---
apiVersion: k8up.io/v1
kind: Backup
metadata:
  name: wordpress-backup

spec:
  failedJobsHistoryLimit: 2
  successfulJobsHistoryLimit: 2
  backend:
    repoPasswordSecretRef:
      name: secret-test-backup
      key: RESTIC_PASSWORD
    s3:
      endpoint: <s3-url>
      bucket: test-1
      accessKeyIDSecretRef:
        name: secret-test-backup
        key: S3_ACCOUNT_NAME
      secretAccessKeySecretRef:
        name: secret-test-backup
        key: S3_ACCOUNT_KEY
  # if self sighned cert
    tlsOptions:
      caCert: /mnt/ca/CA.crt
    volumeMounts:
      - name: ca-tls
        mountPath: /mnt/ca/
  volumes:
    - name: ca-tls
      secret:
        secretName: ca-tls
        defaultMode: 420