From 6c05151a2e6018610d2476131ce88a1fbe6f4c64 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Sun, 23 Nov 2025 17:16:30 +0100
Subject: [PATCH] fix(keycloak): Add backups

---
 values/keycloak/values/values-prod.yaml | 45 +++++++++++++++++++++++--
 1 file changed, 42 insertions(+), 3 deletions(-)

diff --git a/values/keycloak/values/values-prod.yaml b/values/keycloak/values/values-prod.yaml
index e01da37c..9af25445 100644
--- a/values/keycloak/values/values-prod.yaml
+++ b/values/keycloak/values/values-prod.yaml
@@ -124,6 +124,45 @@ extraDeploy:
     storage:
       resizeInUseVolumes: true
       size: 10Gi
-    backup:
-      retentionPolicy: 60d
-      target: prefer-standby
+- apiVersion: barmancloud.cnpg.io/v1
+  kind: ObjectStore
+  metadata:
+    name: tos-store
+    namespace: keycloak
+  spec:
+    retentionPolicy: "7d"
+    configuration:
+      destinationPath: s3://cnpg/prod-keycloak-db
+      endpointURL: http://10.255.241.30:30080
+      s3Credentials:
+        accessKeyId:
+          name: cnpg-s3
+          key: access_key
+        secretAccessKey:
+          name: cnpg-s3
+          key: access_secret
+      wal:
+        compression: snappy
+- apiVersion: postgresql.cnpg.io/v1
+  kind: ScheduledBackup
+  metadata:
+    name: prod-keycloak-db
+    namespace: keycloak
+  spec:
+    schedule: "0 0 1 * * *"
+    backupOwnerReference: self
+    cluster:
+      name: prod-keycloak-db
+    method: plugin
+    pluginConfiguration:
+      name: barman-cloud.cloudnative-pg.io
+- apiVersion: monitoring.coreos.com/v1
+  kind: PodMonitor
+  metadata:
+   name: prod-keycloak-db-monitor
+  spec:
+    selector:
+      matchLabels:
+        cnpg.io/cluster: prod-keycloak-db
+    podMetricsEndpoints:
+    - port: metrics