postgres: configure backups

2025-05-22 10:27:27 -04:00
parent 616895c0d1
commit 351a733338
3 changed files with 46 additions and 0 deletions
--- a/postgres/config/s3-backup-auth.yaml
+++ b/postgres/config/s3-backup-auth.yaml
@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: s3-backup-creds
+spec:
+  data:
+  - remoteRef:
+      conversionStrategy: Default
+      decodingStrategy: None
+      key: cloudnativepg
+      metadataPolicy: None
+      property: s3_backup_key
+    secretKey: s3SecretKey
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: weyma-vault
+  target:
+    template:
+      data:
+        s3AccessKey: fmRuq5b96EKqQOGR1prs
+        s3SecretKey: "{{ .s3SecretKey }}"
+    creationPolicy: Owner
+    deletionPolicy: Retain
+    name: s3-backup-creds