add base and overlay for ez

Author: soerenschneider

clusters/common/vault-backup/external-secret-vault-backup.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: "external-secrets.io/v1beta1"
+kind: "ExternalSecret"
+metadata:
+  name: "vault-backup"
+spec:
+  refreshInterval: "1h"
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "vault-backup"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "AWS_ACCESS_KEY_ID"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/restic/vault-prod/aws-credentials"
+        property: "AWS_ACCESS_KEY_ID"
+    - secretKey: "AWS_SECRET_ACCESS_KEY"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/restic/vault-prod/aws-credentials"
+        property: "AWS_SECRET_ACCESS_KEY"

clusters/common/vault-backup/kustomization.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../../infra/vault-backup
+  - external-secret-vault-backup.yaml
+configMapGenerator:
+  - name: vault-backup
+    options:
+      disableNameSuffixHash: true
+    literals:
+      - VAULT_ADDR=https://vault.ha.soeren.cloud
+      - RESTIC_REPOSITORY=s3:https://s3.amazonaws.com/soerenschneider-restic-prod/vault-prod
+      - VAULT_LOGIN_AUTH_ROLE=vault-backup
+      - VAULT_RESTIC_AWS_CREDENTIALS_SECRET_PATH=soeren.cloud/env/prod/restic/vault-prod/aws-credentials
+      - VAULT_RESTIC_PASSWORD_SECRET_PATH=vault-backup/restic

clusters/svc.ez.soeren.cloud/infra/vault-backup/kustomization.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../../common/vault-backup
+configMapGenerator:
+  - name: vault-backup
+    options:
+      disableNameSuffixHash: true
+    behavior: merge
+    literals:
+      - VAULT_LOGIN_AUTH_MOUNT=svc.ez.soeren.cloud