feat(cnpg): 数据库自动备份提交

apps/README.md

@@ -6,4 +6,20 @@ kubectl run -i --tty --rm --restart=Never \
     --overrides='{"apiVersion": "v1", "spec": {"nodeSelector": {"kubernetes.io/hostname": "homea"}}}' \
     --image=nicolaka/netshoot:latest \
     debug -- sh
-```
+```
+
+### 密钥相关
+可以将helm部署中使用到的密钥放到k8s的secret中
+然后使用reflector将secret中的密钥同步到其他namespace中
+```shell
+kubectl -n infra-devops create secret generic s3-devcm-hw \
+    --from-literal=ACCESS_KEY_ID=xxxxx \
+    --from-literal=ACCESS_SECRET_KEY=xxxxx
+    
+kubectl -n infra-devops annotate secret s3-devcm-hw \
+    reflector.v1.k8s.emberstack.com/reflection-allowed=true \
+    reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces=infra-data \
+    reflector.v1.k8s.emberstack.com/reflection-auto-enabled=true \
+    reflector.v1.k8s.emberstack.com/reflection-auto-namespace=infra-data --overwrite
+    
+```