maintenance: pivot soteria to longhorn

services/maintenance/secretproviderclass.yaml

@@ -13,27 +13,9 @@ spec:
       - objectName: "harbor-pull__dockerconfigjson"
         secretPath: "kv/data/atlas/shared/harbor-pull"
         secretKey: "dockerconfigjson"
-      - objectName: "soteria_restic__AWS_ACCESS_KEY_ID"
-        secretPath: "kv/data/atlas/maintenance/soteria-restic"
-        secretKey: "AWS_ACCESS_KEY_ID"
-      - objectName: "soteria_restic__AWS_SECRET_ACCESS_KEY"
-        secretPath: "kv/data/atlas/maintenance/soteria-restic"
-        secretKey: "AWS_SECRET_ACCESS_KEY"
-      - objectName: "soteria_restic__RESTIC_PASSWORD"
-        secretPath: "kv/data/atlas/maintenance/soteria-restic"
-        secretKey: "RESTIC_PASSWORD"
   secretObjects:
     - secretName: harbor-regcred
       type: kubernetes.io/dockerconfigjson
       data:
         - objectName: harbor-pull__dockerconfigjson
           key: .dockerconfigjson
-    - secretName: soteria-restic
-      type: Opaque
-      data:
-        - objectName: soteria_restic__AWS_ACCESS_KEY_ID
-          key: AWS_ACCESS_KEY_ID
-        - objectName: soteria_restic__AWS_SECRET_ACCESS_KEY
-          key: AWS_SECRET_ACCESS_KEY
-        - objectName: soteria_restic__RESTIC_PASSWORD
-          key: RESTIC_PASSWORD

services/maintenance/soteria-configmap.yaml

@@ -8,8 +8,3 @@ data:
   SOTERIA_BACKUP_DRIVER: "longhorn"
   SOTERIA_LONGHORN_URL: "http://longhorn-backend.longhorn-system.svc:9500"
   SOTERIA_LONGHORN_BACKUP_MODE: "incremental"
-  SOTERIA_RESTIC_REPOSITORY: "s3:s3.us-west-004.backblazeb2.com/atlas-soteria"
-  SOTERIA_S3_ENDPOINT: "s3.us-west-004.backblazeb2.com"
-  SOTERIA_S3_REGION: "us-west-004"
-  SOTERIA_RESTIC_BACKUP_ARGS: ""
-  SOTERIA_RESTIC_FORGET_ARGS: ""

services/maintenance/soteria-deployment.yaml

@@ -44,15 +44,6 @@ spec:
           envFrom:
             - configMapRef:
                 name: soteria
-          env:
-            - name: SOTERIA_SECRET_NAMESPACE
-              value: "maintenance"
-            - name: SOTERIA_RESTIC_SECRET_NAME
-              value: "soteria-restic"
-            - name: SOTERIA_JOB_TTL_SECONDS
-              value: "86400"
-            - name: SOTERIA_JOB_NODE_SELECTOR
-              value: "kubernetes.io/arch=arm64,node-role.kubernetes.io/worker=true"
           livenessProbe:
             httpGet:
               path: /healthz

services/maintenance/soteria-rbac.yaml

@@ -4,15 +4,9 @@ kind: ClusterRole
 metadata:
   name: soteria
 rules:
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get", "list", "create", "update", "delete"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims", "persistentvolumes"]
     verbs: ["get", "list"]
-  - apiGroups: ["batch"]
-    resources: ["jobs"]
-    verbs: ["get", "list", "create"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding