add keycloak database backup job

Signed-off-by: Ivan Milchev <[email protected]>
podkrepi-bg · Mar 18, 2023 · 26a4c0d · 26a4c0d
1 parent d240a63
commit 26a4c0d
Show file tree

Hide file tree

Showing 3 changed files with 54 additions and 2 deletions.
diff --git a/backup-job/cronjob-keycloak.yaml b/backup-job/cronjob-keycloak.yaml
@@ -0,0 +1,50 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: backup-job
+  namespace: keycloak
+spec:
+  jobTemplate:
+    metadata:
+      name: backup-job
+    spec:
+      template:
+        spec:
+          containers:
+          - image: ghcr.io/podkrepi-bg/infrastructure/backup-job:v1.2.0 
+            name: backup-job
+            resources:
+              requests:
+                cpu: 200m
+                memory: 100Mi
+              limits:
+                cpu: 400m
+                memory: 200Mi
+            env:
+            - name: BACKUP_PREFIX
+              value: keycloak-backup
+            - name: PG_USER
+              value: backup_job
+            - name: PGPASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: backup-user-postgresql
+                  key: password
+            - name: PG_HOST
+              value: keycloak-postgresql.keycloak
+            - name: PG_PORT
+              value: "5432"
+            - name: PG_DB_NAME
+              value: bitnami_keycloak
+            - name: GCP_KEY_PATH
+              value: /etc/gcloud-creds/creds.json
+            volumeMounts:
+            - name: gcloud-creds
+              readOnly: true
+              mountPath: "/etc/gcloud-creds"
+          volumes:
+          - name: gcloud-creds
+            secret:
+              secretName: backup-user-gcloud
+          restartPolicy: OnFailure
+  schedule: 0 0 * * *
diff --git a/backup-job/cronjob.yaml → backup-job/cronjob-podkrepibg.yaml b/backup-job/cronjob.yaml → backup-job/cronjob-podkrepibg.yaml
@@ -11,7 +11,7 @@ spec:
       template:
         spec:
           containers:
-          - image: ghcr.io/podkrepi-bg/infrastructure/backup-job:v1.1.0 
+          - image: ghcr.io/podkrepi-bg/infrastructure/backup-job:v1.2.0 
             name: backup-job
             resources:
               requests:
@@ -21,6 +21,8 @@ spec:
                 cpu: 400m
                 memory: 200Mi
             env:
+            - name: BACKUP_PREFIX
+              value: podkrepibg-backup
             - name: PG_USER
               value: backup_job
             - name: PGPASSWORD

diff --git a/backup-job/entrypoint.sh b/backup-job/entrypoint.sh
@@ -2,7 +2,7 @@
 set -e
 
 NOW=`date +%Y%m%d-%H%M%S`
-PG_BACKUP_PATH=/var/podkrepibg-backup-$NOW.sql
+PG_BACKUP_PATH=/var/$BACKUP_PREFIX-$NOW.sql
 
 # Do the backup
 pg_dump -h $PG_HOST -p $PG_PORT -U $PG_USER -d $PG_DB_NAME > $PG_BACKUP_PATH