add cert-manager and barman cloud plugin

kubernetes/charts/cert-manager.nix

@@ -0,0 +1,15 @@
+{
+  services.k3s.autoDeployCharts = {
+    cert-manager = {
+      name = "cert-manager";
+      version = "v1.20.0";
+      repo = "https://charts.jetstack.io";
+      hash = "sha256-Hxomj9FkLXbQuf0WKq7ckZc6gbh9nlfA//JGAkzNKtQ=";
+      createNamespace = true;
+      targetNamespace = "cert-manager";
+      values = {
+        installCRDs = true;
+      };
+    };
+  };
+}

kubernetes/charts/cloudnativepg.nix

@@ -1,10 +1,20 @@
 {
-  services.k3s.autoDeployCharts.cloudnativepg = {
+  services.k3s.autoDeployCharts = {
-    name = "cloudnative-pg";
+    cloudnativepg = {
-    version = "0.27.1";
+      name = "cloudnative-pg";
-    repo = "https://cloudnative-pg.github.io/charts";
+      version = "0.27.1";
-    hash = "sha256-Z9cYn5MhnTVWMP92kBaRIc9gbmeshKvgXFP4h4jenUk=";
+      repo = "https://cloudnative-pg.github.io/charts";
-    createNamespace = true;
+      hash = "sha256-Z9cYn5MhnTVWMP92kBaRIc9gbmeshKvgXFP4h4jenUk=";
-    targetNamespace = "cloudnativepg";
+      createNamespace = true;
+      targetNamespace = "cloudnativepg";
+    };
+    plugin-barman-cloud = {
+      name = "plugin-barman-cloud";
+      version = "0.5.0";
+      repo = "https://cloudnative-pg.github.io/charts";
+      hash = "sha256-c7v0Mrln3ESJz//7s7/HfZJHtxVqLIVY/GtSrv8ti+o=";
+      targetNamespace = "cloudnativepg";
+    };
   };
+  
 }

kubernetes/charts/default.nix

@@ -1,5 +1,6 @@
 {
     imports = [
         ./cloudnativepg.nix
+        ./cert-manager.nix
     ];
 }

kubernetes/kubernetes.nix

@@ -2,6 +2,7 @@
   imports = [
     ./charts
     ./manifests
+    ./secrets
   ];
 
   networking.firewall.allowedTCPPorts = [6443];

kubernetes/secrets/cloudnativepg/s3-backup-creds.nix

@@ -1,6 +1,6 @@
 { config, ... }:
 {
-  sops.templates."omni-etcd-key.yaml" = {
+  sops.templates."cnpg-s3-backup-creds.yaml" = {
     mode = "0444";
     content = ''
       apiVersion: v1
@@ -9,7 +9,7 @@
         name: s3-backup-creds
         namespace: cloudnativepg
       type: Opaque
-      spec:
+      stringData:
         s3AccessKey: fmRuq5b96EKqQOGR1prs
         s3SecretKey: ${config.sops.placeholder.cnpg_s3_backup_key}
     '';

kubernetes/secrets/default.nix

@@ -1,5 +1,5 @@
 {
   imports = [
-    ./omni/omni-etcd-key.nix
+    ./cloudnativepg/s3-backup-creds.nix
   ];
 }

security/sops.nix

@@ -18,6 +18,7 @@
             pw_williamp = {
                 neededForUsers = true;
             };
+            cnpg_s3_backup_key = {};
         };
     };
 }