From c99d0a978ebd238621af1d70c2bb2eb93d63b1f1 Mon Sep 17 00:00:00 2001 From: chemavx Date: Wed, 15 Jul 2026 19:18:32 +0000 Subject: [PATCH] chore(backup-system): consolidar config rclone en Infisical (mega+b2) El bloque [b2] ya vive en RCLONE_CONF (Infisical /backup-system); los 3 CronJobs vuelven a rclone-conf-infisical y se elimina el secret out-of-band rclone-conf-b2. Co-Authored-By: Claude Fable 5 --- backup-system/configmap-backup-scripts.yaml | 3 +-- backup-system/cronjob-backup-verify.yaml | 4 ++-- backup-system/cronjob-rclone-b2.yaml | 8 ++------ backup-system/cronjob-reddit-intel.yaml | 4 ++-- 4 files changed, 7 insertions(+), 12 deletions(-) diff --git a/backup-system/configmap-backup-scripts.yaml b/backup-system/configmap-backup-scripts.yaml index 1a9d221..a9dca43 100644 --- a/backup-system/configmap-backup-scripts.yaml +++ b/backup-system/configmap-backup-scripts.yaml @@ -252,8 +252,7 @@ data: # Segunda copia offsite (Backblaze B2): "crown jewels" — las 2 copias más # recientes de cada servicio irremplazable (~2GB, cabe en los 10GB gratis). # Todo menos uptime-kuma (622M de historial de heartbeats, prescindible). - # Imagen BusyBox — sin GNU-ismos. Config: Secret out-of-band rclone-conf-b2 - # (mega+b2; consolidar en Infisical RCLONE_CONF cuando se añada [b2] en la UI). + # Imagen BusyBox — sin GNU-ismos. Config: RCLONE_CONF de Infisical (mega+b2). set -e log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*"; } diff --git a/backup-system/cronjob-backup-verify.yaml b/backup-system/cronjob-backup-verify.yaml index 668855a..6662014 100644 --- a/backup-system/cronjob-backup-verify.yaml +++ b/backup-system/cronjob-backup-verify.yaml @@ -36,10 +36,10 @@ spec: - mountPath: /scripts name: scripts volumes: - # rclone-conf-b2: secret out-of-band con mega+b2 (verify comprueba ambos) + # RCLONE_CONF (Infisical /backup-system) contiene mega+b2 desde 2026-07-15 - name: rclone-conf secret: - secretName: rclone-conf-b2 + secretName: rclone-conf-infisical items: - key: RCLONE_CONF path: rclone.conf diff --git a/backup-system/cronjob-rclone-b2.yaml b/backup-system/cronjob-rclone-b2.yaml index 97e3533..7d1e306 100644 --- a/backup-system/cronjob-rclone-b2.yaml +++ b/backup-system/cronjob-rclone-b2.yaml @@ -45,14 +45,10 @@ spec: hostPath: path: /data/backups/backups type: Directory - # Secret OUT-OF-BAND (kubectl, no en git): remotes mega + b2. - # Fuente de verdad deseada: Infisical /backup-system RCLONE_CONF — - # cuando se añada el bloque [b2] en la UI, volver a rclone-conf-infisical - # y borrar este secret (la identity del operator es read-only, no pudo - # escribirse por API el 2026-07-15). + # RCLONE_CONF (Infisical /backup-system) contiene mega+b2 desde 2026-07-15 - name: rclone-conf secret: - secretName: rclone-conf-b2 + secretName: rclone-conf-infisical items: - key: RCLONE_CONF path: rclone.conf diff --git a/backup-system/cronjob-reddit-intel.yaml b/backup-system/cronjob-reddit-intel.yaml index 99e8fb2..d6db4db 100644 --- a/backup-system/cronjob-reddit-intel.yaml +++ b/backup-system/cronjob-reddit-intel.yaml @@ -46,10 +46,10 @@ spec: hostPath: path: /opt/reddit-intel type: Directory - # rclone-conf-b2: secret out-of-band con mega+b2 (sube a los dos) + # RCLONE_CONF (Infisical /backup-system) contiene mega+b2 desde 2026-07-15 - name: rclone-conf secret: - secretName: rclone-conf-b2 + secretName: rclone-conf-infisical items: - key: RCLONE_CONF path: rclone.conf