# services/maintenance/soteria-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: soteria
  namespace: maintenance
data:
  SOTERIA_BACKUP_DRIVER: longhorn
  SOTERIA_RESTIC_SECRET_NAME: soteria-restic
  SOTERIA_RESTIC_REPOSITORY: s3:https://s3.us-west-004.backblazeb2.com/atlas-soteria/soteria
  SOTERIA_RESTIC_BACKUP_ARGS: --compression auto
  SOTERIA_RESTIC_PRUNE_AFTER_BACKUP: "false"
  SOTERIA_RESTIC_UNLOCK_BEFORE_BACKUP: "false"
  SOTERIA_S3_ENDPOINT: https://s3.us-west-004.backblazeb2.com
  SOTERIA_S3_REGION: us-west-004
  SOTERIA_JOB_NODE_SELECTOR: longhorn-host=true,kubernetes.io/arch=arm64
  SOTERIA_JOB_BACKOFF_LIMIT: "1"
  SOTERIA_JOB_TTL_SECONDS: "259200"
  SOTERIA_JOB_CPU_REQUEST: 100m
  SOTERIA_JOB_CPU_LIMIT: "1"
  SOTERIA_JOB_MEMORY_REQUEST: 256Mi
  SOTERIA_JOB_MEMORY_LIMIT: 4Gi
  SOTERIA_EXCLUDED_STORAGE_CLASSES: local-path
  SOTERIA_EXCLUDED_PVCS: jenkins/jenkins-dind-cache
  SOTERIA_LONGHORN_URL: http://longhorn-backend.longhorn-system.svc:9500
  SOTERIA_LONGHORN_BACKUP_MODE: incremental
  SOTERIA_AUTH_REQUIRED: "true"
  SOTERIA_ALLOWED_GROUPS: admin,maintenance
  SOTERIA_BACKUP_MAX_AGE_HOURS: "24"
  SOTERIA_METRICS_REFRESH_SECONDS: "300"
  SOTERIA_POLICY_EVAL_SECONDS: "1800"
  SOTERIA_POLICY_BACKUPS_PER_CYCLE: "1"
  SOTERIA_B2_ENABLED: "true"
  SOTERIA_B2_SECRET_NAMESPACE: maintenance
  SOTERIA_B2_SECRET_NAME: soteria-restic
  SOTERIA_B2_ACCESS_KEY_FIELD: AWS_ACCESS_KEY_ID
  SOTERIA_B2_SECRET_KEY_FIELD: AWS_SECRET_ACCESS_KEY
  SOTERIA_B2_ENDPOINT: https://s3.us-west-004.backblazeb2.com
  SOTERIA_B2_REGION: us-west-004
  SOTERIA_B2_BUCKETS: atlas-soteria
  SOTERIA_B2_ENDPOINT_FIELD: AWS_ENDPOINTS
  SOTERIA_B2_SCAN_INTERVAL_SECONDS: "900"
  SOTERIA_B2_SCAN_TIMEOUT_SECONDS: "120"