From 4fb0b371ffe99d4ac3ab89594a9f96553acb2327 Mon Sep 17 00:00:00 2001 From: Brad Stein Date: Mon, 13 Apr 2026 02:14:39 -0300 Subject: [PATCH] maintenance(soteria): switch to encrypted restic backups --- services/maintenance/soteria-configmap.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/services/maintenance/soteria-configmap.yaml b/services/maintenance/soteria-configmap.yaml index 3c300b97..6bcf7ee9 100644 --- a/services/maintenance/soteria-configmap.yaml +++ b/services/maintenance/soteria-configmap.yaml @@ -5,7 +5,12 @@ metadata: name: soteria namespace: maintenance data: - SOTERIA_BACKUP_DRIVER: longhorn + SOTERIA_BACKUP_DRIVER: restic + SOTERIA_RESTIC_SECRET_NAME: soteria-restic + SOTERIA_RESTIC_REPOSITORY: s3:https://s3.us-west-004.backblazeb2.com/atlas-soteria/soteria + SOTERIA_RESTIC_BACKUP_ARGS: --compression auto + SOTERIA_S3_ENDPOINT: https://s3.us-west-004.backblazeb2.com + SOTERIA_S3_REGION: us-west-004 SOTERIA_LONGHORN_URL: http://longhorn-backend.longhorn-system.svc:9500 SOTERIA_LONGHORN_BACKUP_MODE: incremental SOTERIA_AUTH_REQUIRED: "true" @@ -13,6 +18,9 @@ data: SOTERIA_BACKUP_MAX_AGE_HOURS: "24" SOTERIA_METRICS_REFRESH_SECONDS: "300" SOTERIA_B2_ENABLED: "true" + SOTERIA_B2_ENDPOINT: https://s3.us-west-004.backblazeb2.com + SOTERIA_B2_REGION: us-west-004 + SOTERIA_B2_BUCKETS: atlas-soteria SOTERIA_B2_SECRET_NAMESPACE: maintenance SOTERIA_B2_SECRET_NAME: soteria-restic SOTERIA_B2_ACCESS_KEY_FIELD: AWS_ACCESS_KEY_ID