postgres-operator-restic

Restic logical backup job for zalando/postgres-operator.

It is based on zalando/postgres-operator/docker/logical-backup but runs backups using restic instead of S3.

This image can be configured as logical_backup_docker_image. The operator have to be configured with the following settings in order to supply credentials to restic:

  additional_secret_mount: "postgres-restic"
  additional_secret_mount_path: "/var/run/restic-data"
  logical_backup_docker_image: "microfast/postgres-operator-restic:1.0"

Whereas the postgres-restic secret can have these keys:

• env: File which is sources before running restic
• id_rsa: File which is used as rsa ssh private key for sftp connections
• repository: String that is exported as RESTIC_REPOSITORY
• password: String that is exported as RESTIC_PASSWORD

So to configure the credentials, you can run something like it in the namespace where the DB is running:

kubectl create secret generic postgres-restic --from-literal=repository=sftp://storage.example.com/db-postgres/ --from-file=id_rsa=/tmp/bck.rsa --from-literal=password=1234567890