add backup

Author: soerenschneider

clusters/svc.dd.soeren.cloud/radicale/external-secret-radicale-restic.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: "external-secrets.io/v1beta1"
+kind: "ExternalSecret"
+metadata:
+  name: "radicale-restic-pvc"
+spec:
+  refreshInterval: "1h"
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "radicale-restic-pvc"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "AWS_ACCESS_KEY_ID"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/restic/radicale/aws-credentials"
+        property: "AWS_ACCESS_KEY_ID"
+    - secretKey: "AWS_SECRET_ACCESS_KEY"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/restic/radicale/aws-credentials"
+        property: "AWS_SECRET_ACCESS_KEY"
+    - secretKey: "RESTIC_PASSWORD"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/restic/radicale/restic"
+        property: "pass"

clusters/svc.dd.soeren.cloud/radicale/kustomization.yaml

@@ -8,10 +8,12 @@ resources:
   - pv.yaml
   - config-cm.yaml
   - external-secret-radicale.yaml
+  - external-secret-radicale-restic.yaml
 components:
   - ../../../apps/radicale/components/istio
   - ../../../apps/radicale/components/istio-proxy
   - ../../../apps/radicale/components/pvc
+  - ../../../apps/radicale/components/restic-pvc
 patches:
   - target:
       kind: VirtualService
@@ -58,3 +60,4 @@ configMapGenerator:
   - name: radicale-restic-pvc  # TODO: https://github.com/kubernetes-sigs/kustomize/issues/4402
     literals:
       - RESTIC_HOSTNAME=svc.dd.soeren.cloud
+      - RESTIC_REPOSITORY=s3:https://s3.amazonaws.com/soerenschneider-restic-prod/radicale