Fascinated/homelab
1
1
Fork 0
Code Issues 1 Pull Requests 9 Actions Activity

add backups

Browse Source
This commit is contained in:
Lee 2024-09-23 03:17:20 +01:00
parent 0dc125a84e
commit cd076bd222
6 changed files with 1043 additions and 979 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
infrastructure/backup/backup-task-template.yaml Normal file
View File

@ -0,0 +1,27 @@
---
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: kubernetes-backups
namespace: backups
spec:
# The PVC to be backed up
sourcePVC: set me
trigger:
# Take a backup every hour
schedule: "* * * * *"
restic:
# Prune the repository (repack to free space) every 2 weeks
pruneIntervalDays: 14
# Name of the Secret with the connection information
repository: restic-config
# Retention policy for backups
retain:
hourly: 6
daily: 5
weekly: 4
monthly: 2
yearly: 1
# Clone the source volume prior to taking a backup to ensure a
# point-in-time image.
copyMethod: Clone

7
infrastructure/backup/kustomization.yaml Normal file
View File

@ -0,0 +1,7 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: backups
resources:
- namespace.yaml
- volsync.yaml

5
infrastructure/backup/namespace.yaml Normal file
View File

@ -0,0 +1,5 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: backups

26
infrastructure/backup/volsync.yaml Normal file
View File

@ -0,0 +1,26 @@
---
apiVersion: source.toolkit.fluxcd.io/v1
kind: HelmRepository
metadata:
name: volsync-repository
namespace: backups
spec:
interval: 12h
url: https://backube.github.io/helm-charts/
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: volsync
namespace: backups
spec:
interval: 30m
chart:
spec:
chart: volsync
version: "0.10.0"
sourceRef:
kind: HelmRepository
name: volsync
namespace: backups
interval: 12h

11
talos-cluster/controlplane.yaml
View File

@ -18,7 +18,7 @@ machine:
# Used to provide additional options to the kubelet. # Used to provide additional options to the kubelet.
kubelet: kubelet:
image: ghcr.io/siderolabs/kubelet:v1.31.1 # The `image` field is an optional reference to an alternative kubelet image. image: ghcr.io/siderolabs/kubelet:v1.30.3 # The `image` field is an optional reference to an alternative kubelet image.
defaultRuntimeSeccompProfileEnabled: true # Enable container runtime default Seccomp profile. defaultRuntimeSeccompProfileEnabled: true # Enable container runtime default Seccomp profile.
disableManifestsDirectory: true # The `disableManifestsDirectory` field configures the kubelet to get static pod manifests from the /etc/kubernetes/manifests directory. disableManifestsDirectory: true # The `disableManifestsDirectory` field configures the kubelet to get static pod manifests from the /etc/kubernetes/manifests directory.
@ -436,7 +436,7 @@ cluster:
key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlKS1FJQkFBS0NBZ0VBeHVBM05kMDZBT2xET250QWJJbmpYWUU2ak43NFRYVklUcWlOV3UxcmwzMEJJWEExCndob2ttN25oL3VMb1JXRTIweWg0SkRYa2tTMjI5THI3THRCOUE1NG5ETkc4V1NhTW5ldlFacU1oK1VkWXpNOWcKanNjbTBUdUxISWRTdUtXdlgrSlpaWTMwSmxVZ2Y0aDIzUDhMQUg4WnN3b0t1RTFwWHZGZ0gva01WclVrZUtmawppT0VyT2VDWjlnNWIrMEJqd1UxMUQxaHhZdU1iaUJ2azJYVGVmdjFDSnRZcm05WHA0UEo2RFRHQzBOTFh5L0tUCkg0QUR2S1lOdkorZWJDemIza2pRZlc0TW8vd3FFeDI5Zi93eC8xVFV3UGttSWl1WXdYRVBKY3hDb1VOTHhIUnMKRnNhYzlWc1NBWjA2YUFsL1o2a1NJa2VnM0pteUp1OFhBUm5xcS9UOHNSYmsvdEdCNmsrTTltZnh6c2Q0bVJ0UQpuTTJJaU5RaEkrRjY3ZVZLY0NCS21VODlsVnJnTUx0MUJJQzJvUHRlNytlaFVYSUJoQldVd0pFTHlVTDhyZ0dxCmJOczRzTmJSY0F4UnY2a1FwdFh0S241WWpEVlBLOXREOElpZUdJbFA5dFZMYzVSR1grd1BwbW15ODU1aGVVRGEKV1U3NVJVU29LOHFYdjBWYUJ5U2tNVU1tZTNlbmpkUlRMd1FGU25kOXp6WC9NdHM0ajJ3eEgxeDBKWnhsK09qNQpINU1jbExEeFZpUjY1NWV6VU9xdWtYQWlDTzlhN0ZDN1NsVFV1b2xNMzlCUzBLZVFJV2FEODJNeGZJSVU3V3R3CnQwQjBwLzF5MWpmaCs4N28yZkF2SGtHcXFHS0dqeSttSzZ4dkhRK2luYTNVME1FcG4rQlVEa2RzN1ZzQ0F3RUEKQVFLQ0FnRUFwTzh1MnEwdWZiTDIzbmw1WklxMjFjVm5HWTJSd0N1VVhDZk5rNnR6bjU4OFlNNyt4b3VIOE42bwpYd3N3TnRuNDdnYVNIUFhWS2RJUCtjZFlxZXFldzNGV1VYdGdDVSsvTHZselRLdmVjUzZLcHRFVjgxT1hEYytqCi8zVDdWY2VUT3FJdUlkc29zT0hJb2Z3N0YrMHM0cXlHVThYd1BnbDFhaGdrOEY5THJGMXVjZUpMMW5sbnNBaGwKcDNzaExhNnBESmVBamNsN3Y5YzU3aGUwSStTWTRoaUgxRTJxdlFNYmhFT1VsWHlLVVVXTFVzbEsyc1VBVkdRaQo0RnhBdHRZOVFveUEzSVY0VmtlN1hUODgrZmZlUHpQTGZuOGk4UlBYREJjSHlRRXVBVEFlbGo4M3BXdnlvRWwzCkZYK2dBTWhmc1VpMmtWZDJRWDMyRWZRWDBBSCtiRWZ0ei95bzJxR091d09wTW5pZHg5OGcybDRYVGx3Nm5FSVAKVkdIT1ZhdkprSUxGRkpuZFdoYWxneUNVaVVTdmJIaTV4T2JqOUtSMytqQlJaMmR4b3RuTTB6emcrZ0NuV3FlTApJUVdqWU95Tm01bDJLOEcxTUx4VUR0Q1ZXU0J4c1RzRU15NTBZZ05XUlVlODAybmtmTFpsRzNIcW1Bak5MaEJaClBWMlVkbkVpblVWWWk2QlFFc2Fwcy9zK3lKVElWQlI3aEppbExpSDdWcEh1SkxSaEJIb21Db2hCQkpTWlBoZWwKV1lNcEtqVDdxaWM0MnN4Q1Y0d3BCM2VCQStmaElkR09rY1AvSG5jekIvZ3JpMkt5YllFTDhiYlRwRnhoVmJiMgpRLzNUUlU2a0xTSm9aU0QwMVJaVGk2UU1ldmJoTE1rWFRMRFdPN28zelVQZVF3YXFZSUVDZ2dFQkFPRHZ0UDlLClB0Qk5KT0wwcTVkNG9EOEp1ZHJ0V3pTSzA1QzVpOFlJWE5SWldhZEFpTTNxTWF3djdWYmZUYklUdXZaclgwbEEKcC9wRVRRbjJURFdwZ3dRTVQ1bzVmWCtrS2h3Y2xPTXpEVTFFWnVZa3ZiSUI4Sk5NNGxtMlZ6Q0kvYitYdTBXcwpUczJPVjk2MkllMXRFUjhSQnJCVFVKMWdGV3htV2IxZS80UVZGemdNWFFnaTNaejBzUi9ndDBBcjcvVDRDTjJICm1Yc2hnRVJzRjRzQXhEK2RRbXBGL1ExTHVReldjRGNBa0JMV3pQTW1rdk1RcWliRVhmcENZRy8vKzhIVjl3TVAKQjMxd0syUElPODRkNmxiNXV4RFpRbzdVY2VpeTk4d0ZOR3ZOSFZZSmRzTlQyTFN4ME5sMU83Qm1laGtiakdKaQp2ZGkyVFNIRGdpUXJWMWNDZ2dFQkFPSlhMWHE4eDFkTW1lNExhaFNaSWVNTkFsL2hiVGI2NFRiWEdQZnduQmkxCkhrQ1JZSjVVazVmSDRXVTZHc1JyOUlhSzB5aXlyT1VISm0xT25IdUZNWGZES3BYck5uMlB1YTJrVDlDemdNV0oKSS9IUEx0Q04xZlJ1VFVDU21qaWJLY3piOWtySUl6dVFiVElLVmh0bHV5N2xXZmJEYlNJcG52QWNyYklhSWptVAoyT2JXbVk3cEpvYld3azRyZGNueTd6WWIyYkdTbnlUMmRwQWZOTGloVHY5SmpyWnBoYjhHV2ZEMDZUUVVBN29KCno3RFVMSlhNc3VTZW1qNEQrY0RJOFh2emlrbWJDckxTYXpnU2NNQnJTaTdCSUxUWk1XV1BaVjVTQkU3M0VLRHYKU3pxUVZGT2pXV0s3TDk2T1BSQUZ3VytKbWtNUkdkYk1xbWkvL2Z3QmE1MENnZ0VCQUkyOVh1OXppSXRYNFVPRwphODRoKzlCZFA1azk4amYwdHdZK2RWNVBqTGRlcWtqak9KR1Ezc1lpMlVyaG9hTHlIZUVEbmVLWjlIK1dwSGovCms5eEl1YjlHUnE3blJUYTJhcmFXS0JmVzVxM215WFNDZUdxQUlHbWhqQXgrQXdrWmVkUk9OM3JhN2psSFZnV0gKL1c4UVNEYXNVdXV2UkdBMjJLa2JBYmQ3OGtUM3lVN1BNNXhaNUEzd2Z1Q1lpTURPTHdITmZrQ2lIc3ZoTzJOaQpQWitnMXdsQy9rUGJZRzhOWlVrNm96RjFrRlBldVAwTE5KUW56eUJvb3ROOUdpblpRM3BNYXIrcHE4MldiakVOClR1bytIWm02K2U3UENNcmFBZ0ZoTFJhSnZST2xCN1JjZUZMek5kMy9JcHkwNit6blZrOFY5ZXRWVDA0TTZpTzUKZi90c3VEY0NnZ0VBVVVmN1JodHEvcmU4ZzViSHhwUGpiblVxaUNJZEpXUmM0bVBHVEt1MGNzOEFDVEhyMzVBQgozTHpqL1lVclBhU0RFSm5rRUxaeGptSE44KzBLRnZXUytTNDJLZFpwSUJnd0Z1SnQ0MFhERmEwVkltNURvcE44CjVTV0RTcEFiSC83Z3VQZTQ3OHdGa3d0Zm0xdkk1bGZYSzVVamhKRlRyTFFEcHJpMXk4TEV6YWFCZXd4UDR0bHAKZzN5MkZIcFk5MmZ0YmFIOHdGOG1GWkVJck9MMy9PRzR5OGF2b0dRdXFwWHVVTEN5Mm9maGVycXhRaEEvM3ArLwpFb2krWFV6eU1NQTRzRW1hUEtxWDRmWGNtU3RPSUZ1bkxUa2Z0TEpXb2VFb0J3SXZGK2h6cVVlbDNXY2RVVmZVCjdyYklEd1ZIZW15R3RiWlZsb1lhb0YrcFJxckQyKzdxcFFLQ0FRQXR0YUZ4WHM5MnRQVS8vREEzNFNnQzlEdzEKZHpCbk9JR2xuTnV1cVNma3J4QTI1ejZZMEFqV2Z6bGFHMm11NSthaFdnMnpKRnU5U0gzL3p6Vi8zeXVQaGlUOApqaFVPNS90RjgzcmtrZTVUSE9udW5RVFJVN05sQlFvUlM1bGNkcGZXM3FlQTVaV09WR2daVDdlK3RpQXVJd25MCm9NTFYxVitnUnk3V3FTbHRtZGNkSlNNRXZLbXV2TFFFRWV5N01YZE00c21LS013Y05zNHhJd3YzUDFIZkM0RG8KOVJwTkNKWW9ZK3hHSzYrZHA4b0NhL2k0VUttazduQitvUC9iRXB2Y05ydFB2OTd0Z1JaUjQweEZQM3N0YmhLWgp1TVAyODN4TkkwSk42QThoaEFLRjYwSlJnTnk5R2pyU2dCaEpaUWVBZUx2S0s2RGZYbTBocDRZSEZybWUKLS0tLS1FTkQgUlNBIFBSSVZBVEUgS0VZLS0tLS0K key: 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
# API server specific configuration options. # API server specific configuration options.
apiServer: apiServer:
image: registry.k8s.io/kube-apiserver:v1.31.1 # The container image used in the API server manifest. image: registry.k8s.io/kube-apiserver:v1.30.3 # The container image used in the API server manifest.
# Extra certificate subject alternative names for the API server's certificate. # Extra certificate subject alternative names for the API server's certificate.
certSANs: certSANs:
- 10.0.69.162 - 10.0.69.162
@ -468,16 +468,16 @@ cluster:
- level: Metadata - level: Metadata
# Controller manager server specific configuration options. # Controller manager server specific configuration options.
controllerManager: controllerManager:
image: registry.k8s.io/kube-controller-manager:v1.31.1 # The container image used in the controller manager manifest. image: registry.k8s.io/kube-controller-manager:v1.30.3 # The container image used in the controller manager manifest.
# Kube-proxy server-specific configuration options # Kube-proxy server-specific configuration options
proxy: proxy:
image: registry.k8s.io/kube-proxy:v1.31.1 # The container image used in the kube-proxy manifest. image: registry.k8s.io/kube-proxy:v1.30.3 # The container image used in the kube-proxy manifest.
# # Disable kube-proxy deployment on cluster bootstrap. # # Disable kube-proxy deployment on cluster bootstrap.
# disabled: false # disabled: false
# Scheduler server specific configuration options. # Scheduler server specific configuration options.
scheduler: scheduler:
image: registry.k8s.io/kube-scheduler:v1.31.1 # The container image used in the scheduler manifest. image: registry.k8s.io/kube-scheduler:v1.30.3 # The container image used in the scheduler manifest.
# Configures cluster member discovery. # Configures cluster member discovery.
discovery: discovery:
enabled: true # Enable the cluster membership discovery feature. enabled: true # Enable the cluster membership discovery feature.
@ -517,7 +517,6 @@ cluster:
# metadata: # metadata:
# name: ci # name: ci
# # A key used for the [encryption of secret data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/). # # A key used for the [encryption of secret data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/).
# # Decryption secret example (do not use in production!). # # Decryption secret example (do not use in production!).

2
talos-cluster/worker.yaml
View File

@ -18,7 +18,7 @@ machine:
# Used to provide additional options to the kubelet. # Used to provide additional options to the kubelet.
kubelet: kubelet:
image: ghcr.io/siderolabs/kubelet:v1.31.1 # The `image` field is an optional reference to an alternative kubelet image. image: ghcr.io/siderolabs/kubelet:v1.30.3 # The `image` field is an optional reference to an alternative kubelet image.
defaultRuntimeSeccompProfileEnabled: true # Enable container runtime default Seccomp profile. defaultRuntimeSeccompProfileEnabled: true # Enable container runtime default Seccomp profile.
disableManifestsDirectory: true # The `disableManifestsDirectory` field configures the kubelet to get static pod manifests from the /etc/kubernetes/manifests directory. disableManifestsDirectory: true # The `disableManifestsDirectory` field configures the kubelet to get static pod manifests from the /etc/kubernetes/manifests directory.