feat: opnsense backup

kubernetes/apps/default/homelab/opnsense/backup/helmrelease.yaml

@@ -0,0 +1,63 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app homelab-opnsense-backup
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.6.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+  maxHistory: 2
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      strategy: rollback
+      retries: 3
+  uninstall:
+    keepHistory: false
+  values:
+    controllers:
+      homelab-opnsense-backup:
+        type: cronjob
+        cronjob:
+          concurrencyPolicy: Forbid
+          schedule: "@daily"
+        containers:
+          app:
+            image:
+              repository: ghcr.io/auricom/kubectl
+              tag: 1.32.1@sha256:b01d7c1b5d9e900119a7568fc4d08a3a46afb65d430ed66173cdf101b4f211db
+            command:
+              - /bin/bash
+              - /app/backup.sh
+            env:
+              OPNSENSE_URL: "https://opnsense.${SECRET_INTERNAL_DOMAIN}"
+              S3_URL: "https://minio.${SECRET_INTERNAL_DOMAIN}"
+            envFrom:
+              - secretRef:
+                  name: homelab-opnsense-backup-secret
+    service:
+      app:
+        controller: *app
+        enabled: false
+    persistence:
+      config:
+        enabled: true
+        type: configMap
+        name: homelab-opnsense-backup-configmap
+        defaultMode: 0775 # trunk-ignore(yamllint/octal-values)
+        globalMounts:
+          - path: /app/backup.sh
+            subPath: backup.sh
+            readOnly: true