---
# Ceph RGW (S3) backup target for the cheeztv CNPG cluster, provisioned by the
# in-estate cephrgw-operator: one dedicated bucket + owner user. CNPG reads the
# S3 credential Secret from its own namespace.
apiVersion: ceph.unkin.net/v1alpha1
kind: ObjectStoreUser
metadata:
  name: cnpg-cheeztv-backup
  namespace: cheeztv
spec:
  displayName: "CNPG backup owner (cheeztv)"
  uid: cnpg-cheeztv-backup
  maxBuckets: 5
  secretName: cnpg-cheeztv-backup-s3
  retainOnDelete: true
---
apiVersion: ceph.unkin.net/v1alpha1
kind: Bucket
metadata:
  name: cnpg-cheeztv
  namespace: cheeztv
spec:
  placementTarget: ec
  bucketName: cnpg-cheeztv
  ownerRef: cnpg-cheeztv-backup
  versioning: false
  tags:
    app: cheeztv
    purpose: cnpg-backup
  retainOnDelete: true
---
# Nightly base backup on top of always-on WAL archiving. Scheduled off-peak and
# staggered from the other CNPG clusters (6-field cron, seconds first).
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
  name: cnpg-cheeztv-nightly
  namespace: cheeztv
spec:
  schedule: "0 35 3 * * *"
  immediate: false
  backupOwnerReference: self
  method: barmanObjectStore
  cluster:
    name: cheeztv-postgres