Complete DR of Stateful Workloads, PVs and CSI Snapshots via Flux and Vault OSS
summary
Installs BookStack with Helm, captures the created PVC and PV YAML, patches node affinity and sets reclaimPolicy=Retain so volumes survive uninstall, and fixes Helm-generated MariaDB passwords by injecting them into a values.yaml that is SOPS-encrypted and stored in Git. Flux takes over via the Flux Helm controller to redeploy and the BookStack data restores successfully. Uses kubectl-neat to clean Kubernetes-added annotations. Notes: Azure blocks native CSI snapshot management, so offsite or restic-style backups are required.
AI-written summary · about
chapters (22)
- 0:00Disaster recovery with Flux and Vault
- 1:05Beginner talk on CSI volumes
- 2:28Installing BookStack with Helm
- 5:29PVC and PV lifecycle
- 7:14Reclaim policy defaults
- 8:43Retain policy for data
- 9:45Cleaning PVCs with kubectl neat
- 11:11Preparing PV and PVC for rebinding
- 12:37Restoring persistent volumes
- 13:40Restore failure and missing steps
- 14:48Database passwords in Helm values
- 15:30GitOps with Flux for Helm
- 17:56Encrypting secrets with SOPS
- 18:38Verifying Flux Helm takeover
- 19:19CSI snapshots limitations
- 20:24Disaster recovery runbook
- 21:47External database risks
- 22:50Snapshot cascade deletion risks
- 23:11Vault for secrets with Flux
- 24:15Backup strategies beyond APIs
- 25:37Locking resources
- 25:57Summary
related talks
37mHelm Users! What Flux 2 Can Do For You
40mTreating Kubernetes as a Linux Distro: APT-Style Packaging with FluxCD
08mFlux-Powered Bootstrapping a Kubernetes With GitOps and CaC
23mGit Push, Sit Back: Level up AKS Deployments With Flux V2
39mEnhance Your Kubernetes Experience with GitOps & Flux
29mAccelerating GitOps Adoption with Flux
35mTalking to Your Cluster: Conversational GitOps with Flux MCP
22mPush to Prod: GitOps Workflows on k8s with FluxCD