MichaelFisher1997
9d601dc77c
- Add Local Path Provisioner for storage - Add CloudNativePG operator (v1.27.0) via Flux - Create PostgreSQL cluster with B2 (Backblaze) auto-backup/restore - Update Rancher to use external PostgreSQL via CATTLE_DB_CATTLE_* env vars - Add weekly pg_dump CronJob to B2 (Sundays 2AM) - Add pre-destroy backup hook to destroy workflow - Add B2 credentials to Doppler (B2_ACCOUNT_ID, B2_APPLICATION_KEY) - Generate RANCHER_DB_PASSWORD in Doppler Backup location: HetznerTerra/rancher-backups/ Retention: 14 backups
21 lines
478 B
YAML
21 lines
478 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: rancher-db-password
|
|
namespace: cnpg-cluster
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: doppler-hetznerterra
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: rancher-db-password
|
|
creationPolicy: Owner
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
password: "{{ .RANCHER_DB_PASSWORD }}"
|
|
data:
|
|
- secretKey: RANCHER_DB_PASSWORD
|
|
remoteRef:
|
|
key: RANCHER_DB_PASSWORD |