(fleet/k8up) add k8up deployment

Author: badenerb

fleet/lib/k8up-crds/fleet.yaml

@@ -0,0 +1,13 @@
+---
+defaultNamespace: k8up
+namespaceLabels:
+  lsst.io/discover: "true"
+  k8up-enabled: "true"
+labels:
+  bundle: &name k8up-crds
+helm:
+  releaseName: *name
+  takeOwnership: true
+  force: true
+  timeoutSeconds: 60
+  waitForJobs: true

fleet/lib/k8up-crds/k8up-crds.yaml

@@ -0,0 +1,16 @@
+labels:
+  bundle: &name k8up-post
+dependsOn:
+  - selector:
+      matchLabels:
+        bundle: k8up
+targetCustomizations:
+  - name: ruka
+    clusterSelector:
+      matchExpressions:
+        - key: management.cattle.io/cluster-display-name
+          operator: In
+          values:
+            - ruka
+    kustomize:
+      dir: overlays/ruka

fleet/lib/k8up-post/fleet.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: k8up.io/v1
+kind: Schedule
+metadata:
+  name: schedule-test
+  namespace: nexus
+spec:
+  backend:
+    s3:
+      endpoint: s3.gaw.ls.lsst.org
+      bucket: ruka-k8up
+      accessKeyIDSecretRef:
+        name: k8up-s3-credentials
+        key: access_key
+      secretAccessKeySecretRef:
+        name: k8up-s3-credentials
+        key: secret_key
+    repoPasswordSecretRef:
+      name: k8up-s3-credentials
+      key: restic_password
+  backup:
+    schedule: 0 2 * * *
+    failedJobsHistoryLimit: 2
+    successfulJobsHistoryLimit: 2
+  prune:
+    schedule: 0 1 * * 0
+    retention:
+      keepLast: 10

fleet/lib/k8up-post/overlays/ruka/backup-namespace.yaml

@@ -0,0 +1,2 @@
+resources:
+  - backup-namespace.yaml

fleet/lib/k8up-post/overlays/ruka/kustomization.yaml

@@ -0,0 +1,30 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterExternalSecret
+metadata:
+  name: k8up-credentials
+spec:
+  externalSecretName: k8up-s3-credentials
+  refreshTime: 1m
+  namespaceSelector:
+    matchLabels:
+      k8up-enabled: "true"
+  externalSecretSpec:
+    secretStoreRef:
+      kind: ClusterSecretStore
+      name: onepassword
+    target:
+      name: k8up-s3-credentials
+      creationPolicy: Owner
+    data:
+      - secretKey: access_key
+        remoteRef:
+          key: k8up-credentials
+          property: access_key
+      - secretKey: secret_key
+        remoteRef:
+          key: k8up-credentials
+          property: secret_key
+      - secretKey: restic_password
+        remoteRef:
+          key: k8up-credentials
+          property: restic_password

fleet/lib/k8up-pre/clusterexternal-secret-k8up.yaml

@@ -0,0 +1,11 @@
+---
+defaultNamespace: k8up
+labels:
+  bundle: &name k8up-pre
+namespaceLabels:
+  lsst.io/discover: "true"
+  k8up-enabled: "true"
+helm:
+  releaseName: *name
+  timeoutSeconds: 60
+  waitForJobs: true

fleet/lib/k8up-pre/fleet.yaml

@@ -0,0 +1,32 @@
+---
+defaultNamespace: &name k8up
+namespaceLabels:
+  lsst.io/discover: "true"
+  k8up-enabled: "true"
+labels:
+  bundle: *name
+dependsOn:
+  - selector:
+      matchLabels:
+        bundle: k8up-pre
+  - selector:
+      matchLabels:
+        bundle: k8up-crds
+helm:
+  chart: *name
+  releaseName: *name
+  repo: https://k8up-io.github.io/k8up
+  version: 4.8.4
+  timeoutSeconds: 60
+  waitForJobs: true
+targetCustomizations:
+  - name: ruka
+    clusterSelector:
+      matchExpressions:
+        - key: management.cattle.io/cluster-display-name
+          operator: In
+          values:
+            - ruka
+    helm:
+      valuesFiles:
+        - overlays/ruka/values.yaml

fleet/lib/k8up/fleet.yaml

@@ -0,0 +1,34 @@
+k8up:
+  envVars:
+    - name: BACKUP_S3_ENDPOINT
+      value: s3.gaw.ls.lsst.org
+    - name: BACKUP_GLOBALACCESSKEYID
+      valueFrom:
+        secretKeyRef:
+          name: k8up-s3-credentials
+          key: access_key
+    - name: BACKUP_GLOBALSECRETACCESSKEY
+      valueFrom:
+        secretKeyRef:
+          name: k8up-s3-credentials
+          key: secret_key
+    - name: RESTIC_PASSWORD
+      valueFrom:
+        secretKeyRef:
+          name: k8up-s3-credentials
+          key: restic_password
+
+  timezone: America/Santiago
+
+resources:
+  limits:
+    memory: 2Gi
+  requests:
+    cpu: 1
+    memory: 1Gi
+
+metrics:
+  serviceMonitor:
+    enabled: true
+    additionalLabels:
+      lsst.io/monitor: "true"

fleet/lib/k8up/overlays/ruka/values.yaml

@@ -0,0 +1 @@
+../../../../lib/k8up