Containers/etcd-backup/etcd-backup.yaml at main · chengkuangan/Containers · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
apiVersion: v1
kind: Namespace
metadata:
  name: etcd-backup
  labels:
    app.kubernetes.io/name: etcd-backup
    app.kubernetes.io/instance: etcd-backup

---

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  namespace: etcd-backup
  labels:
    app: etcd-backup
    app-group: etcd-backup
  name: etcd-backup-snapshot-pvc
spec:
  accessModes:
  - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi

---

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: ectd-backup
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "watch", "list"]

---

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: ectd-backup
subjects:
- kind: ServiceAccount
  name: default
  namespace: etcd-backup
roleRef:
  kind: ClusterRole
  name: ectd-backup
  apiGroup: rbac.authorization.k8s.io

---

apiVersion: batch/v1
kind: CronJob
metadata:
  name: etcd-backup
  namespace: etcd-backup
  labels:
    app: etcd-backup
    app-group: etcd-backup
spec:
  # Change the schedule here. This is with timezone set to UTC+0:00
  schedule: "0 0 * * *"
  jobTemplate:
    spec:
      template:
        spec:
          containers:
          - env:
            - name: TZ
              value: "Asia/Kuala_Lumpur"
            name: ectd-backup
            image: chengkuan/etcd-backup:arm64-1.0.0
            imagePullPolicy: IfNotPresent
            resources:
              requests:
                cpu: 100m
                memory: 100Mi
            volumeMounts:
            - mountPath: /etc/kubernetes/pki/etcd
              name: etcd-certs
              readOnly: true
            - mountPath: /backup
              name: snapshot-dir
          restartPolicy: OnFailure
          volumes:
          - hostPath:
              path: /etc/kubernetes/pki/etcd
              type: Directory
            name: etcd-certs
          - name: snapshot-dir
            persistentVolumeClaim:
              claimName: etcd-backup-snapshot-pvc