jakman85andClaude Opus 4.8
af4f6c07ae
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
47 lines
1.6 KiB
YAML
47 lines
1.6 KiB
YAML
---
|
|
# Velero — off-cluster backup/DR of volumes + resource state (ADR-0003, R-STATE-03). Phase 0 STUB.
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: velero
|
|
namespace: velero
|
|
spec:
|
|
interval: 30m
|
|
chart:
|
|
spec:
|
|
chart: velero
|
|
version: ">=8.0.0 <9.0.0" # TODO(WS-STORAGE): pin at bring-up; Renovate maintains
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: vmware-tanzu
|
|
namespace: velero
|
|
install:
|
|
remediation:
|
|
retries: 3
|
|
upgrade:
|
|
remediation:
|
|
retries: 3
|
|
values:
|
|
# Off-cluster backup target — S3-compatible/NFS (ADR-0003). STUB: concrete target + creds are
|
|
# OQ-2 / prerequisites. Credentials referenced BY NAME only, SOPS-encrypted (WS-SEC).
|
|
configuration:
|
|
backupStorageLocation:
|
|
- name: default
|
|
provider: aws # TODO(WS-STORAGE): S3-compatible endpoint per OQ-2
|
|
bucket: REPLACE-ME
|
|
config:
|
|
region: REPLACE-ME
|
|
s3Url: REPLACE-ME
|
|
s3ForcePathStyle: "true"
|
|
volumeSnapshotLocation:
|
|
- name: default
|
|
provider: REPLACE-ME # Longhorn CSI snapshots / Velero fs-backup
|
|
credentials:
|
|
existingSecret: velero-backup-credentials # SOPS-encrypted (WS-SEC) — name only
|
|
schedules:
|
|
daily:
|
|
schedule: "${VELERO_BACKUP_SCHEDULE}" # overlay knob (cron)
|
|
template:
|
|
ttl: "${VELERO_RETENTION}" # overlay knob (dev short / prod long)
|
|
# TODO(WS-STORAGE, Phase 4): tested restore path (DR drill) is an acceptance gate (R-STATE-03).
|