webhook-safe.yaml

# Minimal webhook job: no plaintext secrets — use token_env / paths per job-format-v1.
api_version: iobackup.io/v1
kind: BackupJob
metadata:
  job_id: webhook-safe-demo
  name: Webhook safe demo (token via env)
spec:
  enabled: true
  operation:
    type: backup
  artifact:
    mode: stream
    staging:
      enabled: false
  notifications:
    webhooks:
      - name: notify
        enabled: true
        events: [on_finished]
        policy:
          include_job_snapshot: false
          include_manifest: false
          include_labels: true
          include_paths: false
        request:
          method: POST
          url: "https://httpbin.org/post"
          timeout: 5s
          auth:
            type: bearer
            token_env: IOBACKUP_WEBHOOK_TOKEN
        retry:
          enabled: false
          max_attempts: 1
  tasks:
    - task_id: fs1
      source:
        type: filesystem
        config:
          paths:
            - /var/tmp/iobackup-webhook-safe
      destination:
        type: local
        config:
          path: /var/tmp/iobackup-webhook-safe-out