infrastructure/addons/rancher-backup/b2-credentials-externalsecret.yaml

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: rancher-b2-creds
  namespace: cattle-resources-system
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: doppler-hetznerterra
    kind: ClusterSecretStore
  target:
    name: rancher-b2-creds
    creationPolicy: Owner
    template:
      type: Opaque
      data:
        accessKey: "{{ .B2_ACCOUNT_ID }}"
        secretKey: "{{ .B2_APPLICATION_KEY }}"
  data:
    - secretKey: B2_ACCOUNT_ID
      remoteRef:
        key: B2_ACCOUNT_ID
    - secretKey: B2_APPLICATION_KEY
      remoteRef:
        key: B2_APPLICATION_KEY
feat: Add CloudNativePG with B2 backups for persistent Rancher database - Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups 2026-03-25 23:06:45 +00:00			`apiVersion: external-secrets.io/v1`
			`kind: ExternalSecret`
			`metadata:`
refactor: Replace CNPG external DB with rancher-backup operator Rancher 2.x uses embedded etcd, not an external PostgreSQL database. The CATTLE_DB_CATTLE_* env vars are Rancher v1 only and were ignored. - Remove all CNPG (CloudNativePG) cluster, operator, and related configs - Remove external DB env vars from Rancher HelmRelease - Remove rancher-db-password ExternalSecret - Add rancher-backup operator HelmRelease (v106.0.2+up8.1.0) - Add B2 credentials ExternalSecret for backup storage - Add recurring Backup CR (daily at 03:00, 7 day retention) - Add commented-out Restore CR for rebuild recovery - Update Flux dependency graph accordingly 2026-03-29 21:53:16 +00:00			`name: rancher-b2-creds`
			`namespace: cattle-resources-system`
feat: Add CloudNativePG with B2 backups for persistent Rancher database - Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups 2026-03-25 23:06:45 +00:00			`spec:`
			`refreshInterval: 1h`
			`secretStoreRef:`
			`name: doppler-hetznerterra`
			`kind: ClusterSecretStore`
			`target:`
refactor: Replace CNPG external DB with rancher-backup operator Rancher 2.x uses embedded etcd, not an external PostgreSQL database. The CATTLE_DB_CATTLE_* env vars are Rancher v1 only and were ignored. - Remove all CNPG (CloudNativePG) cluster, operator, and related configs - Remove external DB env vars from Rancher HelmRelease - Remove rancher-db-password ExternalSecret - Add rancher-backup operator HelmRelease (v106.0.2+up8.1.0) - Add B2 credentials ExternalSecret for backup storage - Add recurring Backup CR (daily at 03:00, 7 day retention) - Add commented-out Restore CR for rebuild recovery - Update Flux dependency graph accordingly 2026-03-29 21:53:16 +00:00			`name: rancher-b2-creds`
feat: Add CloudNativePG with B2 backups for persistent Rancher database - Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups 2026-03-25 23:06:45 +00:00			`creationPolicy: Owner`
			`template:`
			`type: Opaque`
			`data:`
fix: Rename B2 secret keys to match rancher-backup operator expectations The operator expects accessKey/secretKey, not aws_access_key_id/aws_secret_access_key. 2026-03-30 00:05:13 +00:00			`accessKey: "{{ .B2_ACCOUNT_ID }}"`
			`secretKey: "{{ .B2_APPLICATION_KEY }}"`
feat: Add CloudNativePG with B2 backups for persistent Rancher database - Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups 2026-03-25 23:06:45 +00:00			`data:`
			`- secretKey: B2_ACCOUNT_ID`
			`remoteRef:`
			`key: B2_ACCOUNT_ID`
			`- secretKey: B2_APPLICATION_KEY`
			`remoteRef:`
refactor: Replace CNPG external DB with rancher-backup operator Rancher 2.x uses embedded etcd, not an external PostgreSQL database. The CATTLE_DB_CATTLE_* env vars are Rancher v1 only and were ignored. - Remove all CNPG (CloudNativePG) cluster, operator, and related configs - Remove external DB env vars from Rancher HelmRelease - Remove rancher-db-password ExternalSecret - Add rancher-backup operator HelmRelease (v106.0.2+up8.1.0) - Add B2 credentials ExternalSecret for backup storage - Add recurring Backup CR (daily at 03:00, 7 day retention) - Add commented-out Restore CR for rebuild recovery - Update Flux dependency graph accordingly 2026-03-29 21:53:16 +00:00			`key: B2_APPLICATION_KEY`