e2e/definitions/archive/s3-mtls-archive-tls.yaml
apiVersion: k8up.io/v1
kind: Archive
metadata:
name: k8up-s3-mtls-archive-tls
namespace: k8up-e2e-subject
spec:
failedJobsHistoryLimit: 1
successfulJobsHistoryLimit: 1
restoreMethod:
tlsOptions:
caCert: /mnt/tls/ca.crt
clientCert: /mnt/tls/tls.crt
clientKey: /mnt/tls/tls.key
s3:
endpoint: https://minio-mtls.minio-e2e.svc.cluster.local
bucket: archive
accessKeyIDSecretRef:
name: backup-credentials
key: username
secretAccessKeySecretRef:
name: backup-credentials
key: password
volumeMounts:
- name: minio-client-mtls
mountPath: /mnt/tls/
backend:
repoPasswordSecretRef:
name: backup-repo
key: password
tlsOptions:
caCert: /mnt/ca/ca.crt
s3:
endpoint: https://minio-tls.minio-e2e.svc.cluster.local
bucket: backup
accessKeyIDSecretRef:
name: backup-credentials
key: username
secretAccessKeySecretRef:
name: backup-credentials
key: password
volumeMounts:
- name: minio-ca-tls
mountPath: /mnt/ca/
podSecurityContext:
fsGroup: $ID
runAsUser: $ID
volumes:
- name: minio-ca-tls
secret:
secretName: minio-ca-tls
defaultMode: 420
- name: minio-client-mtls
secret:
secretName: minio-client-mtls
defaultMode: 420