# knoe-db barman ObjectStore — k3s/prole.org
#
# Backup pipeline:
#   CNPG (WAL archive + daily basebackup)
#     → Garage S3 (local, knoe-system namespace, s3://knoe-db-backups/)
#     → [TODO] rclone CronJob syncs Garage → AWS S3 bucket (off-site durability)
#
# The rclone sync job needs:
#   - AWS S3 bucket + IAM credentials (secret: knoe-db-barman-s3-aws)
#   - CronJob in knoe-db namespace running rclone sync on the same schedule
#   - Once in place, 30d retention here + AWS lifecycle policy for long-term cold storage
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
  name: knoe-db-barman-objectstore
  namespace: knoe-db
spec:
  retentionPolicy: 30d
  configuration:
    destinationPath: s3://knoe-db-backups/
    endpointURL: http://garage.knoe-system.svc.cluster.local:3900
    s3Credentials:
      accessKeyId:
        name: knoe-db-barman-s3
        key: ACCESS_KEY_ID
      secretAccessKey:
        name: knoe-db-barman-s3
        key: SECRET_ACCESS_KEY
      region:
        name: knoe-db-barman-s3
        key: REGION
    wal:
      compression: gzip
    data:
      compression: gzip