P3: PostgreSQL disaster recovery test and borgmatic k8s-pg backup #32

Merged
eblume merged 4 commits from feature/p3-postgresql-borgmatic into main 2026-01-19 18:00:32 -08:00

4 commits

Author SHA1 Message Date
be688bd10d Configure borgmatic to backup k8s-pg PostgreSQL
- Add k8s-pg database entry to borgmatic config
- Add k8s-pg entry to pgpass for borgmatic access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 17:51:52 -08:00
ec1198f5f4 Fix apps selfHeal and borgmatic secret field name
- Disable selfHeal on apps app to allow manual revision changes during dev
- Fix secret-borgmatic.yaml.tpl to use db-password field

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 17:46:47 -08:00
420aaf5696 Add borgmatic user to k8s-pg via CloudNativePG
- Create secret-borgmatic.yaml.tpl for 1Password integration
- Add borgmatic managed role with pg_read_all_data privilege
- Update README with borgmatic user documentation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 17:39:27 -08:00
3f6af244f6 Fix borgmatic borg path and add k8s-pg ACL grant
- Add local_path option to borgmatic config for borg binary
- Add ACL grant for tag:homelab -> tag:k8s on port 5432

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 17:38:48 -08:00