Use upstream image as default and use bucket name from secret for STO…

…RAGE_CONTAINER
linode · Mar 28, 2024 · 1799ebe · 1799ebe
1 parent 07a734a
commit 1799ebe
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/templates/addons/etcd-backup-restore/etcd-backup-restore.yaml b/templates/addons/etcd-backup-restore/etcd-backup-restore.yaml
@@ -38,7 +38,6 @@ data:
                 "sseCustomerKey": "$${AWS_SSE_CUSTOMER_KEY}"
               }
               EOF
-              cat /data/credentials-file
             volumeMounts:
               - name: data-volume
                 mountPath: /data
@@ -94,7 +93,7 @@ data:
             - --cacert=/etc/kubernetes/pki/etcd/ca.crt
             - --cert=/etc/kubernetes/pki/etcd/healthcheck-client.crt
             - --key=/etc/kubernetes/pki/etcd/healthcheck-client.key
-            image: ${ETCDBR_IMAGE}
+            image: ${ETCDBR_IMAGE:-europe-docker.pkg.dev/gardener-project/releases/gardener/etcdbrctl:v0.28.0}
             securityContext:
               allowPrivilegeEscalation: false
               runAsUser: 0
@@ -114,7 +113,10 @@ data:
             - name: AWS_APPLICATION_CREDENTIALS_JSON
               value: /home/.aws/credentials-file
             - name: STORAGE_CONTAINER
-              value: ${CLUSTER_NAME}-etcd-backup
+              valueFrom:
+                secretKeyRef:
+                  name: etcd-backup
+                  key: "bucket_name"
             volumeMounts:
             - mountPath: /etc/kubernetes/pki
               name: k8s-certs