f15d768227
Convert the three *arr apps from single-replica upstream LinuxServer/SQLite to our -unkin2 forks running active-active (replicas 3) on a shared CNPG Postgres cluster. - new apps/base/arrstack/postgres/: CNPG Cluster arrstack-postgres (3 instances, 3 managed login roles sonarr/radarr/prowlarr, throwaway initdb owner), per-app Database CRDs (<app>-main), cephrgw backup bucket + nightly ScheduledBackup, and 3 VaultStaticSecrets syncing the <app>-db role credentials. - per app: image -> docker-internal/<app>:v<base>-unkin2; replicas 3 + RollingUpdate; drop the apikey-init initContainer + PUID/PGID/TZ; run the binary directly with -nosingleinstancecheck; env from a new ConfigMap plus Postgres user/password and the API key from Secrets; /config PVC -> RWX cephfs-raid5-retain (shared).
46 lines
1.2 KiB
YAML
46 lines
1.2 KiB
YAML
---
|
|
# Ceph RGW (S3) backup target for the shared arrstack CNPG cluster, provisioned
|
|
# by the in-estate cephrgw-operator: one dedicated bucket + owner user. CNPG
|
|
# reads the S3 credential Secret (cnpg-arrstack-backup-s3) from this namespace.
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: ObjectStoreUser
|
|
metadata:
|
|
name: cnpg-arrstack-backup
|
|
namespace: arrstack
|
|
spec:
|
|
displayName: "CNPG backup owner (arrstack)"
|
|
uid: cnpg-arrstack-backup
|
|
maxBuckets: 5
|
|
secretName: cnpg-arrstack-backup-s3
|
|
retainOnDelete: true
|
|
---
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: Bucket
|
|
metadata:
|
|
name: cnpg-arrstack
|
|
namespace: arrstack
|
|
spec:
|
|
placementTarget: ec
|
|
bucketName: cnpg-arrstack
|
|
ownerRef: cnpg-arrstack-backup
|
|
versioning: false
|
|
tags:
|
|
app: arrstack
|
|
purpose: cnpg-backup
|
|
retainOnDelete: true
|
|
---
|
|
# Nightly base backup on top of always-on WAL archiving. Staggered from the
|
|
# other CNPG clusters (6-field cron, seconds first).
|
|
apiVersion: postgresql.cnpg.io/v1
|
|
kind: ScheduledBackup
|
|
metadata:
|
|
name: cnpg-arrstack-nightly
|
|
namespace: arrstack
|
|
spec:
|
|
schedule: "0 45 3 * * *"
|
|
immediate: false
|
|
backupOwnerReference: self
|
|
method: barmanObjectStore
|
|
cluster:
|
|
name: arrstack-postgres
|