feat: 纳管共享 etcd 与 k3s 外 PostgreSQL 高可用及备份

2026-09-25 19:34:48 +00:00
parent acd4b55722
commit 3a2fe5fa0c
92 changed files with 4211 additions and 0 deletions
@@ -0,0 +1,45 @@
+# SecretStore 由独立控制面的部署管理，必须只读下述两个管理凭据路径。
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: homelab-postgresql-prod-admin
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: homelab-postgresql-admin
+    kind: SecretStore
+  target:
+    name: homelab-postgresql-prod-admin
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: infra/postgresql/ayatori/prod
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: infra/postgresql/ayatori/prod
+        property: password
+---
+# SecretStore 由独立控制面的部署管理，必须只读下述两个管理凭据路径。
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: homelab-postgresql-dev-admin
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: homelab-postgresql-admin
+    kind: SecretStore
+  target:
+    name: homelab-postgresql-dev-admin
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: infra/postgresql/ayatori/dev
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: infra/postgresql/ayatori/dev
+        property: password