Add prod benji instance

Issue #274

infrastructure/prod/backup-pvc.yaml

@@ -7,3 +7,12 @@ metadata:
 spec:
   nfs:
     path: /volume1/k10-backup
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: k8s-nfs-backup-pv
+  namespace: benji
+spec:
+  nfs:
+    path: /volume1/k8s-backup

infrastructure/prod/benji-secrets.yaml

@@ -0,0 +1,83 @@
+# yamllint disable rule:indentation
+apiVersion: v1
+data:
+    keyring: ENC[AES256_GCM,data:7WVxwyeK7phPOhyD7ShoXcp+pfZPbsLu6hfLDjxbjombqiG+W0wwcSbT9yTotUyamanaY0n6hnHdOF9i6D2mHDsEB7xDkAbV1lGn2owkjlyUkD22,iv:IaEXFEXqPmW9bW5ISViSotrPE48qnIwi0h+kd5OI1kw=,tag:GLaLDISutiC8R4XTNzY4hQ==,type:str]
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: ceph-keyring
+    namespace: benji
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-25T16:36:35Z"
+    mac: ENC[AES256_GCM,data:yCmfDn0S3lEWIfBDBtDi/xyGutJRImksRZiDf3Y08u00DyXQfe3WJhxqjLWMbHys2S1cuFeRllWY7SUwVvE64LTuYsfYecJr8JVPZEZxZEmgsKJsn8muKzNViJGWKGkkxI2EAbq1TW0VQq6HMMferKf+WbcCfH5Z/sXo280kBpg=,iv:X7zyX6R9yz+JeEv5jfYK/ek1LROMYAvx55lTZc5yvJU=,tag:F6k4l/cbvCTK+WVF4vcqEQ==,type:str]
+    pgp:
+        - created_at: "2021-08-25T16:31:49Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzRcKY9JrotYAQ//XCoimskjdqy9jFDJ06DJpRGLf32YJaU84/dh9Hp0TKCg
+            /5xz1KiZ7xTuX92Me86vPrgCLM/agA2Ciys1O3h6tzdbIy1EvkimINq+phcIrMq2
+            WR6DSxjqTpJ6dj8M5Hfo4hy93TdDfYSNFnKI2ajLZtnhXl7np0lD8L1PXvd/s9QL
+            uEVVvFkrMbppW4AKs3tQ70Vc4zIcvmZHBOEo3l/loU54s4RcGONuTmiv6wKpqjJq
+            lYls7yFiG7TbE76RiXJi9r6j/ARUuO1M8elLwlJIoZLhWY92sn2TKCf8GQVGSpwH
+            D1sYWtQE6bhwyISlgNW3pSBhi2+yFFlIwK7MDsFeDLT5B/T+9zx7IOHYZZHjLQ7w
+            Brwye9QfJVVwLHwHi80fsf74rema/q3tgCQF79vNuAbTf4I59BfJ7SelAiTPv5Or
+            D1cAz3qEEn8KxNxzMF3IMB6uOvzELa7Q+NpDJzSq2qV9+YrIEYRVJ5L7Ii9eJeBb
+            QmxQ/2a7UD2uQMgF/NzHjm7hFeFvzdScUavfog7F47QSWwyaHPII8MIu/pRShoAf
+            gLa+7YnO10Tqap7ZhKMJ7Wz8SALnoD5jcazQ9eTAr6ZS1ItFVM29nVzUoJdBC2gs
+            nuApoA8I2u2KYUzynwqd/Yanwi5XcNfz2/5M86+6auZlM6LzzTREIjn7MaW2TEnU
+            ZgEJAhW7O6qYt5iYqi8wW/aft3lXtJ4ClHCuKwX0w81Mabi1eP8pI/ELXh5lolq0
+            KBg2fY2zwhLXd8PTSyYAOmD5L0Ai9pG5WFiC7oZoHQZQBLc58dv9lJfpCFh+MR/O
+            WjGR+/9/hA==
+            =uTSl
+            -----END PGP MESSAGE-----
+          fp: BF010A1EAF254C931DB47C39A6821796DB9EAB3D
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
+---
+apiVersion: v1
+data:
+    password: ENC[AES256_GCM,data:uDGr8JPFpPfLi4g3QUEuKUSUhD8qQ2exrz1IcAXJZ83zwVfxaulpNAwnlMiuvhTzpbBOfg==,iv:IJcz9aQaJiBrqlMxOddHLjRAG3OiJXnPmXhRhD8MXwI=,tag:iJmhAgYBSaAdV1SxMKEu+A==,type:str]
+    db-path: ENC[AES256_GCM,data:zy+wg3NdElzxv7MZchRssLidHEogcveaansVq9KMl3wRz9fJfdER7SMmW2LPxtMBlFDwcuhxDoO9bRkmSPYi5Kmxh+59n0UZUmp+D7h+sMW65exNxFwu+GOwRZAbq7KuoaEm4MAufa+KIC/UGommV7vNy7ysebD8Psosj1bJU/0=,iv:M8AW2ei4ThxYz3+wpsieqFTQcIuSMCUNz+Don0O1amc=,tag:rpMa9NJ7NsHrsVVphhUrFA==,type:str]
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: postgresql-secret
+    namespace: benji
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-25T16:36:35Z"
+    mac: ENC[AES256_GCM,data:yCmfDn0S3lEWIfBDBtDi/xyGutJRImksRZiDf3Y08u00DyXQfe3WJhxqjLWMbHys2S1cuFeRllWY7SUwVvE64LTuYsfYecJr8JVPZEZxZEmgsKJsn8muKzNViJGWKGkkxI2EAbq1TW0VQq6HMMferKf+WbcCfH5Z/sXo280kBpg=,iv:X7zyX6R9yz+JeEv5jfYK/ek1LROMYAvx55lTZc5yvJU=,tag:F6k4l/cbvCTK+WVF4vcqEQ==,type:str]
+    pgp:
+        - created_at: "2021-08-25T16:31:49Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzRcKY9JrotYAQ//XCoimskjdqy9jFDJ06DJpRGLf32YJaU84/dh9Hp0TKCg
+            /5xz1KiZ7xTuX92Me86vPrgCLM/agA2Ciys1O3h6tzdbIy1EvkimINq+phcIrMq2
+            WR6DSxjqTpJ6dj8M5Hfo4hy93TdDfYSNFnKI2ajLZtnhXl7np0lD8L1PXvd/s9QL
+            uEVVvFkrMbppW4AKs3tQ70Vc4zIcvmZHBOEo3l/loU54s4RcGONuTmiv6wKpqjJq
+            lYls7yFiG7TbE76RiXJi9r6j/ARUuO1M8elLwlJIoZLhWY92sn2TKCf8GQVGSpwH
+            D1sYWtQE6bhwyISlgNW3pSBhi2+yFFlIwK7MDsFeDLT5B/T+9zx7IOHYZZHjLQ7w
+            Brwye9QfJVVwLHwHi80fsf74rema/q3tgCQF79vNuAbTf4I59BfJ7SelAiTPv5Or
+            D1cAz3qEEn8KxNxzMF3IMB6uOvzELa7Q+NpDJzSq2qV9+YrIEYRVJ5L7Ii9eJeBb
+            QmxQ/2a7UD2uQMgF/NzHjm7hFeFvzdScUavfog7F47QSWwyaHPII8MIu/pRShoAf
+            gLa+7YnO10Tqap7ZhKMJ7Wz8SALnoD5jcazQ9eTAr6ZS1ItFVM29nVzUoJdBC2gs
+            nuApoA8I2u2KYUzynwqd/Yanwi5XcNfz2/5M86+6auZlM6LzzTREIjn7MaW2TEnU
+            ZgEJAhW7O6qYt5iYqi8wW/aft3lXtJ4ClHCuKwX0w81Mabi1eP8pI/ELXh5lolq0
+            KBg2fY2zwhLXd8PTSyYAOmD5L0Ai9pG5WFiC7oZoHQZQBLc58dv9lJfpCFh+MR/O
+            WjGR+/9/hA==
+            =uTSl
+            -----END PGP MESSAGE-----
+          fp: BF010A1EAF254C931DB47C39A6821796DB9EAB3D
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

infrastructure/prod/benji-values.yaml

@@ -0,0 +1,62 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: benji
+  namespace: benji
+spec:
+  releaseName: benji
+  chart:
+    spec:
+      chart: ./charts/benji-k8s
+      version: 0.2.0
+  values:
+    ingress:
+      annotations:
+        external-dns.alpha.kubernetes.io/hostname: benji.prod.mrv.thebends.org.
+        external-dns.alpha.kubernetes.io/target: prx02.prod.mrv.thebends.org.
+      host: benji.prod.mrv.thebends.org
+    benji:
+      crontab:
+        - name: backup-monitoring
+          schedule: "00 11 * * *"
+          command:
+            - benji-backup-pvc
+            - --namespace
+            - monitoring
+        - name: backup-home-assistant
+          schedule: "05 11 * * *"
+          command:
+            - benji-backup-pvc
+            - --namespace
+            - home-assistant
+        - name: backup-unifi
+          schedule: "10 11 * * *"
+          command:
+            - benji-backup-pvc
+            - --namespace
+            - unifi
+        - name: backup-teslamate
+          schedule: "15 11 * * *"
+          command:
+            - benji-backup-pvc
+            - --namespace
+            - teslamate
+        - name: backup-frigate
+          schedule: "20 11 * * *"
+          command:
+            - benji-backup-pvc
+            - --namespace
+            - frigate
+        - name: enforce
+          schedule: "00 12 * * *"
+          command:
+            - benji-command
+            - enforce
+            - days14
+            - 'labels["benji-backup.me/instance"] == "benji-k8s"'
+        - name: cleanup
+          schedule: "00 13 * * *"
+          command:
+            - benji-command
+            - cleanup

infrastructure/prod/kustomization.yaml

@@ -7,8 +7,11 @@ resources:
   - ../base/rook-ceph
   - ../base/k10
   - ../base/calico
+  - ../base/benji
+  - benji-secrets.yaml
 patchesStrategicMerge:
   - redis-values.yaml
   - rook-ceph-values.yaml
   - k10-values.yaml
   - backup-pvc.yaml
+  - benji-values.yaml