rancher-backup

Rancher Backup

Chainguard's redistribution of the Rancher Backup Helm chart, pre-configured with hardened Chainguard Images.

This chart deploys Rancher's backup-restore-operator, which backs up and restores the Rancher application (and other Kubernetes resources selected by a ResourceSet) on any Kubernetes cluster. It requires the CRDs from the rancher-backup-crd chart to be installed first.

Prerequisites

Authentication is required. First, authenticate with Chainguard:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret:

kubectl create namespace cattle-resources-system
kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace cattle-resources-system

Installation

Install the CRDs, then the operator:

helm install rancher-backup-crd oci://cgr.dev/ORGANIZATION/charts/rancher-backup-crd \
  --namespace cattle-resources-system

helm install rancher-backup oci://cgr.dev/ORGANIZATION/charts/rancher-backup \
  --namespace cattle-resources-system \
  --set imagePullSecrets[0].name=cgr-pull-secret

About This Chart

This is a redistribution of the upstream Rancher backup-restore-operator Helm chart. All upstream configuration options apply.

The chart uses the following Chainguard Images:

• backup-restore-operator -- the backup and restore controller
• kubectl -- used by the chart's hook jobs

A FIPS variant using backup-restore-operator-fips and kubectl-fips is also available.

For full documentation, see: https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/backup-restore-and-disaster-recovery