Restic

The Restic check:

• Queries a Restic Repository for content
• Checks the integrity and consistency of the repository and data-blobs
• Checks for backup freshness.

apiVersion: canaries.flanksource.com/v1
kind: Canary
metadata:
  name: restic-check
spec:
  interval: 30
  restic:
    - repository: s3:http://minio.minio:9000/restic-canary-checker
      name: restic check
      password:
        valueFrom:
          secretKeyRef:
            name: restic-credentials
            key: PASSWORD
      maxAge: 1h
      accessKey:
        valueFrom:
          secretKeyRef:
            name: restic-credentials
            key: ACCESS_KEY_ID
      secretKey:
        valueFrom:
          secretKeyRef:
            name: restic-credentials
            key: SECRET_ACCESS_KEY

Field	Description	Scheme	Required
maxAge	MaxAge for backup freshness	string	Yes
repository	The restic repository path eg: rest:https://user:pass@host:8000/ or rest:https://host:8000/ or s3:s3.amazonaws.com/bucket_name	string	Yes
caCert	CaCert path to the root cert. In case of self-signed certificates	string
checkIntegrity	When enabled will check the Integrity and consistency of the restic repository	bool
*	All other common fields	Common
Encryption Connection
connection	Path of existing connection to get encryption key e.g. connection://restic/key/ Mutuall exclusive with password	Connection
password	Mutually exclusive with connection	EnvVar	Yes
AWS Connection
awsConnectionName	Path of existing connection to connect to S3 e.g. connection://aws/instance/ Mutuall exclusive with accessKey	Connection
accessKey	Mutually exclusive with awsConnectionName	EnvVar	Yes
secretKey	Mutually exclusive with awsConnectionName	EnvVar	Yes
endpoint	Custom AWS Config endpoint	string
region	AWS region	string
skipTLSVerify	Skip TLS verify when connecting to AWS	bool