diff --git a/clusters/yc-infra-prod/infrastructure/patches/vault-unseal.yaml b/clusters/yc-infra-prod/infrastructure/patches/vault-unseal.yaml index 494586f..f1a0619 100644 --- a/clusters/yc-infra-prod/infrastructure/patches/vault-unseal.yaml +++ b/clusters/yc-infra-prod/infrastructure/patches/vault-unseal.yaml @@ -12,7 +12,12 @@ spec: autounseal: enabled: false backup: - enabled: false + enabled: true + schedule: "0 * * * *" + secret: + name: "vault-unseal-backup-s3" + endpoint: "https://storage.yandexcloud.net" + prefix: "vault/yc-infra-prod/unseal-raft-snapshots" injector: enabled: false server: