0da9e4c82d
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/, repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/) - Retire oneoffs/ directories across services - Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding - Reorganize scripts/ into ops/, render/, sync/, manual-tests/ - Add Makefile with render/validate/test/flux targets and repo-structure tests - Update flux-system application CRs to the new paths - Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror) - Refresh knowledge catalogs, dashboards, vmalert rules, quality contract Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
44 lines
1.7 KiB
YAML
44 lines
1.7 KiB
YAML
# services/maintenance/apps/soteria-configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: soteria
|
|
namespace: maintenance
|
|
data:
|
|
SOTERIA_BACKUP_DRIVER: longhorn
|
|
SOTERIA_RESTIC_SECRET_NAME: soteria-restic
|
|
SOTERIA_RESTIC_REPOSITORY: s3:https://s3.us-west-004.backblazeb2.com/atlas-soteria/soteria
|
|
SOTERIA_RESTIC_BACKUP_ARGS: --compression auto
|
|
SOTERIA_RESTIC_PRUNE_AFTER_BACKUP: "false"
|
|
SOTERIA_RESTIC_UNLOCK_BEFORE_BACKUP: "false"
|
|
SOTERIA_S3_ENDPOINT: https://s3.us-west-004.backblazeb2.com
|
|
SOTERIA_S3_REGION: us-west-004
|
|
SOTERIA_JOB_NODE_SELECTOR: longhorn-host=true,kubernetes.io/arch=arm64
|
|
SOTERIA_JOB_BACKOFF_LIMIT: "1"
|
|
SOTERIA_JOB_TTL_SECONDS: "259200"
|
|
SOTERIA_JOB_CPU_REQUEST: 100m
|
|
SOTERIA_JOB_CPU_LIMIT: "1"
|
|
SOTERIA_JOB_MEMORY_REQUEST: 256Mi
|
|
SOTERIA_JOB_MEMORY_LIMIT: 4Gi
|
|
SOTERIA_EXCLUDED_STORAGE_CLASSES: local-path
|
|
SOTERIA_EXCLUDED_PVCS: jenkins/jenkins-dind-cache
|
|
SOTERIA_LONGHORN_URL: http://longhorn-backend.longhorn-system.svc:9500
|
|
SOTERIA_LONGHORN_BACKUP_MODE: incremental
|
|
SOTERIA_AUTH_REQUIRED: "true"
|
|
SOTERIA_ALLOWED_GROUPS: admin,maintenance
|
|
SOTERIA_BACKUP_MAX_AGE_HOURS: "24"
|
|
SOTERIA_METRICS_REFRESH_SECONDS: "300"
|
|
SOTERIA_POLICY_EVAL_SECONDS: "1800"
|
|
SOTERIA_POLICY_BACKUPS_PER_CYCLE: "1"
|
|
SOTERIA_B2_ENABLED: "true"
|
|
SOTERIA_B2_SECRET_NAMESPACE: maintenance
|
|
SOTERIA_B2_SECRET_NAME: soteria-restic
|
|
SOTERIA_B2_ACCESS_KEY_FIELD: AWS_ACCESS_KEY_ID
|
|
SOTERIA_B2_SECRET_KEY_FIELD: AWS_SECRET_ACCESS_KEY
|
|
SOTERIA_B2_ENDPOINT: https://s3.us-west-004.backblazeb2.com
|
|
SOTERIA_B2_REGION: us-west-004
|
|
SOTERIA_B2_BUCKETS: atlas-soteria
|
|
SOTERIA_B2_ENDPOINT_FIELD: AWS_ENDPOINTS
|
|
SOTERIA_B2_SCAN_INTERVAL_SECONDS: "900"
|
|
SOTERIA_B2_SCAN_TIMEOUT_SECONDS: "120"
|