diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-external.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-external.yaml new file mode 100644 index 000000000..75648ac8b --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-public-backup-secret-external + namespace: dawarich + labels: + helm.sh/chart: volsync-target-public-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-public-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-public" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-local.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-local.yaml new file mode 100644 index 000000000..a3c4ca2d7 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-public-backup-secret-local + namespace: dawarich + labels: + helm.sh/chart: volsync-target-public-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-public-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-public" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-remote.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-remote.yaml new file mode 100644 index 000000000..e2206e3ea --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-public-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-public-backup-secret-remote + namespace: dawarich + labels: + helm.sh/chart: volsync-target-public-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-public-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-public" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-external.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-external.yaml new file mode 100644 index 000000000..b36da8e5f --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-storage-backup-secret-external + namespace: dawarich + labels: + helm.sh/chart: volsync-target-storage-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-storage-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-storage" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-local.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-local.yaml new file mode 100644 index 000000000..6e5608390 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-storage-backup-secret-local + namespace: dawarich + labels: + helm.sh/chart: volsync-target-storage-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-storage-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-storage" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-remote.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-remote.yaml new file mode 100644 index 000000000..a066cab2d --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-storage-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-storage-backup-secret-remote + namespace: dawarich + labels: + helm.sh/chart: volsync-target-storage-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-storage-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-storage" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-external.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-external.yaml new file mode 100644 index 000000000..1fb997e12 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-watched-backup-secret-external + namespace: dawarich + labels: + helm.sh/chart: volsync-target-watched-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-watched-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-watched" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-local.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-local.yaml new file mode 100644 index 000000000..bd702ce1c --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-watched-backup-secret-local + namespace: dawarich + labels: + helm.sh/chart: volsync-target-watched-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-watched-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-watched" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-remote.yaml b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-remote.yaml new file mode 100644 index 000000000..0d06fafbc --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ExternalSecret-dawarich-watched-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: dawarich-watched-backup-secret-remote + namespace: dawarich + labels: + helm.sh/chart: volsync-target-watched-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-watched-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/dawarich/dawarich-watched" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-external.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-external.yaml new file mode 100644 index 000000000..450f94c2e --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-public-backup-source-external + namespace: dawarich + labels: + helm.sh/chart: volsync-target-public-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-public-backup +spec: + sourcePVC: dawarich-public + trigger: + schedule: 8 10 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-public-backup-secret-external + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-local.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-local.yaml new file mode 100644 index 000000000..a41507713 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-public-backup-source-local + namespace: dawarich + labels: + helm.sh/chart: volsync-target-public-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-public-backup +spec: + sourcePVC: dawarich-public + trigger: + schedule: 8 8 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-public-backup-secret-local + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-remote.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-remote.yaml new file mode 100644 index 000000000..137f4e849 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-public-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-public-backup-source-remote + namespace: dawarich + labels: + helm.sh/chart: volsync-target-public-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-public-backup +spec: + sourcePVC: dawarich-public + trigger: + schedule: 8 9 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-public-backup-secret-remote + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-external.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-external.yaml new file mode 100644 index 000000000..dad53d5f2 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-storage-backup-source-external + namespace: dawarich + labels: + helm.sh/chart: volsync-target-storage-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-storage-backup +spec: + sourcePVC: dawarich-storage + trigger: + schedule: 6 10 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-storage-backup-secret-external + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-local.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-local.yaml new file mode 100644 index 000000000..9e4dad56b --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-storage-backup-source-local + namespace: dawarich + labels: + helm.sh/chart: volsync-target-storage-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-storage-backup +spec: + sourcePVC: dawarich-storage + trigger: + schedule: 6 8 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-storage-backup-secret-local + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-remote.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-remote.yaml new file mode 100644 index 000000000..96b3a6e44 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-storage-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-storage-backup-source-remote + namespace: dawarich + labels: + helm.sh/chart: volsync-target-storage-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-storage-backup +spec: + sourcePVC: dawarich-storage + trigger: + schedule: 6 9 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-storage-backup-secret-remote + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-external.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-external.yaml new file mode 100644 index 000000000..636eeb843 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-watched-backup-source-external + namespace: dawarich + labels: + helm.sh/chart: volsync-target-watched-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-watched-backup +spec: + sourcePVC: dawarich-watched + trigger: + schedule: 8 10 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-watched-backup-secret-external + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-local.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-local.yaml new file mode 100644 index 000000000..a437e46d6 --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-watched-backup-source-local + namespace: dawarich + labels: + helm.sh/chart: volsync-target-watched-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-watched-backup +spec: + sourcePVC: dawarich-watched + trigger: + schedule: 8 8 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-watched-backup-secret-local + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-remote.yaml b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-remote.yaml new file mode 100644 index 000000000..c8d9546ae --- /dev/null +++ b/clusters/cl01tl/manifests/dawarich/ReplicationSource-dawarich-watched-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: dawarich-watched-backup-source-remote + namespace: dawarich + labels: + helm.sh/chart: volsync-target-watched-0.8.0 + app.kubernetes.io/instance: dawarich + app.kubernetes.io/part-of: dawarich + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: dawarich-watched-backup +spec: + sourcePVC: dawarich-watched + trigger: + schedule: 8 9 * * * + restic: + pruneIntervalDays: 7 + repository: dawarich-watched-backup-secret-remote + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-external.yaml b/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-external.yaml new file mode 100644 index 000000000..a287b52ca --- /dev/null +++ b/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-external.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: medialyze-data-backup-secret-external + namespace: medialyze + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: medialyze + app.kubernetes.io/part-of: medialyze + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: medialyze-data-backup-secret-external +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/medialyze/medialyze-data" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/digital-ocean + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/volsync-backups + metadataPolicy: None + property: AWS_SECRET_ACCESS_KEY diff --git a/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-local.yaml b/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-local.yaml new file mode 100644 index 000000000..cd37c004a --- /dev/null +++ b/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-local.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: medialyze-data-backup-secret-local + namespace: medialyze + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: medialyze + app.kubernetes.io/part-of: medialyze + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: medialyze-data-backup-secret-local +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/medialyze/medialyze-data" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-local + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-remote.yaml b/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-remote.yaml new file mode 100644 index 000000000..ab86056a2 --- /dev/null +++ b/clusters/cl01tl/manifests/medialyze/ExternalSecret-medialyze-data-backup-secret-remote.yaml @@ -0,0 +1,58 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: medialyze-data-backup-secret-remote + namespace: medialyze + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: medialyze + app.kubernetes.io/part-of: medialyze + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: medialyze-data-backup-secret-remote +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/medialyze/medialyze-data" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /volsync/restic/garage-remote + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_KEY_ID + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /garage/home-infra/volsync-backups + metadataPolicy: None + property: ACCESS_SECRET_KEY diff --git a/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-external.yaml b/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-external.yaml new file mode 100644 index 000000000..9e08bc827 --- /dev/null +++ b/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-external.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: medialyze-data-backup-source-external + namespace: medialyze + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: medialyze + app.kubernetes.io/part-of: medialyze + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: medialyze-data-backup +spec: + sourcePVC: medialyze-data + trigger: + schedule: 36 14 * * * + restic: + pruneIntervalDays: 7 + repository: medialyze-data-backup-secret-external + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-local.yaml b/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-local.yaml new file mode 100644 index 000000000..e331b0ce2 --- /dev/null +++ b/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-local.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: medialyze-data-backup-source-local + namespace: medialyze + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: medialyze + app.kubernetes.io/part-of: medialyze + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: medialyze-data-backup +spec: + sourcePVC: medialyze-data + trigger: + schedule: 36 11 * * * + restic: + pruneIntervalDays: 7 + repository: medialyze-data-backup-secret-local + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi diff --git a/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-remote.yaml b/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-remote.yaml new file mode 100644 index 000000000..15bd5f6dc --- /dev/null +++ b/clusters/cl01tl/manifests/medialyze/ReplicationSource-medialyze-data-backup-source-remote.yaml @@ -0,0 +1,29 @@ +apiVersion: volsync.backube/v1alpha1 +kind: ReplicationSource +metadata: + name: medialyze-data-backup-source-remote + namespace: medialyze + labels: + helm.sh/chart: volsync-target-data-0.8.0 + app.kubernetes.io/instance: medialyze + app.kubernetes.io/part-of: medialyze + app.kubernetes.io/version: "0.8.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: medialyze-data-backup +spec: + sourcePVC: medialyze-data + trigger: + schedule: 36 12 * * * + restic: + pruneIntervalDays: 7 + repository: medialyze-data-backup-secret-remote + retain: + daily: 7 + hourly: 0 + monthly: 3 + weekly: 4 + yearly: 1 + copyMethod: Snapshot + storageClassName: ceph-block + volumeSnapshotClassName: ceph-blockpool-snapshot + cacheCapacity: 1Gi