---
# Ceph RGW (S3) backup target for the shared arrstack CNPG cluster, provisioned
# by the in-estate cephrgw-operator: one dedicated bucket + owner user. CNPG
# reads the S3 credential Secret (cnpg-arrstack-backup-s3) from this namespace.
apiVersion: ceph.unkin.net/v1alpha1
kind: ObjectStoreUser
metadata:
  name: cnpg-arrstack-backup
  namespace: arrstack
spec:
  displayName: "CNPG backup owner (arrstack)"
  uid: cnpg-arrstack-backup
  maxBuckets: 5
  secretName: cnpg-arrstack-backup-s3
  retainOnDelete: true
---
apiVersion: ceph.unkin.net/v1alpha1
kind: Bucket
metadata:
  name: cnpg-arrstack
  namespace: arrstack
spec:
  placementTarget: ec
  bucketName: cnpg-arrstack
  ownerRef: cnpg-arrstack-backup
  versioning: false
  tags:
    app: arrstack
    purpose: cnpg-backup
  retainOnDelete: true
---
# Nightly base backup on top of always-on WAL archiving. Staggered from the
# other CNPG clusters (6-field cron, seconds first).
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
  name: cnpg-arrstack-nightly
  namespace: arrstack
spec:
  schedule: "0 45 3 * * *"
  immediate: false
  backupOwnerReference: self
  method: barmanObjectStore
  cluster:
    name: arrstack-postgres