Create Raft snapshots for backup purposes, restore from a snapshot on the same or different cluster, and automate snapshot scheduling using a Kubernetes CronJob. Raft snapshots capture the complete state of OpenBao including all secrets, policies, and configuration.
Prerequisites checklist
Confirm these before running steps:
- TC-OPENBAO-HA-001Raft Cluster Operations
- PVC or S3-compatible storage for snapshot files
1Get current (raft) leader
oc exec -it openbao-0 -n openbao -- bao operator raft leader2Create a manual Raft snapshot
oc exec -it openbao-0 -n openbao -- bao operator raft snapshot save /tmp/backup.snap3Copy the snapshot out of the pod
oc cp openbao-0:/tmp/backup.snap ./backup-$(date +%Y%m%d).snap -n openbao4Verify the snapshot file
ls -la backup-*.snap5Test restore on the same cluster
oc cp ./backup-$(date +%Y%m%d).snap openbao-0:/tmp/restore.snap -n openbaooc exec -it openbao-0 -n openbao -- bao operator raft snapshot restore /tmp/restore.snap6Verify data integrity after restore
oc exec -it openbao-0 -n openbao -- bao secrets listoc exec -it openbao-0 -n openbao -- bao kv list secret/7Deploy a CronJob for automated snapshots (manifest in Commands / YAML tab)
oc apply -f snapshot-cronjob.yaml -n openbao8Trigger a one-off Job from the CronJob
oc create job --from=cronjob/openbao-snapshot test-snapshot -n openbaooc wait --for=condition=complete job/test-snapshot -n openbao --timeout=120soc logs job/test-snapshot -n openbaoThis should return Snapshot saved...