Automated upload for edp.buildth.ing

otc/edp.buildth.ing/stacks/forgejo/forgejo-server/manifests/forgejo-s3-backup-cronjob.yaml

@@ -5,57 +5,69 @@ metadata:
   namespace: gitea
 spec:
   schedule: "0 1 * * *"
+  concurrencyPolicy: "Forbid"
+  successfulJobsHistoryLimit: 5
+  failedJobsHistoryLimit: 5
+  startingDeadlineSeconds: 600 # 10 minutes
   jobTemplate:
     spec:
+      # 60 min until backup - 10 min start - (backoffLimit * activeDeadlineSeconds) - some time sync buffer
+      activeDeadlineSeconds: 1350
+      backoffLimit: 2
+      ttlSecondsAfterFinished: 259200 #
       template:
         spec:
           containers:
-          - name: rclone
-            image: rclone/rclone:1.70
-            imagePullPolicy: IfNotPresent
-            env:
-            - name: SOURCE_BUCKET
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-cloud-credentials
-                  key: bucket-name
-            - name: AWS_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-cloud-credentials
-                  key: access-key
-            - name: AWS_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-cloud-credentials
-                  key: secret-key
-            volumeMounts:
-            - name: rclone-config
-              mountPath: /config/rclone
-              readOnly: true
-            - name: backup-dir
-              mountPath: /backup
-              readOnly: false
-            command:
-            - /bin/sh
-            - -c
-            - |
-              rclone sync source:/${SOURCE_BUCKET}/packages /backup -v --ignore-checksum
+            - name: rclone
+              image: rclone/rclone:1.70
+              imagePullPolicy: IfNotPresent
+              env:
+                - name: SOURCE_BUCKET
+                  valueFrom:
+                    secretKeyRef:
+                      name: forgejo-cloud-credentials
+                      key: bucket-name
+                - name: AWS_ACCESS_KEY_ID
+                  valueFrom:
+                    secretKeyRef:
+                      name: forgejo-cloud-credentials
+                      key: access-key
+                - name: AWS_SECRET_ACCESS_KEY
+                  valueFrom:
+                    secretKeyRef:
+                      name: forgejo-cloud-credentials
+                      key: secret-key
+              volumeMounts:
+                - name: rclone-config
+                  mountPath: /config/rclone
+                  readOnly: true
+                - name: backup-dir
+                  mountPath: /backup
+                  readOnly: false
+              command:
+                - /bin/sh
+                - -c
+                - |
+                  rclone sync source:/${SOURCE_BUCKET} /backup -v --ignore-checksum
           restartPolicy: OnFailure
           volumes:
-          - name: rclone-config
-            secret:
-              secretName: forgejo-s3-backup
-          - name: backup-dir
-            persistentVolumeClaim:
-              claimName: s3-backup
+            - name: rclone-config
+              secret:
+                secretName: forgejo-s3-backup
+            - name: backup-dir
+              persistentVolumeClaim:
+                claimName: s3-backup
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: s3-backup
   namespace: gitea
+  annotations:
+    everest.io/disk-volume-type: SATA
+    everest.io/crypt-key-id: { { { .Env.PVC_KMS_KEY_ID } } }
 spec:
+  storageClassName: csi-disk
   accessModes:
     - ReadWriteOnce
   resources:

otc/edp.buildth.ing/stacks/forgejo/forgejo-server/values.yaml

@@ -17,8 +17,10 @@ postgresql-ha:
 persistence:
   enabled: true
   size: 200Gi
+  storageClass: csi-disk
   annotations:
     everest.io/crypt-key-id: 7032bf53-33aa-4bfa-bca2-052df19f6225
+    everest.io/disk-volume-type: GPSSD
 
 test:
   enabled: false