infrastructure/addons/cnpg/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - namespace.yaml
  - b2-credentials-externalsecret.yaml
  - rancher-db-password-externalsecret.yaml
  - postgres-cluster.yaml
  - cnpg-cluster-rw-svc.yaml
  - role-b2-reader.yaml
  - rolebinding-b2-reader.yaml
  - scheduled-backup-rancher.yaml
feat: Add CloudNativePG with B2 backups for persistent Rancher database - Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups 2026-03-25 23:06:45 +00:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
			`resources:`
			`- namespace.yaml`
			`- b2-credentials-externalsecret.yaml`
			`- rancher-db-password-externalsecret.yaml`
			`- postgres-cluster.yaml`
			`- cnpg-cluster-rw-svc.yaml`
fix: Add Role for B2 credentials access 2026-03-26 23:04:40 +00:00			`- role-b2-reader.yaml`
feat: Add RBAC for CNP to read B2 credentials secret 2026-03-26 22:56:00 +00:00			`- rolebinding-b2-reader.yaml`
feat: Replace custom pgdump job with CNPG ScheduledBackup 2026-03-28 03:15:39 +00:00			`- scheduled-backup-rancher.yaml`