Velero Backup Configuration
Helm values and BackupSchedule manifests for Velero backing up to S3 with encryption. Includes a tested restore runbook and backup verification cron job.
Velero Backups That You Can Actually Restore From
Setting up Velero is easy. Setting up Velero so that your backups are encrypted, verified, and you know the restore actually works before you need it — that takes a few extra hours. This pack skips the trial and error.
What is Included
- Helm values for Velero with S3 backend, SSE-S3 encryption, and IRSA authentication
- BackupSchedule manifests for daily full-cluster and hourly namespace-scoped backups
- Backup retention and storage lifecycle policy configuration
- Restore runbook — tested step-by-step procedure for full cluster and single namespace restores
- Backup verification cron job that performs a test restore to a canary namespace nightly
Developer Experience
Install Velero with the included values file, apply the schedule manifests, and your cluster is being backed up within minutes. The verification cron job gives you confidence that backups are actually restorable — without waiting for a disaster to find out.
What You Get
values/— Velero Helm values with annotation commentsschedules/— BackupSchedule manifests for daily and hourly schedulesverify/— cron job manifest for nightly restore verificationiam/— IRSA Terraform module for Velero S3 accessrunbooks/restore.md— tested restore procedure with rollback steps
Requirements
- Kubernetes >= 1.22, Helm >= 3.8
- AWS S3 bucket for backup storage
- IRSA-capable EKS cluster (or adapt for access key auth)