apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-snapshot-script
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: vault-snapshot-script
    {{- include "custom.labels" . | nindent 4 }}
data:
  snapshot.sh: |
    DATE=$(date +"%Y%m%d-%H-%M")

    echo " "
    echo ">> Running Vault Snapshot Script ..."

    echo " "
    echo ">> Fetching Vault token ..."
    export VAULT_TOKEN=$(vault write -field=token auth/approle/login role_id=$VAULT_APPROLE_ROLE_ID secret_id=$VAULT_APPROLE_SECRET_ID)

    if [ -z "$VAULT_TOKEN" ]; then
        echo ">> ERROR: Failed to fetch Vault token! Exiting..."
        exit 1
    fi

    echo " "
    echo ">> Taking Vault snapshot ..."
    vault operator raft snapshot save /opt/backup/vault-snapshot-$DATE.snap

    echo " "
    echo ">> Setting ownership of Vault snapshot ..."
    chown 100:1000 /opt/backup/vault-snapshot-$DATE.snap

    echo " "
    echo ">> Completed Vault snapshot"

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-backup-script
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: vault-backup-script
    {{- include "custom.labels" . | nindent 4 }}
data:
  backup.sh: |
    echo " ";
    echo ">> Running S3 backup for Vault snapshot";
    OUTPUT=$(s3cmd sync --no-check-certificate -v /opt/backup/* "${BUCKET}/cl01tl/cl01tl-vault-snapshots/" 2>&1)