add pgbackups

cluster/data/postgres-backup.yaml

@@ -0,0 +1,57 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pgbackups
+  namespace: data
+  labels:
+spec:
+  replicas: 1
+  template:
+    spec:
+      containers:
+        - name: pgbackups
+          image: prodrigestivill/postgres-backup-local:12
+          environment:
+            - name: POSTGRES_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: pgbackups-config
+                  key: postgres-host
+            - name: POSTGRES_DB
+              valueFrom:
+                secretKeyRef:
+                  name: pgbackups-config
+                  key: postgres-db
+            - name: POSTGRES_USER
+              valueFrom:
+                secretKeyRef:
+                  name: pgbackups-config
+                  key: postgres-user
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: pgbackups-config
+                  key: postgres-password
+            - name: POSTGRES_EXTRA_OPTS
+              value: "-Z9 --schema=public --blobs"
+            - name: SCHEDULE
+              value: "@daily"
+            - name: BACKUP_KEEP_DAYS
+              value: "7"
+            - name: BACKUP_KEEP_WEEKS
+              value: "4"
+            - name: BACKUP_KEEP_MONTHS
+              value: "3"
+            - name: HEALTHCHECK_PORT
+              value: "8080"
+          resources:
+            requests:
+              cpu: 150m
+              memory: 256Mi
+          ports:
+            - containerPort: 8080
+      dnsConfig:
+        options:
+          - name: ndots
+            value: "1"

secrets/data/pgbackups-config.yaml

@@ -0,0 +1,43 @@
+kind: Secret
+apiVersion: v1
+metadata:
+  name: pgbackups-config
+  namespace: data
+data:
+  POSTGRES_HOST: ENC[AES256_GCM,data:fk39oRcp57cwCzpzRmyH9w==,iv:Ku06ALxz5iP1FfqrfkXMS0A+mLm/PubB2cSgsgHAIkw=,tag:Zmjv/hbgiNGnrKnpO5/4FQ==,type:str]
+  #ENC[AES256_GCM,data:evLRbC9gWg==,iv:p98frWbxUgq9U/B5CgirxOiaHyM9/SgGk0G+SEEgl7w=,tag:g6iZy5lzrmd0TRf9NSLVJg==,type:comment]
+  POSTGRES_DB: ENC[AES256_GCM,data:jLMam3S/nf4fbnckqGRzz3DN2Kc5yc+CieY/LsXAqek78wNN8VQGgA/jDfds1tCjXf0uLm8qtgQjf/swuWpGbgWsDi7R5TZuOHNcI36240W4+CfjbgRhEqIwCGoZygG5nlklkGIpFoK7UzQym6yJnTUo8vSP5KsvCt9Yor+HbQ3xH7JJNvpNPW9hoPcSrplm,iv:Jj94elOligkiC77B78n2LbWtwAul57qLZWbnuXz2t8A=,tag:EBWKmT1i7+Y27NjQZIaHhw==,type:str]
+  #ENC[AES256_GCM,data:vyJJhEPgdTF6uq60/y3PQKWL5RF/BSHa+BUK7AepiEPPHkQaWTJIy3Ph9D2GNuA9M9PxctzevA7npONlCopAyemhcPPHZTSKisfTUC9kK8V+Qo0ss8kOp7NR9Pl8+4uLcMVQQSQV+R6UcA==,iv:iDYP7fbDSCpxu+THAh23BVw2XAPciLV8l7Wgqb6zTK4=,tag:uKQ1WrMnehOKKWjdVPMYlg==,type:comment]
+  POSTGRES_USER: ENC[AES256_GCM,data:jl9GnSeSWViXyikm3Va8cw==,iv:LrXQlKyAbUjZzRIWbKccEIuKunmCGLaLfxl0x6b016U=,tag:C4jYeTDfA8PEFK9pO4+98w==,type:str]
+  #ENC[AES256_GCM,data:daOhVbCTXA==,iv:oNBM3K1eVXG5lZ4k+bKFwdu/ntA5wM4ubv6u+qpeBxA=,tag:a74EUur7Pfvcig3cTFR81w==,type:comment]
+  POSTGRES_PASSWORD: ENC[AES256_GCM,data:sfVYbDfJbj1/c+yTLqCEZX3grPo=,iv:wRD20jIyhhG9g8Cv5eg5BidJEYUU7qBjOU+j9xsH+2M=,tag:zoFBnmKuOMZkfCaGHxyhYw==,type:str]
+  #ENC[AES256_GCM,data:jhWnIygmRFGSO7/ssSA=,iv:ju1k4JZG5lY+yytYXH2ubhesuLNnuLy6Iph2P9coB7c=,tag:tWm5qw9hAnzeoOP3boPKLg==,type:comment]
+type: Opaque
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  lastmodified: "2021-03-29T07:45:41Z"
+  mac: ENC[AES256_GCM,data:NsmuOE5HxvvnmZeHqbKjn6jIEOTxiei0hoKcM8w/Vi+WmtbdRlb1s3O0MXaUT0R+krbU+IOee6T3B0oDIxFWjApfppU3UPDOD03FPs6bywoTCDyliYk+XeKVPrxFFV5PHuG68MgO7LuUepgWA8dSRvSYoYgh8PJamhW9h8aNt/Y=,iv:7gD6rUppdNxh/GE/9LYuHBKA3Pe24wAarBrIridmhpY=,tag:+V7RuNM+MVSr0UFku5OuVA==,type:str]
+  pgp:
+    - created_at: "2021-03-29T07:45:41Z"
+      enc: |
+        -----BEGIN PGP MESSAGE-----
+
+        hQGMA/JorPHm1g9XAQv8Cu3r3d4UXM7pjwBQ4/y5zVz47KuSiZWlsC6IaadnfIci
+        oNGkflMWI51OxyFW72DkZ4eq9tZh7xnL6kvPZ1FX5Tyfgp1wqOmHqKMz1QQw6g8n
+        XOMW5sBUWTUeOjOx9JfFlhNVz/9OEm+/OkJUCur5FH8VP8GTKtcHB5ZfcLsMPKbW
+        1ipn9lXM4d/QNU8NY1Y6+oxWyF3nMTvisF4hLyO6HTZUyoFbpHBOAfVtNlhM0sHu
+        gehJ/Cu1da4FdSIUc7r2X1tujRjsRE0IKtuoyAtJKshhRMhryQrvPmXy9msO44g0
+        JaQPEbFANkFcOtA6FCPF9jwUyiMWOT3xNvo3qJ1Xcn1J+TIYRokORmVis7wFocd4
+        wi24MLq+1YByBiPTROuaUKZI8vrg1oCZBi5GV2ss7V+OHKMZJeVvlbqnbYccwNe6
+        R9x15k/579DTF7W4aRsSeB2w6EvY3DgauXXQWY0zScDgwMdrqSKbXcRqxA++Kx3O
+        1aK8tkgR3eJN2azjBbl00lwB/bOvbdunHLwX5wvgN4bdw3VaGrcjgupm0cjU6PsU
+        G2vHHdCseeVvlcULHJ/Yiae2KeKhgo32Jrpbv35HYweH8WkaQWjDBvF5wuljHO2e
+        PKgAA9K9UzAiyf3zng==
+        =W4O6
+        -----END PGP MESSAGE-----
+      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
+  encrypted_regex: ^(data|stringData)$
+  version: 3.6.1