jakman85andClaude Opus 4.8
af4f6c07ae
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
23 lines
1.1 KiB
Markdown
23 lines
1.1 KiB
Markdown
# platform/velero
|
|
|
|
**Velero** — off-cluster backup and DR of volumes + Kubernetes resource state.
|
|
|
|
- **Governing ADR:** [ADR-0003 — Longhorn (+ bulk tier + Velero)](../../../home-network-k3s/decisions/adr-0003-storage-longhorn.md)
|
|
- **Spec:** [docs/04 — Storage & State](../../../home-network-k3s/docs/04-storage-and-state.md)
|
|
- **Serves:** R-STATE-03
|
|
- **Owner:** WS-STORAGE
|
|
|
|
## What this stub is
|
|
|
|
Flux `HelmRelease` with a placeholder off-cluster backup target (S3-compatible/NFS) and scheduled
|
|
backups whose cadence/retention are overlay knobs (`${VELERO_*}`, R-ENV-02). Backup credentials are
|
|
referenced **by name** (`velero-backup-credentials`), **SOPS-encrypted** (WS-SEC). Works with Longhorn
|
|
volume backups.
|
|
|
|
## TODO (later phases)
|
|
|
|
- **OQ-2 (human):** concrete off-cluster target (endpoint, bucket, resilience) is a prerequisite.
|
|
- **Phase 4 (WS-STORAGE):** wire the target + Longhorn backups; prove a **DR drill** — restore a
|
|
namespace + volumes from off-cluster backup (R-STATE-03, Phase-4 exit gate).
|
|
- **DR-critical services** (Gitea, Keycloak, Nextcloud) get off-cluster backup + mirror per docs/05.
|