unkin-agent
1d9b7ec924
Stalwart needs a Postgres metadata store and an S3 blob store before it can be deployed into the new `mail` namespace. - add CNPG Cluster `stalwart-db` (db/owner `stalwart`, CNPG-minted `stalwart-db-app` creds) with barman backups to a dedicated `cnpg-mail` bucket and a nightly ScheduledBackup - add cephrgw Bucket `stalwart-blobs` with an owner user writing RW keys to `stalwart-blobs-s3` - add the au-syd1 overlay, platform ApplicationSet path and project destination Reviewed-on: #538 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
31 lines
719 B
YAML
31 lines
719 B
YAML
---
|
|
# Stalwart S3 blob store. The owner user has read-write on its own bucket; the
|
|
# operator mints AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY / S3_ENDPOINT into
|
|
# stalwart-blobs-s3.
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: ObjectStoreUser
|
|
metadata:
|
|
name: stalwart-blobs
|
|
namespace: mail
|
|
spec:
|
|
displayName: "Stalwart blob store owner"
|
|
uid: mail-stalwart-blobs
|
|
maxBuckets: 5
|
|
secretName: stalwart-blobs-s3
|
|
retainOnDelete: true
|
|
---
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: Bucket
|
|
metadata:
|
|
name: stalwart-blobs
|
|
namespace: mail
|
|
spec:
|
|
placementTarget: ec
|
|
bucketName: stalwart-blobs
|
|
ownerRef: stalwart-blobs
|
|
versioning: false
|
|
tags:
|
|
app: stalwart
|
|
purpose: blob-store
|
|
retainOnDelete: true
|