Reorganized velero

2025-02-15 22:06:49 +01:00
parent e2872c4dbc
commit f072d17e47
8 changed files with 18 additions and 10 deletions
--- a/infra/velero/helm-release.yaml
+++ b/infra/velero/helm-release.yaml
@@ -0,0 +1,54 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: velero
+spec:
+  chart:
+    spec:
+      chart: velero
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: velero
+      version: 8.3.0
+  interval: 1m0s
+  values:
+    credentials:
+      useSecret: false
+    deployNodeAgent: true
+    configuration:
+      features: EnableCSI
+      defaultSnapshotMoveData: true
+      backupStorageLocation:
+        - name: minio
+          provider: aws
+          bucket: titan-testing-backup
+          credential:
+            name: s3-credentials
+            key: minio
+          config:
+            region: minio
+            s3ForcePathStyle: true
+            s3Url: https://minio.huizinga.dev
+            checksumAlgorithm: ""
+        - name: backblaze
+          provider: aws
+          bucket: titan-testing
+          credential:
+            name: s3-credentials
+            key: backblaze
+          config:
+            region: eu-central-003
+            s3Url: https://s3.eu-central-003.backblazeb2.com
+            checksumAlgorithm: ""
+          default: true
+      defaultVolumeSnapshotLocation: csi:csi
+      volumeSnapshotLocation:
+        - name: csi
+          provider: csi
+    initContainers:
+      - name: velero-plugin-for-aws
+        image: velero/velero-plugin-for-aws:v1.11.1
+        volumeMounts:
+          - name: plugins
+            mountPath: /target
--- a/infra/velero/helm-repository.yaml
+++ b/infra/velero/helm-repository.yaml
@@ -0,0 +1,7 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: velero
+spec:
+  interval: 1m0s
+  url: https://vmware-tanzu.github.io/helm-charts
--- a/infra/velero/namespace.yaml
+++ b/infra/velero/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: velero
--- a/infra/velero/secret-s3-credentials.yaml
+++ b/infra/velero/secret-s3-credentials.yaml
@@ -0,0 +1,60 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: s3-credentials
+type: Opaque
+stringData:
+    minio: ENC[AES256_GCM,data:OAkSYKCISiwtSsqDIhAxA+SujTwCFQAOO2y6oOuMIecmZZuvtGsrV+S4z+YUQFOpsBx0+ChEXBbKn0F/Fhee2A5IOZZ+zTTbfpmIeHbIdD6dR2OOoF0gDq7zK7yQTyZt3X9eyg==,iv:cwdLzo/7XkQ1bOQK6xn4T930vlMupcTEPJx2/bFxjUQ=,tag:ZIHklNHbP1EdsWP1lzjEtA==,type:str]
+    backblaze: ENC[AES256_GCM,data:JKnNKsj72epSSXSfX4CqR3X9a5qmLHQnbZa44mL5i4XiLUUMdjFqDWCJgoDY/O8AukZlp8lYCjxBNUDKFuunF8wm/QqdPP1hCerUEmjyjPywksK9iP8hTuJFR8z9uCGGM6O6AGmj0tUmLpjY,iv:DcCFzQNbVIB8XOQGSA3+F2tVKlvkZ0WNJliJLUiUFJA=,tag:XVnedssB7CiNsWWyt3Cb8A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2025-02-07T00:02:15Z"
+    mac: ENC[AES256_GCM,data:wYG5LL71BT9eH++DpG9wXPGieKgX4C66Yp0cNsKnZDnOY+TifPij6RRF4dqsN3yJ+lhY1ANQMdmrSrVvGgrCahXn9ayHm8EyIMjt8iLMGi5U06/2lc+Xya3ZR0dCmRMle0qKSr0BX82nWi+2fLUQzVRxRxt55rbqdrj2HvS5MhU=,iv:zgkiXjuGAJs9pBQw1JWdFTe3g0h1gp5BLtyWRfZUtOg=,tag:Fjl2/5jDrQ7bIkU7czMSgw==,type:str]
+    pgp:
+        - created_at: "2025-01-31T22:07:06Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7pKPTYH5bqOAQ/+KIbhK8gBzGEoeG6qCGDRx7kdn3bCw+V7AUOupm4uFjbL
+            JP54juvgsA0DMKFRAmQy7V48aKPjICrM1DCDcdREi+39KhBmWIPy6bduzgo+fbQQ
+            2dqRUI7zwEibheS+5tYw798lTPewcC6CuU0tk9Fxe258njGDOooFusExayCynT4A
+            0xo8852PxMR+uAt7SEWs45VWfPp40PyBpmESiyGBojJXR2LKD6frjY3bLlLOPH4o
+            c765R43j4jKiRGK2Ju1t98l3ULsYXFQxeLbMdTkHKPr3WqNLSIoIXFpJJm66HD2L
+            0S7mH3neuQH1X8KYERkLVTf3O3fH+BUAPBbtVMmHMvnkJYLNJneNVU/aN/jy3cIl
+            yn6QXYOjKrK2kyRLUXDslxzPHFKIgSea4CUTLEALbBxsEEVK0+CwVKg6KUcqV73k
+            6CyYsvq9DE5eQEhW7j04uUQ9Av7IKlnYBQzLd6HoIPRODWEXQgmyaC/+PyRaJCVN
+            QV+Hcdsu6FFDCmJV2DzuUepGNaAOY0VWiwI3eBLx0KWrhjjyrgiM0+52r9HNcvnY
+            Ww+f0oTNPIhn8rY/58Y9hp+CyG+1Gl4YIa8O/E1nl4yfuyBtaFLKiW2UUfSgcKU7
+            UYEBXEuIgTSWPQ3w0+Ds3FtBr2/Gnokvn41SwMCjOWaExj/ZsW96Eg+Jxi7r8wLU
+            aAEJAhCFTA77/ein9b6HfXDKdiDoT8sOpIHb+cUtNizYQsPiSTNYHv2LGeUVuVUT
+            MTzC2zkNaVYkNyYeUHuUTu4oiLtL4TNTG8YTL9e1OzyEWUYYUSL4uf+UdTeYAw1U
+            Pb3W8FffiHYi
+            =67bE
+            -----END PGP MESSAGE-----
+          fp: 1E0CF38FF7C9ADAED58B436ABA4A3D3607E5BA8E
+        - created_at: "2025-01-31T22:07:06Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA51kG++kLewoAQ/+OOL6njV26u5BJUsEmN1mc+qydN9PlDDasquQCd1NmRQ3
+            6d6DaL9WAZsuSY1T9ZnfVtNAHCs96ULYChjAmFBZsvRLYR39j5oAkhvHsx8KsBU0
+            s0w/wCwhSWUHPt340W7bBibVGju+/2Hxr/A6kUnx7ph9XYzipqyjgKd8uA0zK8Zc
+            behvfOYDnXPtKxV4Il9k9SIN6CFlyqQxFrzVh49PHrsGi34rxLoYhtdCftQwEDio
+            Mt9pUh0lBEqvjei+7FnYw4hNhthDA40ZXJxbilgtGyx8lpujnS5ePTtbw/4THqnZ
+            yFMchKluesKcxTs8xKTd3J3zQZC7poIcvPrW/KH8nAYq4amkacSneJTK2+qZFJNe
+            RKmqlmDdKptx5R1FICElxin+a6rZIwR3ht67hFIo+dV5KCFsdModKeLdi1wuitls
+            9Wspk71LSqtDC0HzGEPogyrBE3coRT6P9zZ8qvGWC7Uealz2VXqwweOzNy36iczc
+            cjPi0KMVIjmXUYBnBwmu2egTeZNuHynFjG0Fa0qKs5zWBmK6SzUrpODkZv0NwTMi
+            gQy5vX/dnY+dCdQcg0ustXZwUPmJLJ2BHgMe4LdWQVDypiW2hOcRJguLOAEzxD46
+            2qofIhjb6RF2KOw2y3kK6lB0rt4oNvR9dQt5wxeF+jlOHfWTJq04ihz8plH31unS
+            XgEmqCXwOIFONYkcjSMTGQaepL+tZUl0zriRT+/XwEW8cksDid/7Y2k0T4uvmLYg
+            7Xzsw0zucpYW+OHyO8lyNjY8EVrMofP2YX5R522rbkinaiy4Rylbn7qUVJjLtw8=
+            =yHcd
+            -----END PGP MESSAGE-----
+          fp: 49F10679C425233EFB4B1B6F9D641BEFA42DEC28
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1
--- a/infra/velero/secret-velero-repo-credentials.yaml
+++ b/infra/velero/secret-velero-repo-credentials.yaml
@@ -0,0 +1,59 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: velero-repo-credentials
+type: Opaque
+data:
+    repository-password: ENC[AES256_GCM,data:Fmbz0SxShWFRA1wVMrcW8Mw8G8IQRoTLFrXk6y+tpAWa1vas2aLwznauO/8LavOXJWjala5FoqQg3yGv,iv:umsaV26M6PitE4SvBtxLyFmwWcFUv3TdnbV4PiQc2Co=,tag:ElpY6dXdgRqJ2endG+rkMw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2025-02-05T00:25:06Z"
+    mac: ENC[AES256_GCM,data:iU7MrvJfJouWY5zYBzcWjgbWJYvzhDLtOA5f4D+JnwoyvZ72v1RFC1JBu4+nWUJyMI+MULIdgJRKSv2byY/618KdRQAJ5vX4fWRYwrJ9pSzSvZpX0S6Tf/xOkXtnZ9NCye6JkTZvaHmO+Tz4Yy4roRMUIZ0ZMmQMJQHPCAZQ7dw=,iv:QUJWbjDfIJADc9dcJ2Rxg/yUusjaztsPhgQCxE8jLic=,tag:X0zYqMdI23c/MIRNgHsvBA==,type:str]
+    pgp:
+        - created_at: "2025-02-05T00:25:06Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA7pKPTYH5bqOAQ/+OVWMhpalySLtxSLY6C+ebJMMMuic4IiFZvk4a9THUr/e
+            AwrO30CYAOBRy0a5X3jqjGQn7+ufQmoK/9hYOjsQQsWGd8z5BtuyGveu5qPSGYNK
+            kr5pGCn+BtmTl2Jxv9//A/rvfnYn01iNOvfE+B+gJIexz9FmXN6nlRAHOxYxbYsC
+            7Mhq+LOc2HHWA0R2mEW1yZr0OoImEeCs+WxRjEJ5Lf+i9D/6h8Zb9aAIjUFhzGmx
+            +Pyi17XfHWsMEK/mPm+eNcbhNbmiL2otzMIONHN1wHhXOEfmcnk25j1BS0MNBukH
+            eRcqAfj7qTg/twP2xmFtaEVRkDp8cN6Kg3RmZShBxsfJycTYAJBlgpRs3MD7l5cE
+            s3U6CBsmzgzqdrqHTKyYDMoPNup/mv1KKajOE7/iUeT663PLlSe6nORkwL+q50/8
+            5EFJ7BCpP9hD3nj+mO+CwP+vzd7+FMwU9c395tbD6iWPyYHKLjuvdc8bOxRm0Tch
+            R/Msch5qVyk3KceWyP6aqV0I5yKX7PKIEm9PfKsprkTbL7kDYLw4360Je5ZIrb+e
+            yxJQAZ0rpOR0xNQabtDfapQjMvdh1UdzljYC3lwSjsCaqz7BJ2Tw5tR7K4OGXi4X
+            egUzEXiz83uA/Yy47MRLSZpllbs0gmcvznN3EzbvULRLXfMqNAon6Mbfw/SQrQzU
+            ZgEJAhDJVLb1a8/tv3OXliQe1EePQWKUuXtvDUvLjoPBLYeRknvp84728bXMuayS
+            WKKHXOBEVCabAT7uIieGJ75ZdllPguoHRK8bRpBvDxRSIFMkLqEKlfn3VDwc+ZbO
+            VO66QFvOeg==
+            =CAbH
+            -----END PGP MESSAGE-----
+          fp: 1E0CF38FF7C9ADAED58B436ABA4A3D3607E5BA8E
+        - created_at: "2025-02-05T00:25:06Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA51kG++kLewoAQ//Z13qu7FZOQbPyOG46OFBWwyPPrjgHgjEkwqeYkw2hLf8
+            q8Nbj3A3w/ATERUnOVY9qY9/hMmXp/6TvEhYGGxWxDuIeWNCpbjb0x1yOrdK6T24
+            0LjjqP3TcPlHJb6/XyfP3J9CDMh47Jh1WoX91V3Az3QRSjixJS8Qb5g9Z6HCr/HB
+            K4pn1MX1wikYZhc1D/RR03OGrMnj4sUcNSFpnJVuKVXvS6cSEnchgBz1hW34FJ3G
+            BW+kDdPP+U5CsbmnbVS8lEge/FxUtF4tczlFcRxujiLGmrkrvORn96NPjqobHfTk
+            B4LLmbgiTwpUUq9n+kXZHPaVYoFXlChS0JdIMO0nf3jZefEWrDB6/chVoP8ks8Nf
+            txgn/KNkNTo5kGrzj3buqliEh1dtsm3bqnXems7Fa+tHyPnZHcTPgSpXjjDi3J3f
+            /LJDaNqPfS4FyFPF0EilD8rdmutOXWw1wZrruDTmWuvYHG8fJoSDaZKKA7fTjh1c
+            xE8LAKfaZwg0GsvusnnlaUQCtk2QnDZmfAF7q2Z/9TTeav+jBH5j+D1VqFFyE7wm
+            Y5grYBSs6poEaS+/NVeVtwtMAw0PYL+arMPNDg4hMSsBnlClcZlIAFCkeVb6oIRM
+            2+1r04U8bRujCJj4DwhvPuXDsYe8w786zcqgxgvcAjKrXR+/oSDiLp9EKeQkMl3S
+            XAHr61Q8fcwKL4XXceSAjq47Wf/13XH59/X4D/6rcLbMN9rZTJdaKkDNnbDA0Uep
+            KRu7lgtAUlzwZa3XdFiz7hUkN9a9glCel/lspm0Ypo3oQLHxZiwKAh1W4eqA
+            =ZYZj
+            -----END PGP MESSAGE-----
+          fp: 49F10679C425233EFB4B1B6F9D641BEFA42DEC28
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1