Skip to content

Commit dc95be6

Browse files
Franck-SorelFranck-Sorel
authored
update(): helm release for pg_dump backup and restore (#22)
* update(): helm release for pg_dump backup and restore * update(): clearn up workspace and add proper readme file * docs: refactor README.md to reflect new project structure - Update test environment setup to use 'how-it-works/' directory - Remove reference to non-existent 's3-secrets.yaml' file - Update database secret reference to 'how-it-works/secret.yaml' - Remove outdated comment about 'create-aws-secret.md' - Update cleanup instructions to use 'how-it-works/' directory - Revise manual job creation section to reference Helm template * update(): separate docs from chart implementation * update(): Clean docs with clear user steps * README.md has been updated with clear, step-by-step testing instructions, and values.yaml has been cleaned up by removing unused configurations such as global image settings, imagePullSecrets, PSP-related RBAC options, unused S3 parameters, and redundant controller settings like probes and image specs that are not referenced in the Helm templates. **Git Commit Message:** ``` feat: clarify README testing steps and clean up values.yaml - Add detailed Quick Start with S3 bucket creation, env vars, DB population, backup, and restore testing - Use environment variables for bucket name and backup file in commands - Update Testing section with general verification commands - Remove unused configurations from values.yaml: global image, imagePullSecrets, PSP settings, unused S3 params, controller probes and image specs, restore flags ``` * update(): update secret reference into deployment.yaml * update(): resolve comments on readme instuctions * fix(): hidden secret * fix(local-test): add postgres credentials setup * update(): secrets.yaml * update(): secret.yaml * update(): documentation * update(): modify secret name * test(): * Fix Helm chart: proper Chart.yaml, remove .helmignore, update dependencies * test: run argoCD * test: run argoCD 10:10 * test: run argoCD 12:45 * test: run argoCD 13:27 * test: run argoCD 13:35 * Refactor code structure for improved readability and maintainability * feat: update backup and restore configurations for PostgreSQL with app-template integration * feat: simplify values.yaml by removing unnecessary comments and restructuring backup configurations * feat: add pgdump-backup Helm chart with PostgreSQL backup and restore configurations * update: using a map instead of an array for argoCD patching * update: change schedule time
1 parent 9d91319 commit dc95be6

File tree

3 files changed

+192
-0
lines changed

3 files changed

+192
-0
lines changed

‎charts/pgdump-backup/Chart.lock‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
dependencies:
2+
- name: app-template
3+
repository: https://bjw-s-labs.github.io/helm-charts
4+
version: 4.6.2
5+
digest: sha256:4c9fe016099b404a3cfd69b465e5c35bd15d540c5da7d3c3e17673bee88b5b4f
6+
generated: "2026-02-06T15:38:55.376842288+01:00"

‎charts/pgdump-backup/Chart.yaml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
apiVersion: v2
2+
name: pgdump-backup
3+
description: Automated PostgreSQL backup and restore solution for CloudNativePG clusters
4+
type: application
5+
version: 0.1.0
6+
appVersion: "0.1.0"
7+
8+
dependencies:
9+
- name: app-template
10+
version: 4.6.2
11+
repository: https://bjw-s-labs.github.io/helm-charts

‎charts/pgdump-backup/values.yaml‎

Lines changed: 175 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,175 @@
1+
app-template:
2+
postgres:
3+
secretName: litellm-pg-app
4+
5+
s3:
6+
secretName: open-web-ui-s3
7+
8+
restore:
9+
enabled: false
10+
object: ""
11+
12+
defaultPodOptions:
13+
securityContext:
14+
runAsNonRoot: true
15+
runAsUser: 999
16+
runAsGroup: 999
17+
fsGroup: 999
18+
terminationGracePeriodSeconds: 30
19+
20+
controllers:
21+
backup:
22+
type: cronjob
23+
pod:
24+
restartPolicy: OnFailure
25+
cronjob:
26+
schedule: "00 02 * * *"
27+
concurrencyPolicy: Forbid
28+
successfulJobsHistory: 3
29+
failedJobsHistory: 3
30+
startingDeadlineSeconds: 30
31+
containers:
32+
backup:
33+
image:
34+
repository: ghcr.io/itbm/postgresql-backup-s3
35+
tag: latest
36+
pullPolicy: IfNotPresent
37+
securityContext:
38+
allowPrivilegeEscalation: false
39+
readOnlyRootFilesystem: true
40+
capabilities:
41+
drop:
42+
- ALL
43+
resources:
44+
requests:
45+
cpu: 100m
46+
memory: 256Mi
47+
limits:
48+
cpu: 500m
49+
memory: 512Mi
50+
env:
51+
POSTGRES_HOST:
52+
valueFrom:
53+
secretKeyRef:
54+
name: "{{ .Values.postgres.secretName }}"
55+
key: host
56+
POSTGRES_PORT:
57+
valueFrom:
58+
secretKeyRef:
59+
name: "{{ .Values.postgres.secretName }}"
60+
key: port
61+
POSTGRES_DATABASE:
62+
valueFrom:
63+
secretKeyRef:
64+
name: "{{ .Values.postgres.secretName }}"
65+
key: dbname
66+
POSTGRES_USER:
67+
valueFrom:
68+
secretKeyRef:
69+
name: "{{ .Values.postgres.secretName }}"
70+
key: username
71+
POSTGRES_PASSWORD:
72+
valueFrom:
73+
secretKeyRef:
74+
name: "{{ .Values.postgres.secretName }}"
75+
key: password
76+
S3_BUCKET:
77+
valueFrom:
78+
secretKeyRef:
79+
name: "{{ .Values.s3.secretName }}"
80+
key: S3_BUCKET_NAME
81+
S3_ACCESS_KEY_ID:
82+
valueFrom:
83+
secretKeyRef:
84+
name: "{{ .Values.s3.secretName }}"
85+
key: S3_ACCESS_KEY_ID
86+
S3_SECRET_ACCESS_KEY:
87+
valueFrom:
88+
secretKeyRef:
89+
name: "{{ .Values.s3.secretName }}"
90+
key: S3_SECRET_ACCESS_KEY
91+
S3_REGION:
92+
valueFrom:
93+
secretKeyRef:
94+
name: "{{ .Values.s3.secretName }}"
95+
key: S3_REGION_NAME
96+
97+
restore:
98+
enabled: false
99+
type: job
100+
annotations:
101+
helm.sh/hook: post-install
102+
helm.sh/hook-delete-policy: hook-succeeded,before-hook-creation
103+
job:
104+
ttlSecondsAfterFinished: 300
105+
backoffLimit: 4
106+
pod:
107+
restartPolicy: Never
108+
containers:
109+
restore:
110+
image:
111+
repository: ghcr.io/itbm/postgresql-backup-s3
112+
tag: latest
113+
pullPolicy: IfNotPresent
114+
securityContext:
115+
allowPrivilegeEscalation: false
116+
readOnlyRootFilesystem: true
117+
capabilities:
118+
drop:
119+
- ALL
120+
command:
121+
- /restore.sh
122+
resources:
123+
requests:
124+
cpu: 100m
125+
memory: 256Mi
126+
limits:
127+
cpu: 500m
128+
memory: 1Gi
129+
env:
130+
POSTGRES_HOST:
131+
valueFrom:
132+
secretKeyRef:
133+
name: "{{ .Values.postgres.secretName }}"
134+
key: host
135+
POSTGRES_PORT:
136+
valueFrom:
137+
secretKeyRef:
138+
name: "{{ .Values.postgres.secretName }}"
139+
key: port
140+
POSTGRES_DATABASE:
141+
valueFrom:
142+
secretKeyRef:
143+
name: "{{ .Values.postgres.secretName }}"
144+
key: dbname
145+
POSTGRES_USER:
146+
valueFrom:
147+
secretKeyRef:
148+
name: "{{ .Values.postgres.secretName }}"
149+
key: username
150+
POSTGRES_PASSWORD:
151+
valueFrom:
152+
secretKeyRef:
153+
name: "{{ .Values.postgres.secretName }}"
154+
key: password
155+
S3_BUCKET:
156+
valueFrom:
157+
secretKeyRef:
158+
name: "{{ .Values.s3.secretName }}"
159+
key: S3_BUCKET_NAME
160+
S3_ACCESS_KEY_ID:
161+
valueFrom:
162+
secretKeyRef:
163+
name: "{{ .Values.s3.secretName }}"
164+
key: S3_ACCESS_KEY_ID
165+
S3_SECRET_ACCESS_KEY:
166+
valueFrom:
167+
secretKeyRef:
168+
name: "{{ .Values.s3.secretName }}"
169+
key: S3_SECRET_ACCESS_KEY
170+
S3_REGION:
171+
valueFrom:
172+
secretKeyRef:
173+
name: "{{ .Values.s3.secretName }}"
174+
key: S3_REGION_NAME
175+
BACKUP_FILE: "{{ .Values.restore.object }}"

0 commit comments

Comments
 (0)