fix: update backup checks in post_tests.yml and related markdown files

Author: ruzickap

.github/workflows/post_tests.yml

@@ -12,7 +12,7 @@ on:
           - 2022-11-27-cheapest-amazon-eks
           - 2022-12-24-amazon-eks-karpenter-tests 2022-11-27-cheapest-amazon-eks
           # - 2023-03-08-trivy-operator-grafana 2022-11-27-cheapest-amazon-eks
-          # - 2023-03-20-velero-and-cert-manager 2022-11-27-cheapest-amazon-eks
+          - 2023-03-20-velero-and-cert-manager 2022-11-27-cheapest-amazon-eks
           # - 2023-04-01-secrets-store-csi-driver-reloader 2023-03-20-velero-and-cert-manager 2022-11-27-cheapest-amazon-eks
           - 2023-04-01-secrets-store-csi-driver-reloader 2022-11-27-cheapest-amazon-eks
           - 2023-06-06-my-favourite-krew-plugins-kubectl 2022-11-27-cheapest-amazon-eks

_posts/2023/2023-03-20-velero-and-cert-manager.md

@@ -85,8 +85,9 @@ kubectl wait --namespace cert-manager --timeout=15m --for=condition=Ready cluste
 
 Create new certificate and let it sign by Let's Encrypt to validate it:
 
-```shell
-tee "${TMP_DIR}/${CLUSTER_FQDN}/k8s-cert-manager-certificate-production.yml" << EOF | kubectl apply -f -
+```bash
+if ! aws s3 ls "s3://${CLUSTER_FQDN}/velero/backups" | grep -q velero-weekly-backup-cert-manager; then
+  tee "${TMP_DIR}/${CLUSTER_FQDN}/k8s-cert-manager-certificate-production.yml" << EOF | kubectl apply -f -
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
@@ -107,7 +108,8 @@ spec:
     - "*.${CLUSTER_FQDN}"
     - "${CLUSTER_FQDN}"
 EOF
-kubectl wait --namespace cert-manager --for=condition=Ready --timeout=10m certificate ingress-cert-production
+  kubectl wait --namespace cert-manager --for=condition=Ready --timeout=10m certificate ingress-cert-production
+fi
 ```
 
 ### Create S3 bucket
@@ -120,8 +122,9 @@ kubectl wait --namespace cert-manager --for=condition=Ready --timeout=10m certif
 Use CloudFormation to create S3 bucket which will be used to store backups from
 Velero.
 
-```shell
-cat > "${TMP_DIR}/${CLUSTER_FQDN}/aws-s3.yml" << \EOF
+```bash
+if ! aws s3 ls "s3://${CLUSTER_FQDN}"; then
+  cat > "${TMP_DIR}/${CLUSTER_FQDN}/aws-s3.yml" << \EOF
 AWSTemplateFormatVersion: 2010-09-09
 
 Parameters:
@@ -256,9 +259,10 @@ Outputs:
     Value: !Ref S3ChangeNotificationTopic
 EOF
 
-aws cloudformation deploy --capabilities CAPABILITY_NAMED_IAM \
-  --parameter-overrides S3BucketName="${CLUSTER_FQDN}" EmailToSubscribe="${MY_EMAIL}" \
-  --stack-name "${CLUSTER_NAME}-s3" --template-file "${TMP_DIR}/${CLUSTER_FQDN}/aws-s3.yml"
+  aws cloudformation deploy --capabilities CAPABILITY_NAMED_IAM \
+    --parameter-overrides S3BucketName="${CLUSTER_FQDN}" EmailToSubscribe="${MY_EMAIL}" \
+    --stack-name "${CLUSTER_NAME}-s3" --template-file "${TMP_DIR}/${CLUSTER_FQDN}/aws-s3.yml"
+fi
 ```
 
 ## Install Velero
@@ -413,8 +417,10 @@ default   aws        k01.k8s.mylabs.dev/velero   Available   2023-03-23 20:16:20
 
 Initiate backup process and save the necessary cert-manager object to S3:
 
-```shell
-velero backup create --labels letsencrypt=production --ttl 2160h0m0s --from-schedule velero-weekly-backup-cert-manager
+```bash
+if ! aws s3 ls "s3://${CLUSTER_FQDN}/velero/backups" | grep -q velero-weekly-backup-cert-manager; then
+  velero backup create --labels letsencrypt=production --ttl 2160h0m0s --from-schedule velero-weekly-backup-cert-manager
+fi
 ```
 
 Check the backup details:
@@ -670,7 +676,7 @@ Few commands showing the details after cert-manager renewed the certificate.
 
 Examine the certificate:
 
-```shell
+```bash
 kubectl describe certificates -n cert-manager ingress-cert-production
 ```
 

_posts/2025/2025-02-01-eks-auto-cert-manager-velero.md

@@ -104,7 +104,7 @@ kubectl label secret --namespace cert-manager letsencrypt-production-dns letsenc
 Create a new certificate and have it signed by Let's Encrypt for validation:
 
 ```bash
-if ! aws s3 ls "s3://${CLUSTER_FQDN}/velero/backups" | grep -q .; then
+if ! aws s3 ls "s3://${CLUSTER_FQDN}/velero/backups" | grep -q velero-monthly-backup-cert-manager-production; then
   tee "${TMP_DIR}/${CLUSTER_FQDN}/k8s-cert-manager-certificate-production.yml" << EOF | kubectl apply -f -
   apiVersion: cert-manager.io/v1
   kind: Certificate
@@ -539,7 +539,7 @@ default   aws        k01.k8s.mylabs.dev/velero   Available   2025-02-06 06:21:59
 Initiate the backup process and store the required cert-manager objects in S3.
 
 ```bash
-if ! aws s3 ls "s3://${CLUSTER_FQDN}/velero/backups" | grep -q .; then
+if ! aws s3 ls "s3://${CLUSTER_FQDN}/velero/backups" | grep -q velero-monthly-backup-cert-manager-production; then
   velero backup create --labels letsencrypt=production --ttl 2160h --from-schedule velero-monthly-backup-cert-manager-production --wait
 fi
 ```