MichaelFisher1997
9d601dc77c
- Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups
58 lines
1.4 KiB
YAML
58 lines
1.4 KiB
YAML
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: rancher
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 10m
|
|
targetNamespace: cattle-system
|
|
chart:
|
|
spec:
|
|
chart: rancher
|
|
version: "2.13.3"
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: rancher-stable
|
|
namespace: flux-system
|
|
install:
|
|
createNamespace: true
|
|
remediation:
|
|
retries: 3
|
|
upgrade:
|
|
remediation:
|
|
retries: 3
|
|
values:
|
|
hostname: k8s-cluster-cp-1-1.silverside-gopher.ts.net
|
|
tls: external
|
|
replicas: 1
|
|
extraEnv:
|
|
- name: CATTLE_DB_CATTLE_HOST
|
|
value: cnpg-cluster-rw.cnpg-cluster.svc
|
|
- name: CATTLE_DB_CATTLE_PORT
|
|
value: "5432"
|
|
- name: CATTLE_DB_CATTLE_DATABASE
|
|
value: postgres
|
|
- name: CATTLE_DB_CATTLE_USERNAME
|
|
value: postgres
|
|
- name: CATTLE_DB_CATTLE_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: rancher-db-password
|
|
key: password
|
|
- name: CATTLE_PROMETHEUS_METRICS
|
|
value: "true"
|
|
resources:
|
|
requests:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: DoesNotExist
|