unkin-agent
1d5e8edbdd
Deploy goodtune/ghp so estate agents have a GitHub proxy. Mirrors the artifactapi app structure under apps/base/ghp with a CNPG Postgres backend, VSO-synced GitHub App + encryption secrets, an internal Vault-PKI serving cert, a PreSync migration hook, and platform ApplicationSet/project registration.
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
---
|
|
# Ceph RGW (S3) backup target for the ghp CNPG cluster, provisioned by the
|
|
# in-estate cephrgw-operator. One dedicated bucket + owner user per cluster.
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: ObjectStoreUser
|
|
metadata:
|
|
name: cnpg-ghp-backup
|
|
namespace: ghp
|
|
spec:
|
|
displayName: "CNPG backup owner (ghp)"
|
|
uid: cnpg-ghp-backup
|
|
maxBuckets: 5
|
|
secretName: cnpg-ghp-backup-s3
|
|
retainOnDelete: true
|
|
---
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: Bucket
|
|
metadata:
|
|
name: cnpg-ghp
|
|
namespace: ghp
|
|
spec:
|
|
placementTarget: ec
|
|
bucketName: cnpg-ghp
|
|
ownerRef: cnpg-ghp-backup
|
|
versioning: false
|
|
tags:
|
|
app: ghp
|
|
purpose: cnpg-backup
|
|
retainOnDelete: true
|
|
---
|
|
# Nightly base backup; continuous WAL archiving is always-on via the Cluster's
|
|
# spec.backup.barmanObjectStore. Staggered off other clusters' schedules.
|
|
apiVersion: postgresql.cnpg.io/v1
|
|
kind: ScheduledBackup
|
|
metadata:
|
|
name: cnpg-ghp-nightly
|
|
namespace: ghp
|
|
spec:
|
|
schedule: "0 50 1 * * *"
|
|
immediate: false
|
|
backupOwnerReference: self
|
|
method: barmanObjectStore
|
|
cluster:
|
|
name: postgres
|