Feature Request: Automated Cert restoration as part of standard restore operations #119

New issue

Open

opened 2026-10-15 10:40:22 +00:00 by jessebot · 0 comments

jessebot commented

2026-10-15 10:40:22 +00:00

Owner

Describe the feature you'd like, and why

As of #118, we finally have certs being backed up, but we don't have an automated way to restore them, so this should is a ticket to do that work.

We probably want to have this be part of the standard restore schema like this:

restore:
  # set to true to run a restic restore via a k8up job for seaweedfs PVCs,
  # restoring your postgresql database, and all your TLS certs
  enabled: false
  certs:
    # restore your lets-encrypt certs from OpenBao
    enabled: false

## Describe the feature you'd like, and why As of #118, we finally have certs being backed up, but we don't have an automated way to restore them, so this should is a ticket to do that work. We probably want to have this be part of the standard restore schema like this: ```yaml restore: # set to true to run a restic restore via a k8up job for seaweedfs PVCs, # restoring your postgresql database, and all your TLS certs enabled: false certs: # restore your lets-encrypt certs from OpenBao enabled: false ```

jessebot added the

enhancement

label

2026-10-15 10:40:22 +00:00

jessebot self-assigned this

2026-10-15 10:40:22 +00:00

jessebot referenced this issue from oeng/argocd-apps

2026-10-15 11:39:24 +00:00

Setup and test automatically syncing TLS certs into OpenBao #125