A container to backup consul to s3. Backup runs on interval and has http trigger with auth.
Next steps:
- Improve error handling
- Get temp AWS creds from vault
Build and push container
$ make push
NOTE depends on nginx-ingress, external-dns, and kube-lego
Set config and secrets in values.yaml
consul:
address: http://consul-consul.vault:8500
backup_interval: 86400
aws:
access_key: <access_key>
secret_key: <secret_key>
s3_bucket: <s3_bucket>
$ make deploy
$ make delete
NOTE uses vault userpass for auth
$ vault auth-enable userpass
$ vault write auth/userpass/users/${VAULT_USER} \
password=${VAULT_PASS} \
policies=default
$ curl -u ${VAULT_USER}:${VAULT_PASS} https://${SERVICE}.${DOMAIN}