Operations

Runbooks for day-2 work. The pages here are the procedures that aren't part of any one app or controller — secrets, database lifecycle, recovery from snapshots.

Page	What it covers
SOPS	How encrypted secrets get into Git, and how Flux decrypts them in-cluster.
Database	Quick PostgreSQL backup / restore commands using kubectl exec + pg_dump / psql.
Database restore from k8up	End-to-end restore of a CNPG cluster from a k8up Restic snapshot, with pv for streamed progress.

For the what and why of the systems these runbooks operate, see:

• Foundation → Flux — the GitOps reconciler
• Platform → CNPG — the Postgres operator
• Platform → k8up — the Restic-backed snapshot driver
• Platform → External Secrets — pulling external creds in as Secrets