unkin-agent
1d9b7ec924
Stalwart needs a Postgres metadata store and an S3 blob store before it can be deployed into the new `mail` namespace. - add CNPG Cluster `stalwart-db` (db/owner `stalwart`, CNPG-minted `stalwart-db-app` creds) with barman backups to a dedicated `cnpg-mail` bucket and a nightly ScheduledBackup - add cephrgw Bucket `stalwart-blobs` with an owner user writing RW keys to `stalwart-blobs-s3` - add the au-syd1 overlay, platform ApplicationSet path and project destination Reviewed-on: #538 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
41 lines
786 B
YAML
41 lines
786 B
YAML
---
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: ObjectStoreUser
|
|
metadata:
|
|
name: cnpg-mail-backup
|
|
namespace: mail
|
|
spec:
|
|
displayName: "CNPG backup owner (mail)"
|
|
uid: cnpg-mail-backup
|
|
maxBuckets: 5
|
|
secretName: cnpg-mail-backup-s3
|
|
retainOnDelete: true
|
|
---
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: Bucket
|
|
metadata:
|
|
name: cnpg-mail
|
|
namespace: mail
|
|
spec:
|
|
placementTarget: ec
|
|
bucketName: cnpg-mail
|
|
ownerRef: cnpg-mail-backup
|
|
versioning: false
|
|
tags:
|
|
app: mail
|
|
purpose: cnpg-backup
|
|
retainOnDelete: true
|
|
---
|
|
apiVersion: postgresql.cnpg.io/v1
|
|
kind: ScheduledBackup
|
|
metadata:
|
|
name: cnpg-mail-nightly
|
|
namespace: mail
|
|
spec:
|
|
schedule: "0 20 4 * * *"
|
|
immediate: false
|
|
backupOwnerReference: self
|
|
method: barmanObjectStore
|
|
cluster:
|
|
name: stalwart-db
|