chore: test restore

.kontinuous/env/dev/templates/secretariat-prod-backups-access-key.sealed-secret.yaml

@@ -0,0 +1,17 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: 'true'
+  name: secretariat-prod-backups-access-key
+spec:
+  encryptedData:
+    bucket_access_key: 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
+    bucket_region: AgDJLX73MgdeiTJUH3Fp3KgcnfrRQV/l+Xo2HbWDg3wNbIZExt85VSbUfOOO5PJ+YdfSCTwE2dNPQD1k2tAFYesV5xtyxF6r+6ec74PKz1dmwLSi4zrFBM77WetneQIe/G1TFmuVhQn3my8eeX1+l+8dby9bQV6oqPAGEhteLdlI5h5047R1I4ulsKaud/bIIZkn0ArJ3WHor4VnjETbX37Ngto4gnnFISx5ShjMAb6pGFohtj+0ErJyIajiqRH0iZO0D7k7sSF9Fbj7P62O0GCXBEYmFd1vGrBwPADIeRyXv76MxsfNKHcMYV4iH6w+hsHXojIda8dGJbHMQe+gf/0w9QpTe0UOFxsvdMgtDOiYtZKEN7Wx1/bh9W8wNJoHC0WIeWIJzcOOa7DkmBBxLUWHS2spnnksRGopco6c3eEMwYSNRjhaTAgatjCVjBRIBFgQPeUlZi6sf+yGsrHpB4Cq1WlIPqEAMTFPjgjThMPR681Qvb1MYHtsh+VHQSkW/EKcq325r3JWnJ7fdvaGYGvCqmfduwlSsgjcKS9oNjpe/sZ7XiIzbsbMGu65+FRthUNGl182owyKpQJZ9NmMNb+OPXq3VHmllclpLxvI27t7pXMXXIpXAbUfqYnWg9ZDThK6DDoSNJ6pyHkTW7DO3SsJSK5pz4UdgWLnpyWcMQr1qyp7DDIekH4EiJssNb063eavUDk=
+    bucket_secret_key: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: 'true'
+      name: secretariat-prod-backups-access-key
+    type: Opaque

.kontinuous/env/dev/values.yaml

@@ -1,3 +1,29 @@
 app:
   vars:
     ENV: review
+
+cnpg-cluster:
+  ~chart: pg
+  ~preDeploy.cleaner:
+    match:
+      kind: Cluster
+
+  cnpg-cluster:
+    recovery:
+      ~tpl~database: "{{ .Values.global.pgDatabase }}"
+      ~tpl~owner: "{{ .Values.global.pgUser }}"
+      secretName: "cnpg-cluster-db"
+      enabled: true
+      #targetTime: "2023-12-01T09:00:00"
+      barmanObjectStore:
+        destinationPath: "s3://secretariat-prod-backups/secretariat"
+        s3Credentials:
+          accessKeyId:
+            name: "secretariat-prod-backups-access-key"
+            key: bucket_access_key
+          secretAccessKey:
+            name: "secretariat-prod-backups-access-key"
+            key: bucket_secret_key
+          region:
+            name: "secretariat-prod-backups-access-key"
+            key: bucket_region

.talismanrc

@@ -1,6 +1,10 @@
 fileignoreconfig:
+- filename: .kontinuous/env/dev/templates/secretariat-prod-backups-access-key.sealed-secret.yaml
+  checksum: 32bdeae92b9c1063e5b4bbba84f1d5d1f86a09d61beb73c9b13ee2c68fc55de5
 - filename: .kontinuous/env/dev/templates/sentry.sealed-secret.yaml
   checksum: 6b3eb493305a8c3d24402c99d7a20b01b6650e7fedb2782648c539a70adc4088
+- filename: .kontinuous/env/dev/values.yaml
+  checksum: 6a2b6f40d45c2c1d517c6b7069ae4799457d12527628ffb62a610fe70d6bec36
 - filename: .kontinuous/env/preprod/templates/sentry.sealed-secret.yaml
   checksum: fae95a0f658c5920845516eb04659cac883418d135a4bce54615236e47da8df1
 - filename: .kontinuous/env/prod/templates/sentry.sealed-secret.yaml