feat(infra): nightly DB-dump CronJobs feeding the Restic backup · a27c238c76 - dezky

feat(infra): nightly DB-dump CronJobs feeding the Restic backup

ci / typecheck (map[dir:apps/booking name:booking]) (push) Has been cancelled

Details

ci / typecheck (map[dir:apps/portal name:portal]) (push) Has been cancelled

Details

ci / typecheck (map[dir:apps/website name:website]) (push) Has been cancelled

Details

ci / typecheck (map[dir:services/platform-api name:platform-api]) (push) Has been cancelled

Details

ci / test (push) Has been cancelled

Details

pg_dumpall (all Postgres DBs + roles) and mongodump (all Mongo DBs) write
gzipped dumps to the hostPath /opt/dezky-backup/dumps at 02:50/02:52 UTC, which
the host Restic job (03:20) ships to the Storage Box. Each keeps the last 7
local dumps; Restic holds the real off-box retention.

- pods run as root (hostPath dir is root-owned, as is the host Restic reader)
- mongo job uses bash (mongo:7 /bin/sh is dash → no pipefail)
- creds from postgres-secret / mongo-secret via secretKeyRef

Verified: both jobs Complete, dumps present on the host
(postgres-all ~2.2MB w/ Authentik data, mongo archive).

This commit is contained in:

Ronni Baslund

2026-06-08 21:55:14 +02:00

parent 861212831d

commit a27c238c76

2 changed files with 107 additions and 0 deletions

									
										infrastructure/production/fleet/data/kustomization.yaml
									
		+1
		
												View File
												
				@@ -10,3 +10,4 @@ resources:

				  - postgres.yaml

				  - mongodb.yaml

				  - redis.yaml

				  - db-backup.yaml