titan-iac/services/maintenance/soteria-configmap.yaml

44 lines
1.7 KiB
YAML

# services/maintenance/soteria-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: soteria
namespace: maintenance
data:
SOTERIA_BACKUP_DRIVER: longhorn
SOTERIA_RESTIC_SECRET_NAME: soteria-restic
SOTERIA_RESTIC_REPOSITORY: s3:https://s3.us-west-004.backblazeb2.com/atlas-soteria/soteria
SOTERIA_RESTIC_BACKUP_ARGS: --compression auto
SOTERIA_RESTIC_PRUNE_AFTER_BACKUP: "false"
SOTERIA_RESTIC_UNLOCK_BEFORE_BACKUP: "false"
SOTERIA_S3_ENDPOINT: https://s3.us-west-004.backblazeb2.com
SOTERIA_S3_REGION: us-west-004
SOTERIA_JOB_NODE_SELECTOR: longhorn-host=true,kubernetes.io/arch=arm64
SOTERIA_JOB_BACKOFF_LIMIT: "1"
SOTERIA_JOB_TTL_SECONDS: "259200"
SOTERIA_JOB_CPU_REQUEST: 100m
SOTERIA_JOB_CPU_LIMIT: "1"
SOTERIA_JOB_MEMORY_REQUEST: 256Mi
SOTERIA_JOB_MEMORY_LIMIT: 4Gi
SOTERIA_EXCLUDED_STORAGE_CLASSES: local-path
SOTERIA_EXCLUDED_PVCS: jenkins/jenkins-dind-cache
SOTERIA_LONGHORN_URL: http://longhorn-backend.longhorn-system.svc:9500
SOTERIA_LONGHORN_BACKUP_MODE: incremental
SOTERIA_AUTH_REQUIRED: "true"
SOTERIA_ALLOWED_GROUPS: admin,maintenance
SOTERIA_BACKUP_MAX_AGE_HOURS: "24"
SOTERIA_METRICS_REFRESH_SECONDS: "300"
SOTERIA_POLICY_EVAL_SECONDS: "1800"
SOTERIA_POLICY_BACKUPS_PER_CYCLE: "1"
SOTERIA_B2_ENABLED: "true"
SOTERIA_B2_SECRET_NAMESPACE: maintenance
SOTERIA_B2_SECRET_NAME: soteria-restic
SOTERIA_B2_ACCESS_KEY_FIELD: AWS_ACCESS_KEY_ID
SOTERIA_B2_SECRET_KEY_FIELD: AWS_SECRET_ACCESS_KEY
SOTERIA_B2_ENDPOINT: https://s3.us-west-004.backblazeb2.com
SOTERIA_B2_REGION: us-west-004
SOTERIA_B2_BUCKETS: atlas-soteria
SOTERIA_B2_ENDPOINT_FIELD: AWS_ENDPOINTS
SOTERIA_B2_SCAN_INTERVAL_SECONDS: "900"
SOTERIA_B2_SCAN_TIMEOUT_SECONDS: "120"