This commit is contained in:
2024-04-05 18:07:07 +02:00
parent 1d819f1d88
commit 9f1e98d53b
3 changed files with 151 additions and 143 deletions

View File

@@ -38,6 +38,7 @@ resource "kubectl_manifest" "pre_backup_sa" {
metadata:
name: backup-secret
namespace: "${var.namespace}"
labels: ${jsonencode(local.secrets-labels)}
EOF
}
resource "kubectl_manifest" "pre_backup_role" {
@@ -49,6 +50,7 @@ resource "kubectl_manifest" "pre_backup_role" {
metadata:
name: backup-secret
namespace: "${var.namespace}"
labels: ${jsonencode(local.secrets-labels)}
rules:
- apiGroups:
- ""
@@ -68,6 +70,7 @@ resource "kubectl_manifest" "pre_backup_rb" {
metadata:
name: backup-secret
namespace: "${var.namespace}"
labels: ${jsonencode(local.secrets-labels)}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
@@ -87,6 +90,7 @@ resource "kubectl_manifest" "pre_backup_pod" {
metadata:
name: secret
namespace: "${var.namespace}"
labels: ${jsonencode(local.secrets-labels)}
spec:
backupCommand: kubectl get secrets -o yaml -l k8up.io/backup=true
pod: