Data Protection Policies
Automated snapshots, Velero backups, point-in-time recovery, and restore verification for managed resources.
- Local snapshots via Ceph VolumeSnapshot, on a cron schedule with configurable hourly/daily/weekly/monthly/yearly retention counts.
- Remote Velero backups to an object DataResource, with optional cross-region replication (configurable lag budget) and KMS encryption at rest.
- Point-in-time recovery with a configurable recovery window, for database engines with transaction-log support.
- Scheduled restore-verification test-restores to a scratch namespace catch backup corruption before it becomes an incident.
- Data protection is available in managed mode only — external and imported resources use the cloud provider’s or the source system’s own backup tooling.