Add support for Azure Backups

charts/tembo-operator/Chart.yaml

@@ -3,7 +3,7 @@ name: tembo-operator
 description: "Helm chart to deploy the tembo-operator"
 type: application
 icon: https://cloud.tembo.io/images/TemboElephant.png
-version: 0.7.3
+version: 0.8.0
 home: https://tembo.io
 sources:
   - https://github.com/tembo-io/tembo

charts/tembo-operator/templates/crd.yaml

@@ -1932,13 +1932,79 @@ spec:
                   endpointURL: null
                   s3Credentials: null
                   googleCredentials: null
+                  azureCredentials: null
                   volumeSnapshot:
                     enabled: false
                 description: |-
                   The backup configuration for the CoreDB instance to facilitate database backups and WAL archive uploads to an S3 compatible object store.
 
                   **Default**: disabled
                 properties:
+                  azureCredentials:
+                    description: The Azure credentials to use for backups
+                    nullable: true
+                    properties:
+                      connectionString:
+                        description: The connection string to be used
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                      inheritFromAzureAD:
+                        description: Use the Azure AD based authentication without providing explicitly the keys.
+                        nullable: true
+                        type: boolean
+                      storageAccount:
+                        description: The storage account where to upload data
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                      storageKey:
+                        description: The storage account key to be used in conjunction with the storage account name
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                      storageSasToken:
+                        description: A shared-access-signature to be used in conjunction with the storage account name
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                    type: object
                   destinationPath:
                     default: s3://
                     description: The S3 bucket path to store backups in
@@ -1954,7 +2020,7 @@ spec:
                     nullable: true
                     type: string
                   googleCredentials:
-                    description: 'GoogleCredentials is the type for the credentials to be used to upload files to Google Cloud Storage. It can be provided in two alternative ways: * The secret containing the Google Cloud Storage JSON file with the credentials (applicationCredentials) * inheriting the role from the pod (GKE) environment by setting gkeEnvironment to true'
+                    description: The Google Cloud credentials to use for backups
                     nullable: true
                     properties:
                       applicationCredentials:
@@ -2391,6 +2457,71 @@ spec:
                   **Default**: disabled
                 nullable: true
                 properties:
+                  azureCredentials:
+                    description: azureCredentials is the Azure credentials to use for restores.
+                    nullable: true
+                    properties:
+                      connectionString:
+                        description: The connection string to be used
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                      inheritFromAzureAD:
+                        description: Use the Azure AD based authentication without providing explicitly the keys.
+                        nullable: true
+                        type: boolean
+                      storageAccount:
+                        description: The storage account where to upload data
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                      storageKey:
+                        description: The storage account key to be used in conjunction with the storage account name
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                      storageSasToken:
+                        description: A shared-access-signature to be used in conjunction with the storage account name
+                        nullable: true
+                        properties:
+                          key:
+                            description: The key to select
+                            type: string
+                          name:
+                            description: Name of the referent.
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
+                    type: object
                   backupsPath:
                     description: |-
                       The object storage path and bucket name of the instance you wish to restore from.  This maps to the `Backup` `destinationPath` field for the original instance.
@@ -2399,11 +2530,11 @@ spec:
                     nullable: true
                     type: string
                   endpointURL:
-                    description: endpointURL is the S3 compatable endpoint URL
+                    description: endpointURL is the S3 compatible endpoint URL
                     nullable: true
                     type: string
                   googleCredentials:
-                    description: s3Credentials is the S3 credentials to use for backups.
+                    description: googleCredentials is the Google Cloud credentials to use for restores.
                     nullable: true
                     properties:
                       applicationCredentials:
@@ -2428,7 +2559,7 @@ spec:
                     nullable: true
                     type: string
                   s3Credentials:
-                    description: s3Credentials is the S3 credentials to use for backups.
+                    description: s3Credentials is the S3 credentials to use for restores.
                     nullable: true
                     properties:
                       accessKeyId:

tembo-operator/src/apis/coredb_types.rs

@@ -190,6 +190,84 @@ pub struct GoogleCredentialsApplicationCredentials {
     pub name: String,
 }
 
+/// AzureCredentials is the type for the credentials to be used to upload files to Azure Blob Storage.
+#[derive(Serialize, Deserialize, Clone, Debug, Default, JsonSchema)]
+pub struct AzureCredentials {
+    /// The connection string to be used
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "connectionString"
+    )]
+    pub connection_string: Option<AzureCredentialsConnectionString>,
+    /// Use the Azure AD based authentication without providing explicitly the keys.
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "inheritFromAzureAD"
+    )]
+    pub inherit_from_azure_ad: Option<bool>,
+    /// The storage account where to upload data
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "storageAccount"
+    )]
+    pub storage_account: Option<AzureCredentialsStorageAccount>,
+    /// The storage account key to be used in conjunction with the storage account name
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "storageKey"
+    )]
+    pub storage_key: Option<AzureCredentialsStorageKey>,
+    /// A shared-access-signature to be used in conjunction with the storage account name
+    #[serde(
+        default,
+        skip_serializing_if = "Option::is_none",
+        rename = "storageSasToken"
+    )]
+    pub storage_sas_token: Option<AzureCredentialsStorageSasToken>,
+}
+
+/// The connection string to be used for Azure Blob Storage backups
+#[derive(Serialize, Deserialize, Clone, Debug, Default, JsonSchema)]
+pub struct AzureCredentialsConnectionString {
+    /// The key to select
+    pub key: String,
+    /// Name of the referent.
+    pub name: String,
+}
+
+/// The storage account for Azure Blob Storage backups
+#[derive(Serialize, Deserialize, Clone, Debug, Default, JsonSchema)]
+pub struct AzureCredentialsStorageAccount {
+    /// The key to select
+    pub key: String,
+    /// Name of the referent.
+    pub name: String,
+}
+
+/// The storage account key to be used in conjunction with the storage account name for Azure Blob
+/// Storage backups
+#[derive(Serialize, Deserialize, Clone, Debug, Default, JsonSchema)]
+pub struct AzureCredentialsStorageKey {
+    /// The key to select
+    pub key: String,
+    /// Name of the referent.
+    pub name: String,
+}
+
+/// A shared-access-signature to be used in conjunction with the storage account name for Azure Blob
+/// Storage backups
+#[derive(Serialize, Deserialize, Clone, Debug, Default, JsonSchema)]
+pub struct AzureCredentialsStorageSasToken {
+    /// The key to select
+    pub key: String,
+    /// Name of the referent.
+    pub name: String,
+}
+
 /// VolumeSnapshots is the type for the configuration of the volume snapshots
 /// to be used for backups instead of object storage
 #[derive(Serialize, Deserialize, Clone, Debug, Default, JsonSchema, PartialEq)]
@@ -260,9 +338,14 @@ pub struct Backup {
     #[serde(rename = "s3Credentials")]
     pub s3_credentials: Option<S3Credentials>,
 
+    /// The Google Cloud credentials to use for backups
     #[serde(rename = "googleCredentials")]
     pub google_credentials: Option<GoogleCredentials>,
 
+    /// The Azure credentials to use for backups
+    #[serde(rename = "azureCredentials")]
+    pub azure_credentials: Option<AzureCredentials>,
+
     /// Enable using Volume Snapshots for backups instead of Object Storage
     #[serde(
         default = "defaults::default_volume_snapshot",
@@ -315,18 +398,22 @@ pub struct Restore {
     #[serde(rename = "recoveryTargetTime")]
     pub recovery_target_time: Option<String>,
 
-    /// endpointURL is the S3 compatable endpoint URL
+    /// endpointURL is the S3 compatible endpoint URL
     #[serde(default, rename = "endpointURL")]
     pub endpoint_url: Option<String>,
 
-    /// s3Credentials is the S3 credentials to use for backups.
+    /// s3Credentials is the S3 credentials to use for restores.
     #[serde(rename = "s3Credentials")]
     pub s3_credentials: Option<S3Credentials>,
 
-    /// s3Credentials is the S3 credentials to use for backups.
+    /// googleCredentials is the Google Cloud credentials to use for restores.
     #[serde(rename = "googleCredentials")]
     pub google_credentials: Option<GoogleCredentials>,
 
+    /// azureCredentials is the Azure credentials to use for restores.
+    #[serde(rename = "azureCredentials")]
+    pub azure_credentials: Option<AzureCredentials>,
+
     /// volumeSnapshot is a boolean to enable restoring from a Volume Snapshot
     #[serde(rename = "volumeSnapshot")]
     pub volume_snapshot: Option<bool>,