apiVersion: v1
kind: Secret
metadata:
  name: backup-target-credential
  namespace: longhorn-system
type: Opaque
data:
  AWS_ACCESS_KEY_ID: <base64-encoded-access-key>
  AWS_SECRET_ACCESS_KEY: <base64-encoded-secret-key>
---
apiVersion: longhorn.io/v1beta1
kind: Setting
metadata:
  name: backup-target
value: s3://your-bucket-name@us-east-1/
---
apiVersion: longhorn.io/v1beta1
kind: Setting
metadata:
  name: backup-target-credential-secret
value: backup-target-credential

apiVersion: longhorn.io/v1beta1
kind: Setting
metadata:
  name: backup-target
value: nfs://192.168.1.100:/backup

apiVersion: longhorn.io/v1beta1
kind: RecurringJob
metadata:
  name: backup-daily
spec:
  cron: "0 0 * * *"
  task: "backup"
  groups:
  - default
  retain: 7
  concurrency: 2

apiVersion: longhorn.io/v1beta1
kind: Volume
metadata:
  name: backup-volume
spec:
  numberOfReplicas: 3
  backupPolicy:
    enabled: true
    schedule: "0 */6 * * *"
    retain: 5

apiVersion: longhorn.io/v1beta1
kind: Volume
metadata:
  name: restored-volume
spec:
  numberOfReplicas: 3
  fromBackup: "backup-target/backup-name"

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: restored-pvc
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: longhorn
  resources:
    requests:
      storage: 10Gi
  dataSource:
    name: backup-name
    kind: VolumeSnapshot
    apiGroup: snapshot.storage.k8s.io

apiVersion: longhorn.io/v1beta1
kind: Volume
metadata:
  name: dr-volume
spec:
  numberOfReplicas: 3
  fromBackup: "s3://backup-bucket@us-east-1/backups/volume-backup?backup=backup-name"

apiVersion: longhorn.io/v1beta1
kind: RecoveryPlan
metadata:
  name: site-recovery
spec:
  recoveryPoint: "latest"
  volumes:
  - name: critical-volume-1
    backup: "backup-name-1"
  - name: critical-volume-2
    backup: "backup-name-2"

apiVersion: snapshot.storage.k8s.io/v1
kind: VolumeSnapshot
metadata:
  name: volume-snap-1
spec:
  volumeSnapshotClassName: longhorn-snapshot-class
  source:
    persistentVolumeClaimName: pvc-1

apiVersion: longhorn.io/v1beta1
kind: RecurringJob
metadata:
  name: snapshot-hourly
spec:
  cron: "0 * * * *"
  task: "snapshot"
  groups:
  - default
  retain: 24
  concurrency: 2

apiVersion: batch/v1
kind: Job
metadata:
  name: backup-verify
spec:
  template:
    spec:
      containers:
      - name: verify
        image: longhornio/longhorn-manager:v1.5.1
        command: ["longhorn", "backup", "verify"]

apiVersion: batch/v1
kind: Job
metadata:
  name: restore-test
spec:
  template:
    spec:
      containers:
      - name: restore-test
        image: longhornio/longhorn-manager:v1.5.1
        command:
        - /bin/sh
        - -c
        - |
          longhorn backup restore test-restore

#!/bin/bash
# Backup validation script
backup_name=$1
restore_name="test-restore-${RANDOM}"

# Restore backup
kubectl create -f - <<EOF
apiVersion: longhorn.io/v1beta1
kind: Volume
metadata:
  name: ${restore_name}
spec:
  numberOfReplicas: 1
  fromBackup: "${backup_name}"
EOF

# Wait for restore
kubectl wait --for=condition=Ready volume/${restore_name}

# Validate data
# Add your validation logic here

# Cleanup
kubectl delete volume ${restore_name}