recover latest keycloak backup

mmalyska · Sep 30, 2024 · 8bba240 · 8bba240
1 parent 40a29f8
commit 8bba240
Show file tree

Hide file tree

Showing 8 changed files with 36 additions and 50 deletions.
diff --git a/cluster/system/dashboard/kustomization.yaml → ...uster/system/dashboard/kustomization.yaml b/cluster/system/dashboard/kustomization.yaml → ...uster/system/dashboard/kustomization.yaml
diff --git a/cluster/system/dashboard/resources/cert.yaml → ...ster/system/dashboard/resources/cert.yaml b/cluster/system/dashboard/resources/cert.yaml → ...ster/system/dashboard/resources/cert.yaml
diff --git a/...board/resources/cluster-role-binding.yaml → ...board/resources/cluster-role-binding.yaml b/...board/resources/cluster-role-binding.yaml → ...board/resources/cluster-role-binding.yaml
diff --git a/...system/dashboard/resources/dashboard.yaml → ...system/dashboard/resources/dashboard.yaml b/...system/dashboard/resources/dashboard.yaml → ...system/dashboard/resources/dashboard.yaml
diff --git a/.../dashboard/resources/kd-user-service.yaml → .../dashboard/resources/kd-user-service.yaml b/.../dashboard/resources/kd-user-service.yaml → .../dashboard/resources/kd-user-service.yaml
diff --git a/cluster/system/dashboard/secret.sec.yaml → .../cluster/system/dashboard/secret.sec.yaml b/cluster/system/dashboard/secret.sec.yaml → .../cluster/system/dashboard/secret.sec.yaml
diff --git a/cluster/projects/system/values.yaml b/cluster/projects/system/values.yaml
@@ -30,21 +30,6 @@ app-of-apps:
         - ServerSideApply=true
         - RespectIgnoreDifferences=true
       ignoreDifferences:
-    - name: kubernetes-dashboard
-      namespace: kubernetes-dashboard
-      path: dashboard
-      selfHeal: true
-      plugin:
-        env:
-          - name: SOPS_SECRET_FILE
-            value: secret.sec.yaml
-      extraSyncOptions:
-        - RespectIgnoreDifferences=true
-      ignoreDifferences:
-        - name: kubernetes-dashboard-csrf
-          kind: Secret
-          jsonPointers:
-            - /data/csrf
     - name: dyndns
       namespace: dyndns
       path: dyndns
@@ -57,6 +42,7 @@ app-of-apps:
     - name: keycloak
       namespace: identity
       path: identity/keycloak
+      enabled: true
       selfHeal: true
       plugin:
         env:

diff --git a/cluster/system/identity/keycloak/values.yaml b/cluster/system/identity/keycloak/values.yaml
@@ -6,7 +6,7 @@ global:
     imagePullPolicy: IfNotPresent
 server:
   name: server
-  replicas: 1
+  replicas: 0
   podAnnotations: {}
   podLabels: {}
   containerPort: 8080
@@ -67,39 +67,39 @@ postgres:
   instances: 2
   storage:
     size: 2Gi
-  # bootstrap:
-  #   recovery:
-  #     source: crunchy-cluster
-  # externalClusters:
-  #   - name: crunchy-cluster
-  #     barmanObjectStore:
-  #       serverName: keycloakdb-cnpg
-  #       destinationPath: "s3://k8s-at-home-backup/cnpg/keycloak"
-  #       endpointURL: <secret:s3_endpoint>
-  #       s3Credentials:
-  #         accessKeyId:
-  #           name: keycloakdb-secrets
-  #           key: S3_ACCESS_KEY_ID
-  #         secretAccessKey:
-  #           name: keycloakdb-secrets
-  #           key: S3_ACCESS_SECRET_KEY
+  bootstrap:
+    recovery:
+      source: crunchy-cluster
+  externalClusters:
+    - name: crunchy-cluster
+      barmanObjectStore:
+        serverName: keycloakdb-cnpg
+        destinationPath: "s3://k8s-at-home-backup/cnpg/keycloak"
+        endpointURL: <secret:s3_endpoint>
+        s3Credentials:
+          accessKeyId:
+            name: keycloakdb-secrets
+            key: S3_ACCESS_KEY_ID
+          secretAccessKey:
+            name: keycloakdb-secrets
+            key: S3_ACCESS_SECRET_KEY
   monitoring:
     enablePodMonitor: true
-  backup:
-    retentionPolicy: "10d"
-    barmanObjectStore:
-      destinationPath: "s3://k8s-at-home-backup/cnpg/keycloak"
-      endpointURL: <secret:s3_endpoint>
-      s3Credentials:
-        accessKeyId:
-          name: keycloakdb-secrets
-          key: S3_ACCESS_KEY_ID
-        secretAccessKey:
-          name: keycloakdb-secrets
-          key: S3_ACCESS_SECRET_KEY
-  scheduledBackups:
-    - name: keycloakdb-cnpg-backup
-      spec:
-        immediate: true
-        schedule: "55 0 0 * * *"
-        backupOwnerReference: self
+  # backup:
+  #   retentionPolicy: "10d"
+  #   barmanObjectStore:
+  #     destinationPath: "s3://k8s-at-home-backup/cnpg/keycloak"
+  #     endpointURL: <secret:s3_endpoint>
+  #     s3Credentials:
+  #       accessKeyId:
+  #         name: keycloakdb-secrets
+  #         key: S3_ACCESS_KEY_ID
+  #       secretAccessKey:
+  #         name: keycloakdb-secrets
+  #         key: S3_ACCESS_SECRET_KEY
+  # scheduledBackups:
+  #   - name: keycloakdb-cnpg-backup
+  #     spec:
+  #       immediate: true
+  #       schedule: "55 0 0 * * *"
+  #       backupOwnerReference: self