(k8up/fleet.yaml) add k8up fleet and values

Author: badenerb

fleet/lib/k8up-crds/fleet.yaml

@@ -0,0 +1,12 @@
+---
+defaultNamespace: k8up
+namespaceLabels:
+  lsst.io/discover: "true"
+labels:
+  bundle: &name k8up-crds
+helm:
+  releaseName: *name
+  takeOwnership: true
+  force: true
+  timeoutSeconds: 60
+  waitForJobs: true

fleet/lib/k8up-crds/k8up-crds.yaml

@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: k8up-s3-credentials
+  namespace: k8up
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword
+  target:
+    name: k8up-s3-credentials
+    creationPolicy: Owner
+  data:
+    - secretKey: access-key-id
+      remoteRef:
+        key: k8up-credentials
+        property: access_key
+    - secretKey: secret-access-key
+      remoteRef:
+        key: k8up-credentials
+        property: secret_key
+    - secretKey: restic_password
+      remoteRef:
+        key: k8up-credentials
+        property: restic_password

fleet/lib/k8up-pre/external-secret-k8up.yaml

@@ -0,0 +1,10 @@
+---
+defaultNamespace: k8up
+labels:
+  bundle: &name k8up-pre
+namespaceLabels:
+  lsst.io/discover: "true"
+helm:
+  releaseName: *name
+  timeoutSeconds: 60
+  waitForJobs: true

fleet/lib/k8up-pre/fleet.yaml

@@ -0,0 +1,22 @@
+---
+defaultNamespace: &name k8up
+namespaceLabels:
+  lsst.io/discover: "true"
+labels:
+  bundle: *name
+helm:
+  chart: *name
+  releaseName: *name
+  repo: https://k8up-io.github.io/k8up
+  version: 4.8.4
+  timeoutSeconds: 60
+  waitForJobs: true
+  valuesFiles:
+    - values.yaml
+dependsOn:
+  - selector:
+      matchLabels:
+        bundle: k8up-pre
+  - selector:
+      matchLabels:
+        bundle: k8up-crds

fleet/lib/k8up/fleet.yaml

@@ -0,0 +1,34 @@
+k8up:
+  envVars:
+    - name: BACKUP_S3_ENDPOINT
+      value: s3.ruka.dev.lsst.org
+    - name: BACKUP_GLOBALACCESSKEYID
+      valueFrom:
+        secretKeyRef:
+          name: k8up-s3-credentials
+          key: access-key-id
+    - name: BACKUP_GLOBALSECRETACCESSKEY
+      valueFrom:
+        secretKeyRef:
+          name: k8up-s3-credentials
+          key: secret-access-key
+    - name: RESTIC_PASSWORD
+      valueFrom:
+        secretKeyRef:
+          name: k8up-s3-credentials
+          key: restic_password
+
+  timezone: America/Santiago
+
+resources:
+  limits:
+    memory: 2Gi
+  requests:
+    cpu: 1
+    memory: 1Gi
+
+metrics:
+  serviceMonitor:
+    enabled: true
+    additionalLabels:
+      lsst.io/monitor: "true"

fleet/lib/k8up/values.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephObjectStoreUser
+metadata:
+  name: k8up
+  namespace: rook-ceph
+spec:
+  store: lfa
+  clusterNamespace: rook-ceph
+  quotas:
+    maxBuckets: 1

fleet/lib/rook-ceph-conf/charts/ruka/templates/cephobjectstoreusers-k8up.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: &name rubinobs-k8up-dev
+  namespace: rook-ceph
+spec:
+  bucketName: *name
+  storageClassName: lfa
+  additionalConfig:
+    bucketOwner: k8up
+    bucketMaxSize: 10Ti
+    bucketLifecycle: |
+      {
+        "Rules": [
+          {
+            "ID": "AbortIncompleteMultipartUploads",
+            "Status": "Enabled",
+            "Prefix": "",
+            "AbortIncompleteMultipartUpload": {
+              "DaysAfterInitiation": 1
+            }
+          }
+        ]
+      }

fleet/lib/rook-ceph-conf/charts/ruka/templates/obc-k8up.yaml

@@ -0,0 +1 @@
+../../../../lib/k8up

fleet/s/dev/c/ruka/k8up

@@ -0,0 +1 @@
+../../../../lib/k8up-crds