---
# Velero — off-cluster backup/DR of volumes + resource state (ADR-0003, R-STATE-03). Phase 0 STUB.
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: velero
  namespace: velero
spec:
  interval: 30m
  chart:
    spec:
      chart: velero
      version: ">=8.0.0 <9.0.0"   # TODO(WS-STORAGE): pin at bring-up; Renovate maintains
      sourceRef:
        kind: HelmRepository
        name: vmware-tanzu
        namespace: velero
  install:
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    # Off-cluster backup target — S3-compatible/NFS (ADR-0003). STUB: concrete target + creds are
    # OQ-2 / prerequisites. Credentials referenced BY NAME only, SOPS-encrypted (WS-SEC).
    configuration:
      backupStorageLocation:
        - name: default
          provider: aws                 # TODO(WS-STORAGE): S3-compatible endpoint per OQ-2
          bucket: REPLACE-ME
          config:
            region: REPLACE-ME
            s3Url: REPLACE-ME
            s3ForcePathStyle: "true"
      volumeSnapshotLocation:
        - name: default
          provider: REPLACE-ME          # Longhorn CSI snapshots / Velero fs-backup
    credentials:
      existingSecret: velero-backup-credentials   # SOPS-encrypted (WS-SEC) — name only
    schedules:
      daily:
        schedule: "${VELERO_BACKUP_SCHEDULE}"      # overlay knob (cron)
        template:
          ttl: "${VELERO_RETENTION}"               # overlay knob (dev short / prod long)
    # TODO(WS-STORAGE, Phase 4): tested restore path (DR drill) is an acceptance gate (R-STATE-03).