charts/bitnami/influxdb/templates/cronjob-backup.yaml

{{- /*
Copyright VMware, Inc.
SPDX-License-Identifier: APACHE-2.0
*/}}

{{- if .Values.backup.enabled }}
apiVersion: {{ include "common.capabilities.cronjob.apiVersion" . }}
kind: CronJob
metadata:
  name: "{{ template "common.names.fullname" . }}-backup"
  namespace: {{ .Release.Namespace | quote }}
  labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
  {{- if .Values.commonAnnotations }}
  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
  {{- end }}
spec:
  schedule: {{ .Values.backup.cronjob.schedule | quote }}
  concurrencyPolicy: Forbid
  successfulJobsHistoryLimit: {{ .Values.backup.cronjob.historyLimit }}
  failedJobsHistoryLimit: {{ .Values.backup.cronjob.historyLimit }}
  jobTemplate:
    spec:
      template:
        metadata:
          labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 12 }}
          {{- if .Values.backup.cronjob.podAnnotations }}
          annotations: {{- include "common.tplvalues.render" (dict "value" .Values.backup.cronjob.podAnnotations "context" $) | nindent 12 }}
          {{- end }}
        spec:
          {{- if .Values.backup.cronjob.securityContext.enabled }}
          securityContext: {{- omit .Values.backup.cronjob.securityContext "enabled" | toYaml | nindent 12 }}
          {{- end }}
          restartPolicy: OnFailure
          volumes:
            - name: backup-scripts
              configMap:
                name: {{ include "common.names.fullname" . }}-backup
                defaultMode: 0755
            {{- if .Values.backup.uploadProviders.google.enabled }}
            - name: google-cloud-key
              secret:
            {{- if .Values.backup.uploadProviders.google.existingSecret }}
                secretName: {{ .Values.backup.uploadProviders.google.existingSecret | quote }}
            {{- else }}
                secretName: {{ include "common.names.fullname" . }}-backup-gcloud
            {{- end }}
            {{- end }}
            - name: {{ include "common.names.fullname" . }}-backups
            {{- if .Values.persistence.enabled }}
              persistentVolumeClaim:
                claimName: {{ include "common.names.fullname" . }}-backups
            {{- else }}
              emptyDir: {}
            {{- end }}
          {{- if .Values.backup.affinity }}
          affinity: {{- include "common.tplvalues.render" (dict "value" .Values.backup.affinity "context" $) | nindent 12 }}
          {{- else }}
          affinity:
            podAffinity: {{- include "common.affinities.pods" (dict "type" .Values.backup.podAffinityPreset "component" "influxdb" "customLabels" .Values.commonLabels "context" $) | nindent 14 }}
            podAntiAffinity: {{- include "common.affinities.pods" (dict "type" .Values.backup.podAntiAffinityPreset "component" "influxdb" "customLabels" .Values.commonLabels "context" $) | nindent 14 }}
            nodeAffinity: {{- include "common.affinities.nodes" (dict "type" .Values.backup.nodeAffinityPreset.type "key" .Values.backup.nodeAffinityPreset.key "values" .Values.backup.nodeAffinityPreset.values) | nindent 14 }}
          {{- end }}
          {{- if .Values.backup.nodeSelector }}
          nodeSelector: {{- include "common.tplvalues.render" (dict "value" .Values.backup.nodeSelector "context" $) | nindent 12 }}
          {{- end }}
          {{- if .Values.backup.tolerations }}
          tolerations: {{- include "common.tplvalues.render" (dict "value" .Values.backup.tolerations "context" $) | nindent 10 }}
          {{- end }}
          initContainers:
            - name: influxdb-backup
              image: {{ include "influxdb.image" . | quote }}
              env:
                - name: INFLUXDB_ADMIN_USER_PASSWORD
                  valueFrom:
                    secretKeyRef:
                      name: {{ include "influxdb.secretName" . }}
                      key: admin-user-password
                - name: INFLUXDB_ADMIN_USER_TOKEN
                  valueFrom:
                    secretKeyRef:
                      name: {{ include "influxdb.secretName" . }}
                      key: admin-user-token
              command:
                - "/tmp/backup.sh"
              volumeMounts:
                - name: {{ include "common.names.fullname" . }}-backups
                  mountPath: {{ .Values.backup.directory | quote }}
                - name: backup-scripts
                  mountPath: /tmp/backup.sh
                  subPath: backup.sh
              {{- if .Values.backup.cronjob.containerSecurityContext.enabled }}
              securityContext: {{- omit .Values.backup.cronjob.containerSecurityContext "enabled" | toYaml | nindent 16 }}
              {{- end }}
          containers:
            - name: influxdb-backup-dummy-container
              image: {{ include "influxdb.image" . | quote }}
              {{- if .Values.diagnosticMode.enabled }}
              command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 16 }}
              args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 16 }}
              {{- else }}
              command:
                - "/bin/true"
              {{- end }}
              {{- if .Values.backup.cronjob.containerSecurityContext.enabled }}
              securityContext: {{- omit .Values.backup.cronjob.containerSecurityContext "enabled" | toYaml | nindent 16 }}
              {{- end }}
            {{- if .Values.backup.uploadProviders.google.enabled }}
            - name: gsutil-cp
              image: {{ include "gcloudSdk.image" . }}
              {{- if .Values.diagnosticMode.enabled }}
              command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 16 }}
              args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 16 }}
              {{- else }}
              command:
                - "/tmp/upload-google.sh"
              {{- end }}
              volumeMounts:
                - name: {{ include "common.names.fullname" . }}-backups
                  mountPath: {{ .Values.backup.directory | quote }}
                - name: backup-scripts
                  mountPath: /tmp/upload-google.sh
                  subPath: upload-google.sh
                - name: google-cloud-key
                  mountPath: /var/secrets/google/
              {{- if .Values.backup.cronjob.containerSecurityContext.enabled }}
              securityContext: {{- omit .Values.backup.cronjob.containerSecurityContext "enabled" | toYaml | nindent 16 }}
              {{- end }}
            {{- end }}
            {{- if .Values.backup.uploadProviders.azure.enabled }}
            - name: azure-cli
              image: {{ include "azureCli.image" . }}
              {{- if .Values.diagnosticMode.enabled }}
              command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 16 }}
              args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 16 }}
              {{- else }}
              command:
              - "/tmp/upload-azure.sh"
              {{- end }}
              env:
                - name: AZURE_STORAGE_CONNECTION_STRING
                  valueFrom:
                    secretKeyRef:
                      {{- if .Values.backup.uploadProviders.azure.existingSecret }}
                      name: {{ .Values.backup.uploadProviders.azure.existingSecret | quote }}
                      {{- else }}
                      name: {{ include "common.names.fullname" . }}-backup-azure
                      {{- end }}
                      key: {{ .Values.backup.uploadProviders.azure.secretKey }}
              volumeMounts:
                - name: {{ include "common.names.fullname" . }}-backups
                  mountPath: {{ .Values.backup.directory | quote }}
                - name: backup-scripts
                  mountPath: /tmp/upload-azure.sh
                  subPath: upload-azure.sh
              {{- if .Values.backup.cronjob.containerSecurityContext.enabled }}
              securityContext: {{- omit .Values.backup.cronjob.containerSecurityContext "enabled" | toYaml | nindent 16 }}
              {{- end }}
            {{- end }}
            {{- if .Values.backup.uploadProviders.aws.enabled }}
            - name: aws-cli
              image: {{ include "awsCli.image" . }}
              {{- if .Values.diagnosticMode.enabled }}
              command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 16 }}
              args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 16 }}
              {{- else }}
              command:
              - "/tmp/upload-aws.sh"
              {{- end }}
              env:
                - name: AWS_ACCESS_KEY_ID
                  valueFrom:
                    secretKeyRef:
                      {{- if .Values.backup.uploadProviders.aws.existingSecret }}
                      name: {{ .Values.backup.uploadProviders.aws.existingSecret | quote }}
                      {{- else }}
                      name: {{ include "common.names.fullname" . }}-backup-aws
                      {{- end }}
                      key: accessKeyID
                - name: AWS_SECRET_ACCESS_KEY
                  valueFrom:
                    secretKeyRef:
                      {{- if .Values.backup.uploadProviders.aws.existingSecret }}
                      name: {{ .Values.backup.uploadProviders.aws.existingSecret | quote }}
                      {{- else }}
                      name: {{ include "common.names.fullname" . }}-backup-aws
                      {{- end }}
                      key: secretAccessKey
                - name: AWS_DEFAULT_REGION
                  valueFrom:
                    secretKeyRef:
                      {{- if .Values.backup.uploadProviders.aws.existingSecret }}
                      name: {{ .Values.backup.uploadProviders.aws.existingSecret | quote }}
                      {{- else }}
                      name: {{ include "common.names.fullname" . }}-backup-aws
                      {{- end }}
                      key: region
              volumeMounts:
                - name: {{ include "common.names.fullname" . }}-backups
                  mountPath: {{ .Values.backup.directory | quote }}
                - name: backup-scripts
                  mountPath: /tmp/upload-aws.sh
                  subPath: upload-aws.sh
              {{- if .Values.backup.cronjob.containerSecurityContext.enabled }}
              securityContext: {{- omit .Values.backup.cronjob.containerSecurityContext "enabled" | toYaml | nindent 16 }}
              {{- end }}
            {{- end }}
{{- end }}