feat: add backup infrastructure (CronJobs, PVC, Longhorn RecurringJobs)

deployments/backups/longhorn-recurring-jobs.yaml

@@ -0,0 +1,25 @@
+apiVersion: longhorn.io/v1beta2
+kind: RecurringJob
+metadata:
+  name: daily-snapshot
+  namespace: longhorn-system
+spec:
+  cron: "0 1 * * *"
+  task: snapshot
+  retain: 7
+  concurrency: 2
+  labels:
+    backup-tier: daily
+---
+apiVersion: longhorn.io/v1beta2
+kind: RecurringJob
+metadata:
+  name: weekly-backup
+  namespace: longhorn-system
+spec:
+  cron: "0 3 * * 0"
+  task: backup
+  retain: 4
+  concurrency: 1
+  labels:
+    backup-tier: weekly

deployments/backups/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: backups
+  labels:
+    app.kubernetes.io/managed-by: argocd

deployments/backups/pelican-pg-backup-cronjob.yaml

@@ -23,17 +23,14 @@ spec:
                       name: pelican-pg-backup-credentials
                       key: password
                 - name: PGHOST
-                  value: postgres.pelican.svc.cluster.local
+                  value: postgresql.pelican.svc.cluster.local
                 - name: PGUSER
                   valueFrom:
                     secretKeyRef:
                       name: pelican-pg-backup-credentials
                       key: username
                 - name: PGDATABASE
-                  valueFrom:
-                    secretKeyRef:
-                      name: pelican-pg-backup-credentials
-                      key: database
+                  value: panel
               command:
                 - /bin/sh
                 - -c
@@ -59,4 +56,4 @@ spec:
           volumes:
             - name: backup-storage
               persistentVolumeClaim:
-                claimName: backup-storage
+                claimName: backup-storage

deployments/backups/pelican-pg-externalsecret.yaml

@@ -0,0 +1,22 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: pelican-pg-backup-credentials
+  namespace: backups
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: pelican-pg-backup-credentials
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: Talos Cluster/pelican/panel/db
+        property: DB_USER
+    - secretKey: password
+      remoteRef:
+        key: Talos Cluster/pelican/panel/db
+        property: DB_PASSWORD

deployments/backups/pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: backup-storage
+  namespace: backups
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 50Gi