Move velero from apps to infrastructure

infrastructure/controllers/kustomization.yaml

@@ -6,3 +6,4 @@ resources:
   - cert-manager
   - traefik
   - tailscale
+  - velero

infrastructure/controllers/velero/kustomization.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: velero
+
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
+
+configMapGenerator:
+  - name: velero-prod-values
+    namespace: velero
+    files:
+      - values.yaml
+
+configurations:
+  - kustomizeconfig.yaml

infrastructure/controllers/velero/kustomizeconfig.yaml

@@ -0,0 +1,6 @@
+nameReference:
+- kind: ConfigMap
+  version: v1
+  fieldSpecs:
+  - path: spec/valuesFrom/name
+    kind: HelmRelease

infrastructure/controllers/velero/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: velero

infrastructure/controllers/velero/release.yaml

@@ -0,0 +1,19 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: velero
+  namespace: velero
+spec:
+  interval: 1h
+  chart:
+    spec:
+      chart: velero
+      version: 10.1.0
+      sourceRef:
+        kind: HelmRepository
+        name: velero-helm-repo
+        namespace: velero
+  valuesFrom:
+    - kind: ConfigMap
+      name: velero-prod-values
+      valuesKey: values.yaml

infrastructure/controllers/velero/repository.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: velero-helm-repo
+  namespace: velero
+spec:
+  interval: 1h
+  url: https://vmware-tanzu.github.io/helm-charts

infrastructure/controllers/velero/values.yaml

@@ -0,0 +1,42 @@
+snapshotsEnabled: false
+deployNodeAgent: true
+configuration:
+  backupStorageLocation:
+  - name: scaleway
+    provider: velero.io/aws
+    default: true
+    bucket: ${VELERO_BUCKET}
+    config:
+      region: ${VELERO_REGION}
+      s3Url: https://s3.${VELERO_REGION}.scw.cloud
+
+  defaultVolumesToFsBackup: true
+  
+schedules:
+  daily-backup:
+    schedule: "0 2 * * *"
+    template:
+      includedNamespaces:
+        - gitea
+      storageLocation: default
+      ttl: "168h"
+      includedResources:
+        - persistentvolumeclaims
+        - persistentvolumes
+      labels:
+        type: scheduled
+        period: daily
+
+credentials:
+  existingSecret: velero-s3-credentials
+
+initContainers:
+  - name: velero-plugin-for-aws
+    image: velero/velero-plugin-for-aws:v1.12.2
+    imagePullPolicy: IfNotPresent
+    volumeMounts:
+      - mountPath: /target
+        name: plugins
+
+nodeAgent:
+  podVolumePath: /var/lib/k0s/kubelet/pods