mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 15:44:33 +00:00
5cd43c873c
- separate default app and db cluster contexts (knoe-dev-0 and knoe-cnpg-0) across actions, ops flows, and installer config\n- update CNPG placement and GKE manifests to keep PostgreSQL on the db cluster while app services stay on the app cluster\n- add GCS-backed Barman ObjectStore manifest and cross-cluster Garage patch workflow\n- refresh UI cluster/database/service screens and monitoring wiring for dual-cluster operation\n- add reset/patch scripts, db context selection test coverage, and architecture/network documentation updates Co-authored-by: Junie <junie@jetbrains.com>
28 lines
859 B
YAML
28 lines
859 B
YAML
---
|
|
# Kubernetes ServiceAccount bound to the GCP service account via Workload Identity.
|
|
# The CNPG operator uses this SA to authenticate against GCS without a static key.
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: cnpg-backup-sa
|
|
namespace: knoe-db-0
|
|
annotations:
|
|
# Set by etc/init_cnpg_gke.sh — substituted at deploy time
|
|
iam.gke.io/gcp-service-account: "cnpg-backup@${GCP_PROJECT_ID}.iam.gserviceaccount.com"
|
|
|
|
---
|
|
# Daily scheduled backup at 02:00 UTC.
|
|
# Backup data lands in gs://knoe-0-backups/ (WAL is streamed continuously by CNPG).
|
|
apiVersion: postgresql.cnpg.io/v1
|
|
kind: ScheduledBackup
|
|
metadata:
|
|
name: knoe-db-daily
|
|
namespace: knoe-db-0
|
|
spec:
|
|
schedule: "0 0 2 * * *" # 6-field CNPG cron: sec min hour dom mon dow
|
|
backupOwnerReference: self
|
|
cluster:
|
|
name: knoe-db
|
|
method: barmanObjectStore
|
|
immediate: false
|