Ronni Baslund
a27c238c76
ci / typecheck (map[dir:apps/booking name:booking]) (push) Has been cancelled
ci / typecheck (map[dir:apps/portal name:portal]) (push) Has been cancelled
ci / typecheck (map[dir:apps/website name:website]) (push) Has been cancelled
ci / typecheck (map[dir:services/platform-api name:platform-api]) (push) Has been cancelled
ci / test (push) Has been cancelled
pg_dumpall (all Postgres DBs + roles) and mongodump (all Mongo DBs) write gzipped dumps to the hostPath /opt/dezky-backup/dumps at 02:50/02:52 UTC, which the host Restic job (03:20) ships to the Storage Box. Each keeps the last 7 local dumps; Restic holds the real off-box retention. - pods run as root (hostPath dir is root-owned, as is the host Restic reader) - mongo job uses bash (mongo:7 /bin/sh is dash → no pipefail) - creds from postgres-secret / mongo-secret via secretKeyRef Verified: both jobs Complete, dumps present on the host (postgres-all ~2.2MB w/ Authentik data, mongo archive).
14 lines
360 B
YAML
14 lines
360 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: dezky-data
|
|
|
|
# Non-secret resources only. Real secrets (secrets.example.yaml) are applied
|
|
# out-of-band and deliberately NOT listed here — same pattern as apps/.
|
|
resources:
|
|
- namespace.yaml
|
|
- postgres-init.yaml
|
|
- postgres.yaml
|
|
- mongodb.yaml
|
|
- redis.yaml
|
|
- db-backup.yaml
|