kind: Deployment
apiVersion: apps/v1
metadata:
  name: mongodb-backup
  namespace: <mongo namespace>
  labels:
    foundationservices.cloudpak.ibm.com: mongo-data
spec:
  selector:
    matchLabels:
      foundationservices.cloudpak.ibm.com: mongo-data
  template:
    metadata:
      annotations:
        backup.velero.io/backup-volumes: mongodump
        pre.hook.backup.velero.io/command: '["bash", "-c", "rm -rf /dump/dump/*; cat /cred/mongo-certs/tls.crt /cred/mongo-certs/tls.key > /work-dir/mongo.pem; cat /cred/cluster-ca/tls.crt /cred/cluster-ca/tls.key > /work-dir/ca.pem; mongodump --oplog --out /dump/dump --host mongodb:$MONGODB_SERVICE_PORT --username $ADMIN_USER --password $ADMIN_PASSWORD --authenticationDatabase admin --ssl --sslCAFile /work-dir/ca.pem --sslPEMKeyFile /work-dir/mongo.pem"]'
        post.hook.restore.velero.io/command: '["bash", "-c", "cat /cred/mongo-certs/tls.crt /cred/mongo-certs/tls.key > /work-dir/mongo.pem; cat /cred/cluster-ca/tls.crt /cred/cluster-ca/tls.key > /work-dir/ca.pem; mongorestore --db platform-db --host mongodb:$MONGODB_SERVICE_PORT --username $ADMIN_USER --password $ADMIN_PASSWORD --authenticationDatabase admin --ssl --sslCAFile /work-dir/ca.pem --sslPEMKeyFile /work-dir/mongo.pem /dump/dump/platform-db --drop"]'
      name: mongodb-backup
      namespace: <mongo namespace>
      labels:
        foundationservices.cloudpak.ibm.com: mongo-data
    spec:
      containers:
      - name: mongodb-backup
        image: icr.io/cpopen/cpfs/ibm-mongodb:4.2.1-mongodb.4.0.24
        command: ["bash", "-c", "sleep infinity"]
        volumeMounts:
        - mountPath: "/dump"
          subpath: dump
          name: mongodump
        - mountPath: "/cred/mongo-certs"
          name: icp-mongodb-client-cert
        - mountPath: "/cred/cluster-ca"
          name: cluster-ca-cert
        - mountPath: "/work-dir"
          name: tmp-mongodb
        env:
          - name: ADMIN_USER
            valueFrom:
              secretKeyRef:
                name: icp-mongodb-admin
                key: user
          - name: ADMIN_PASSWORD
            valueFrom:
              secretKeyRef:
                name: icp-mongodb-admin
                key: password
      volumes:
      - name: mongodump
        persistentVolumeClaim:
          claimName: cs-mongodump
      - name: icp-mongodb-client-cert
        secret:
          secretName: icp-mongodb-client-cert
      - name: cluster-ca-cert
        secret:
          secretName: mongodb-root-ca-cert
      - name: tmp-mongodb
        emptyDir: {}