feat(velero): 新增velero处理集群备份

apps/apps/halo/helmchart.yaml

@@ -31,18 +31,7 @@ spec:
                     - greenhk  
     image:
       repository: halohub/halo-pro
-      tag: 2.20.8
-    mysql:
-      enabled: false
-    postgresql:
-      enabled: false
-    externalDatabase:
-      platform: postgresql
-      host: cnpg-cluster-hk-rw.infra-data
-      port: 5432
-      user: app
-      password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
-      database: halo
+      tag: 2.20.9
     service:
       type: ClusterIP
     ingress:
@@ -59,7 +48,23 @@ spec:
       hostname: dev.cm
       path: /
       pathType: Prefix
+    podAnnotations:
+      backup.velero.io/backup-volumes: halo-data
+    metrics:
+      enabled: true
+    mysql:
+      enabled: false
+    postgresql:
+      enabled: false
+    externalDatabase:
+      platform: postgresql
+      host: cnpg-cluster-hk-rw.infra-data
+      port: 5432
+      user: app
+      password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
+      database: halo
     haloUsername: rohow
     haloExternalUrl: https://dev.cm
+
     
 

apps/infra/data/cloudnative-pg/helmchart.yaml

@@ -14,10 +14,10 @@ spec:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
             - matchExpressions:
-                - key: node-role.kubernetes.io/master
+                - key: topology.kubernetes.io/region
                   operator: In
                   values:
-                    - "true"
+                    - "cn-sh"
     tolerations:
       - key: "node-role.kubernetes.io/master"
         operator: "Exists"

apps/infra/devops/cert-manager/helmchart-dnspod.yaml

@@ -25,10 +25,10 @@ spec:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
             - matchExpressions:
-                - key: node-role.kubernetes.io/master
+                - key: topology.kubernetes.io/region
                   operator: In
                   values:
-                    - "true"
+                    - "cn-sh"
     tolerations:
       - key: "node-role.kubernetes.io/master"
         operator: "Exists"

apps/infra/devops/cert-manager/helmchart.yaml

@@ -16,10 +16,10 @@ spec:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
             - matchExpressions:
-                - key: node-role.kubernetes.io/master
+                - key: topology.kubernetes.io/region
                   operator: In
                   values:
-                    - "true"
+                    - "cn-sh"
     tolerations:
       - key: "node-role.kubernetes.io/master"
         operator: "Exists"
@@ -36,10 +36,10 @@ spec:
           requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
               - matchExpressions:
-                  - key: node-role.kubernetes.io/master
+                  - key: topology.kubernetes.io/region
                     operator: In
                     values:
-                      - "true"
+                      - "cn-sh"
       tolerations:
         - key: "node-role.kubernetes.io/master"
           operator: "Exists"
@@ -50,10 +50,10 @@ spec:
           requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
               - matchExpressions:
-                  - key: node-role.kubernetes.io/master
+                  - key: topology.kubernetes.io/region
                     operator: In
                     values:
-                      - "true"
+                      - "cn-sh"
       tolerations:
         - key: "node-role.kubernetes.io/master"
           operator: "Exists"

apps/infra/devops/gitea/helmchart.yaml

@@ -48,6 +48,8 @@ spec:
             - path: /
               pathType: Prefix
     gitea:
+      podAnnotations:
+        backup.velero.io/backup-volumes: data
       config:
         APP_NAME: Git.dev.cm
         RUN_MODE: prod

apps/infra/devops/reflector/helmchart.yaml

@@ -14,10 +14,10 @@ spec:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
             - matchExpressions:
-                - key: node-role.kubernetes.io/master
+                - key: topology.kubernetes.io/region
                   operator: In
                   values:
-                    - "true"
+                    - "cn-sh"
     tolerations:
       - key: "node-role.kubernetes.io/master"
         operator: "Exists"

apps/infra/devops/velero/helmchart.yaml

@@ -0,0 +1,57 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: velero
+  namespace: infra-devops
+spec:
+  repo: https://vmware-tanzu.github.io/helm-charts
+  chart: velero
+  targetNamespace: infra-devops
+  version: 8.0.0
+  valuesContent: |-
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+            - matchExpressions:
+                - key: topology.kubernetes.io/region
+                  operator: In
+                  values:
+                    - "cn-sh"
+    tolerations:
+      - key: "node-role.kubernetes.io/master"
+        operator: "Exists"
+        effect: "NoSchedule"
+    snapshotsEnabled: false
+    deployNodeAgent: true
+    defaultRepoMaintainFrequency: 3h
+    repositoryMaintenanceJob:
+      latestJobsCount: 1
+    configuration:
+      backupStorageLocation:
+        - name: default
+          provider: aws
+          bucket: devcm
+          prefix: velero
+          config:
+            region: cn-east-3
+            s3ForcePathStyle: true
+            s3Url: https://obs.cn-east-3.myhuaweicloud.com
+            checksumAlgorithm: ""
+    credentials:
+      useSecret: true
+      secretContents:
+        cloud: |
+          [default]
+          aws_access_key_id = A9RI5BC15F3L9EI8T51T
+          aws_secret_access_key = ky1n3OlNNu7wjgctVjCqb03HWxjZucRGhvcEBp51
+    initContainers:
+      - name: velero-plugin-for-aws
+        image: velero/velero-plugin-for-aws:v1.11.0
+        volumeMounts:
+          - mountPath: /target
+            name: plugins
+    nodeAgent:
+      nodeSelector:
+        backup.velero.io/enable: "true"
+