apiVersion: batch/v1
kind: CronJob
metadata:
  name: cloudnative-pg-postgres-backups-external-rclone
  labels:
    app.kubernetes.io/controller: main
    app.kubernetes.io/instance: cloudnative-pg
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: postgres-backups-external-rclone
    app.kubernetes.io/version: v1.73.5
    helm.sh/chart: rclone-postgres-backups-external-0.4.3
  namespace: cloudnative-pg
spec:
  suspend: true
  concurrencyPolicy: Forbid
  startingDeadlineSeconds: 30
  timeZone: America/Chicago
  schedule: "20 1 * * *"
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 1
  jobTemplate:
    spec:
      parallelism: 1
      backoffLimit: 3
      template:
        metadata:
          labels:
            app.kubernetes.io/controller: main
            app.kubernetes.io/instance: cloudnative-pg
            app.kubernetes.io/name: postgres-backups-external-rclone
        spec:
          enableServiceLinks: false
          serviceAccountName: default
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
          hostPID: false
          dnsPolicy: ClusterFirst
          restartPolicy: Never
          containers:
            - args:
                - delete
                - dest:postgres-backups-ecc1010276b61716
                - --min-age
                - 45d
                - --verbose
              env:
                - name: RCLONE_CONFIG_DEST_TYPE
                  value: s3
                - name: RCLONE_CONFIG_DEST_PROVIDER
                  value: DigitalOcean
                - name: RCLONE_CONFIG_DEST_ENV_AUTH
                  value: "false"
                - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_KEY_ID
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_SECRET_KEY
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_REGION
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_REGION
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_ENDPOINT
                  valueFrom:
                    secretKeyRef:
                      key: DEST_ENDPOINT
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
                  value: "true"
              image: rclone/rclone:1.73.5@sha256:1619a625f845e169c34b952cf40c483c0392965b821c5155cde8cbfd35254a96
              imagePullPolicy: IfNotPresent
              name: prune
            - args:
                - sync
                - src:openbao-backups
                - dest:postgres-backups-ecc1010276b61716
                - --s3-no-check-bucket
                - --min-age
                - 45d
                - --include
                - /cl01tl/*/*/*/base/**
                - --exclude
                - '**/walls/**'
                - --verbose
              env:
                - name: RCLONE_S3_PROVIDER
                  value: Other
                - name: RCLONE_CONFIG_SRC_TYPE
                  value: s3
                - name: RCLONE_CONFIG_SRC_PROVIDER
                  value: Other
                - name: RCLONE_CONFIG_SRC_ENV_AUTH
                  value: "false"
                - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_KEY_ID
                      name: openbao-backups-rclone-source-config
                - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_SECRET_KEY
                      name: openbao-backups-rclone-source-config
                - name: RCLONE_CONFIG_SRC_REGION
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_REGION
                      name: openbao-backups-rclone-source-config
                - name: RCLONE_CONFIG_SRC_ENDPOINT
                  valueFrom:
                    secretKeyRef:
                      key: SRC_ENDPOINT
                      name: openbao-backups-rclone-source-config
                - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
                  value: "true"
                - name: RCLONE_CONFIG_DEST_TYPE
                  value: s3
                - name: RCLONE_CONFIG_DEST_PROVIDER
                  value: DigitalOcean
                - name: RCLONE_CONFIG_DEST_ENV_AUTH
                  value: "false"
                - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_KEY_ID
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_SECRET_KEY
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_REGION
                  valueFrom:
                    secretKeyRef:
                      key: ACCESS_REGION
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_ENDPOINT
                  valueFrom:
                    secretKeyRef:
                      key: DEST_ENDPOINT
                      name: postgres-backups-ecc1010276b61716-rclone-destination-config
                - name: RCLONE_CONFIG_DEST_S3_FORCE_PATH_STYLE
                  value: "true"
              image: rclone/rclone:1.73.5@sha256:1619a625f845e169c34b952cf40c483c0392965b821c5155cde8cbfd35254a96
              imagePullPolicy: IfNotPresent
              name: sync