infrastructure/addons/kustomization-rancher-backup.yaml

apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: addon-rancher-backup
  namespace: flux-system
spec:
  interval: 10m
  prune: true
  sourceRef:
    kind: GitRepository
    name: platform
  path: ./infrastructure/addons/rancher-backup
  wait: true
  timeout: 10m
  suspend: false
  dependsOn:
    - name: addon-external-secrets
    - name: addon-rancher
fix: Convert kustomization-lpp and kustomization-cnpg to Flux Kustomization CRs 2026-03-26 00:03:53 +00:00			`apiVersion: kustomize.toolkit.fluxcd.io/v1`
feat: Add CloudNativePG with B2 backups for persistent Rancher database - Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups 2026-03-25 23:06:45 +00:00			`kind: Kustomization`
fix: Add missing metadata.name to kustomization-lpp and kustomization-cnpg 2026-03-25 23:39:45 +00:00			`metadata:`
refactor: Replace CNPG external DB with rancher-backup operator Rancher 2.x uses embedded etcd, not an external PostgreSQL database. The CATTLE_DB_CATTLE_* env vars are Rancher v1 only and were ignored. - Remove all CNPG (CloudNativePG) cluster, operator, and related configs - Remove external DB env vars from Rancher HelmRelease - Remove rancher-db-password ExternalSecret - Add rancher-backup operator HelmRelease (v106.0.2+up8.1.0) - Add B2 credentials ExternalSecret for backup storage - Add recurring Backup CR (daily at 03:00, 7 day retention) - Add commented-out Restore CR for rebuild recovery - Update Flux dependency graph accordingly 2026-03-29 21:53:16 +00:00			`name: addon-rancher-backup`
fix: Convert kustomization-lpp and kustomization-cnpg to Flux Kustomization CRs 2026-03-26 00:03:53 +00:00			`namespace: flux-system`
			`spec:`
			`interval: 10m`
			`prune: true`
			`sourceRef:`
			`kind: GitRepository`
			`name: platform`
refactor: Replace CNPG external DB with rancher-backup operator Rancher 2.x uses embedded etcd, not an external PostgreSQL database. The CATTLE_DB_CATTLE_* env vars are Rancher v1 only and were ignored. - Remove all CNPG (CloudNativePG) cluster, operator, and related configs - Remove external DB env vars from Rancher HelmRelease - Remove rancher-db-password ExternalSecret - Add rancher-backup operator HelmRelease (v106.0.2+up8.1.0) - Add B2 credentials ExternalSecret for backup storage - Add recurring Backup CR (daily at 03:00, 7 day retention) - Add commented-out Restore CR for rebuild recovery - Update Flux dependency graph accordingly 2026-03-29 21:53:16 +00:00			`path: ./infrastructure/addons/rancher-backup`
fix: Convert kustomization-lpp and kustomization-cnpg to Flux Kustomization CRs 2026-03-26 00:03:53 +00:00			`wait: true`
			`timeout: 10m`
fix: Split CNP operator from CNP cluster to fix CRD dependency - Move CNP operator HelmRelease to cnpg-operator folder - Create addon-cnpg-operator kustomization (deploys operator first) - Update addon-cnpg to dependOn addon-cnpg-operator - Add addon-cnpg as dependency for addon-rancher (needs database) 2026-03-26 00:06:34 +00:00			`suspend: false`
			`dependsOn:`
fix: Add skipEmptyWalArchiveCheck annotation and B2 secret healthcheck to CNPG - Skip WAL archive emptiness check so recovery works when restoring over an existing backup archive in B2 - Add healthCheck for b2-credentials secret in CNPG kustomization to prevent recovery from starting before ExternalSecret has synced 2026-03-29 03:15:23 +00:00			`- name: addon-external-secrets`
refactor: Replace CNPG external DB with rancher-backup operator Rancher 2.x uses embedded etcd, not an external PostgreSQL database. The CATTLE_DB_CATTLE_* env vars are Rancher v1 only and were ignored. - Remove all CNPG (CloudNativePG) cluster, operator, and related configs - Remove external DB env vars from Rancher HelmRelease - Remove rancher-db-password ExternalSecret - Add rancher-backup operator HelmRelease (v106.0.2+up8.1.0) - Add B2 credentials ExternalSecret for backup storage - Add recurring Backup CR (daily at 03:00, 7 day retention) - Add commented-out Restore CR for rebuild recovery - Update Flux dependency graph accordingly 2026-03-29 21:53:16 +00:00			`- name: addon-rancher`