Wire GCS backup to neuron-db-backup-prod bucket (neuron-494301)

Bucket created, SA key stored in Vault at secret/gcs.
CronJob ExternalSecret updated to pull from secret/gcs.
Hourly restic backup now runs to both R2 and GCS.
This commit is contained in:
Will Anderson
2026-04-25 17:51:57 -05:00
parent 8d97bbd802
commit 7eeff54a11
2 changed files with 10 additions and 69 deletions
@@ -23,8 +23,8 @@ spec:
# ── GCS (secondary) ──
RESTIC_PASSWORD_GCS: "{{ .restic_password_gcs }}"
GCS_SA_KEY_JSON: "{{ .gcs_neuron_backup_sa_key }}"
GOOGLE_PROJECT_ID: "neuron-785695"
RESTIC_REPOSITORY_GCS: "gs:neuron-backup-neuron-785695:/"
GOOGLE_PROJECT_ID: "neuron-494301"
RESTIC_REPOSITORY_GCS: "gs:neuron-db-backup-prod:/"
data:
- secretKey: restic_password
remoteRef:
@@ -59,7 +59,7 @@ spec:
schedule: "0 * * * *"
concurrencyPolicy: Forbid
failedJobsHistoryLimit: 3
successfulJobsHisticsLimit: 3
successfulJobsHistoryLimit: 3
jobTemplate:
spec:
backoffLimit: 2