-18-cluster-6.16.1
-    app.kubernetes.io/name: grafana-operator-postgresql-18
-    app.kubernetes.io/instance: grafana-operator
-    app.kubernetes.io/part-of: grafana-operator
-    app.kubernetes.io/version: "6.16.1"
-    app.kubernetes.io/managed-by: Helm
-spec:
-  configuration:
-    destinationPath: s3://postgres-backups/cl01tl/grafana-operator/grafana-operator-postgresql-18-cluster
-    endpointURL: http://garage-main.garage:3900
-    wal:
-      compression: snappy
-      maxParallel: 1
-    data:
-      compression: snappy
-      jobs: 1
-    s3Credentials:
-      accessKeyId:
-        name: grafana-operator-postgresql-18-cluster-backup-secret-garage
-        key: ACCESS_KEY_ID
-      secretAccessKey:
-        name: grafana-operator-postgresql-18-cluster-backup-secret-garage
-        key: ACCESS_SECRET_KEY