Mayne0213
3366a6b5b8
- and CNPG infrastructure components Add three critical infrastructure components via GitOps: - Velero: Backup and disaster recovery solution - Configured with Minio S3 backend - Daily full cluster backups (30-day retention) - Hourly backups for critical namespaces (7-day retention) - Credentials managed via External Secrets from Vault - Falco: Runtime security monitoring - eBPF-based threat detection - Custom rules for container security - Falcosidekick for alert forwarding - Prometheus metrics enabled - CNPG (CloudNativePG): PostgreSQL operator - Kubernetes-native PostgreSQL management - Automated failover and backups - Will replace Bitnami PostgreSQL All components follow existing GitOps patterns: - Helm charts deployed via ArgoCD - Values managed in Git - Automated sync with selfHeal enabled
48 lines
1.0 KiB
YAML
48 lines
1.0 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: cnpg
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
|
|
sources:
|
|
# Helm chart from CloudNativePG repository
|
|
- repoURL: https://cloudnative-pg.github.io/charts
|
|
chart: cloudnative-pg
|
|
targetRevision: 0.23.0
|
|
helm:
|
|
valueFiles:
|
|
- $values/cnpg/helm-values/cnpg.yaml
|
|
# Values file from Git repository
|
|
- repoURL: https://gitea0213.kro.kr/bluemayne/cluster-infrastructure.git
|
|
targetRevision: main
|
|
ref: values
|
|
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: cnpg-system
|
|
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
allowEmpty: false
|
|
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- PrunePropagationPolicy=foreground
|
|
- PruneLast=true
|
|
- ServerSideApply=true
|
|
|
|
retry:
|
|
limit: 5
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|
|
|
|
revisionHistoryLimit: 10
|