jakman85andClaude Opus 4.8
af4f6c07ae
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
1.1 KiB
1.1 KiB
platform/velero
Velero — off-cluster backup and DR of volumes + Kubernetes resource state.
- Governing ADR: ADR-0003 — Longhorn (+ bulk tier + Velero)
- Spec: docs/04 — Storage & State
- Serves: R-STATE-03
- Owner: WS-STORAGE
What this stub is
Flux HelmRelease with a placeholder off-cluster backup target (S3-compatible/NFS) and scheduled
backups whose cadence/retention are overlay knobs (${VELERO_*}, R-ENV-02). Backup credentials are
referenced by name (velero-backup-credentials), SOPS-encrypted (WS-SEC). Works with Longhorn
volume backups.
TODO (later phases)
- OQ-2 (human): concrete off-cluster target (endpoint, bucket, resilience) is a prerequisite.
- Phase 4 (WS-STORAGE): wire the target + Longhorn backups; prove a DR drill — restore a namespace + volumes from off-cluster backup (R-STATE-03, Phase-4 exit gate).
- DR-critical services (Gitea, Keycloak, Nextcloud) get off-cluster backup + mirror per docs/05.