basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 2 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/velero/schedules/10-namespace-manifests.yaml
CTO (Paperclip Agent) ec3e9624b3 feat(velero): schedules + PVC exclude annotations (DEV-573) 
- velero/schedules/: cluster-all @ 03:00 (30d TTL, manifests only),
  per-namespace <ns>-manifests @ 03:15+n min (30 in-scope namespaces,
  30d TTL, no fs backup), and per-namespace <ns>-data @ 03:45+n min
  for the whitelist (pocket-id, vaultwarden, vikunja, passbolt;
  14d TTL, defaultVolumesToFsBackup=true).
- All schedules exclude velero, kube-system, kube-node-lease,
  kube-public so the Kopia password Secret never lands in S3.
- apps/app-velero-schedules.yaml: sibling Argo app syncing that
  directory into namespace velero with prune+selfHeal.
- opencloud, harbor(registry+trivy): pod-template annotation
  backup.velero.io/backup-volumes-excludes as a safety net so blob-
  heavy PVCs are never fs-backed-up even under a manual defaultVolumes
  run. nextcloud/monitoring workloads are not Argo-tracked yet — they
  were patched live in the same commit but need a follow-up to source-
  control them.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-12 17:35:49 +00:00

780 lines
18 KiB
YAML
Raw Permalink Blame History

---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: argocd-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: argocd
spec:
schedule: "15 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- argocd
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: basicstack-web-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: basicstack-web
spec:
schedule: "16 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- basicstack-web
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: bookstack-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: bookstack
spec:
schedule: "17 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- bookstack
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: cert-manager-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: cert-manager
spec:
schedule: "18 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- cert-manager
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: container-registry-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: container-registry
spec:
schedule: "19 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- container-registry
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: directus-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: directus
spec:
schedule: "20 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- directus
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: dozzle-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: dozzle
spec:
schedule: "21 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- dozzle
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: forgejo-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: forgejo
spec:
schedule: "22 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- forgejo
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: grist-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: grist
spec:
schedule: "23 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- grist
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: harbor-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: harbor
spec:
schedule: "24 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- harbor
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: headlamp-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: headlamp
spec:
schedule: "25 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- headlamp
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: kaneo-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: kaneo
spec:
schedule: "26 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- kaneo
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: keycloak-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: keycloak
spec:
schedule: "27 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- keycloak
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: monitoring-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: monitoring
spec:
schedule: "28 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- monitoring
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: nextcloud-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: nextcloud
spec:
schedule: "29 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- nextcloud
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: observability-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: observability
spec:
schedule: "30 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- observability
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: opencloud-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: opencloud
spec:
schedule: "31 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- opencloud
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: openwebui-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: openwebui
spec:
schedule: "32 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- openwebui
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: outline-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: outline
spec:
schedule: "33 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- outline
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: pangolin-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: pangolin
spec:
schedule: "34 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- pangolin
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: paperclip-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: paperclip
spec:
schedule: "35 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- paperclip
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: paperclip-system-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: paperclip-system
spec:
schedule: "36 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- paperclip-system
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: passbolt-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: passbolt
spec:
schedule: "37 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- passbolt
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: planka-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: planka
spec:
schedule: "38 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- planka
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: platform-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: platform
spec:
schedule: "39 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- platform
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: pocket-id-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: pocket-id
spec:
schedule: "40 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- pocket-id
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: reloader-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: reloader
spec:
schedule: "41 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- reloader
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: stalwart-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: stalwart
spec:
schedule: "42 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- stalwart
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: vaultwarden-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: vaultwarden
spec:
schedule: "43 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- vaultwarden
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
---
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: vikunja-manifests
namespace: velero
labels:
app.kubernetes.io/part-of: velero-schedules
tier: namespace-manifests
velero.basicstack.de/namespace: vikunja
spec:
schedule: "44 3 * * *"
useOwnerReferencesInBackup: false
template:
ttl: 720h0m0s
includedNamespaces:
- vikunja
excludedNamespaces:
- velero
- kube-system
- kube-node-lease
- kube-public
includeClusterResources: false
snapshotVolumes: false
defaultVolumesToFsBackup: false
storageLocation: default
Reference in a new issue View git blame Copy permalink