Gke Backup Dr

GKE Backup & Disaster Recovery

Protects stateful GKE workloads using Backup for GKE.

CLI Reference

# Enable GKE Backup addon (Slow cluster-level update)
gcloud container clusters update  --enable-gke-backup --region  --quiet

# Create Backup Plan
gcloud container backup-restore backup-plans create  \
  --cluster= --location= \
  --retention-days= --cron-schedule="" --all-namespaces --quiet

# Trigger Manual Backup
gcloud container backup-restore backups create  \
  --backup-plan= --location= --quiet

# Create Restore Plan
gcloud container backup-restore restore-plans create  \
  --cluster= --location= --backup-plan= \
  --cluster-resource-conflict-policy=USE_EXISTING_VERSION --namespaced-resource-restore-mode=FAIL_ON_CONFLICT --quiet

# Execute Restore
gcloud container backup-restore restores create  \
  --restore-plan= --backup= --location= --quiet

Best Practices

1. CMEK Encryption: Encrypt backup plans using Customer-Managed Encryption

Keys: --backup-encryption-key=.

1. Scope: Prefer backing up specific namespaces rather than the entire

cluster: --included-namespaces=,.

Troubleshooting & Common Pitfalls (CRITICAL)

> [!IMPORTANT] Slow Operations: Enabling GKE Backup (--enable-gke-backup) > triggers a slow Google Cloud control plane cluster update that takes several > minutes. Rule: Do not run a terminal loop waiting for the GKE Backup > addon to become active. Action: Provide the command to enable the > addon, explain that the operation will proceed in the background, and > immediately proceed to write the backup plan configs. Do not block.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: google
• Source: google/skills
• License: Apache-2.0

Install and usage instructions live in the source repository linked above.