Backup and restore

Optional spoke Velero + hub MinIO (fleet-backup.yml) backs workload PVCs and Helm releases.

Console Instances → Backup / Restore (or fleet-site HTTP API) creates FleetInstanceBackup / FleetInstanceRestore CRs. Jobs on fleet/fleet-ansible-runner run Velero plus DCM instance export/rebind.

ansible-playbook fleet-backup.yml -l hub --tags fleet_backup_hub,fleet_backup_spokes \
  --vault-password-file ~/.umkim-vault-pass

Treat RPO/RTO as operator-owned: schedules, object-store durability, and restore drills live in your runbooks. Full lab regression notes remain in the umkim repo (docs/e2e-full-lab-test.md) and are not mirrored here in full.