provisioning-catalog/components/backup_manager/nickel/defaults.ncl

76 lines
2.1 KiB
Text

# Defaults for backup_manager. Override in workspace component declarations
# (infra/libre-wuji/components/backup_manager.ncl).
let version = import "version.ncl" in
{
backup_manager = {
name = "backup-manager",
namespace = "backup-system",
mode = 'cluster,
daemon_replicas = 1,
daemon_image = version.daemon_image,
daemon_http_port = 9099,
daemon_metrics_port = 9100,
mount_image = version.mount_image,
vault_endpoint = "https://vault.libre-wuji.svc.cluster.local:8200",
vault_bootstrap_secret_ref = "backup-manager-bootstrap",
nats_url = "nats://nats.ops-system.svc.cluster.local:4222",
nats_topology_ref = "infra/libre-wuji/backup-nats-topology.ncl",
policies = {
components_path = "infra/libre-wuji/components/*.ncl",
groups_path = "infra/libre-wuji/backup-groups.ncl",
system_backups_path = "infra/libre-wuji/system-backups.ncl",
verify_recipes_path = "infra/libre-wuji/verify-recipes",
nickel_import_path = "/opt/provisioning",
},
concurrency = {
max_parallel_backups = 4,
max_parallel_per_destination = 2,
},
host_install = {
binary_path = "/usr/local/bin/prvng-backup",
cron_dir = "/etc/cron.d",
systemd_dir = "/etc/systemd/system",
env_dir = "/etc/prvng-backup",
},
requires = {
storage = { size = "5Gi", persistent = true },
ports = [
{ port = 9099, exposure = 'internal },
{ port = 9100, exposure = 'internal },
],
credentials = [
"VAULT_BOOTSTRAP_TOKEN",
"NATS_BOOTSTRAP_NKEY_SEED",
"BACKUP_AGE_KEY",
"BACKUP_S3_PRIMARY_ACCESS_KEY",
"BACKUP_S3_PRIMARY_SECRET_KEY",
"BACKUP_B2_REPLICA_KEY_ID",
"BACKUP_B2_REPLICA_APPLICATION_KEY",
],
},
provides = {
service = "backup-manager",
port = 9099,
endpoints = ["/metrics", "/api/v1/policy", "/api/v1/queue"],
},
operations = {
install = true,
update = true,
delete = true,
health = true,
restart = true,
},
},
}