feat(infra): drop in-cluster minio, add pg backup + PVC protection
All checks were successful
AI Code Review / ai-review (pull_request) Successful in 7s

PROD: object storage moves to UpCloud Managed Object Storage (existing
drops bucket) instead of single-node in-cluster MinIO — durable,
UpCloud-replicated, no PVC to back up.

- Remove forte-drop-minio StatefulSet entirely.
- Add forte-drop-pg-backup CronJob: nightly pg_dump -> gzip -> upload to
  s3://drops/_pgbackups/ (collision-proof prefix), 30-day retention.
  Reuses forte-drop-secrets S3 creds (app user has s3:* on drops).
- PVC prune/delete protection on the postgres volumeClaimTemplate.
This commit is contained in:
Sten
2026-05-29 09:28:51 +02:00
parent 178bf8cc78
commit dd9819bdbe
9 changed files with 96 additions and 210 deletions

View File

@@ -5,7 +5,6 @@ resources:
- vaultwarden-postgresql
- vaultwarden
- forte-drop-postgresql
- forte-drop-minio
# No patches needed — base already has "upc-dev" paths
# upc-dev is the default/base cluster