veleroConfig

velero-policy.json

{
	"Version": "2012-10-17",
	"Statement": [
    {
        "Effect": "Allow",
        "Resource": [
          "arn:aws:s3:::velero-backup",
          "arn:aws:s3:::velero-backup/*"
        ],
        "Action": [
          "s3:AbortMultipartUpload",
          "s3:DeleteObject",
          "s3:GetObject",
          "s3:ListBucketMultipartUploads",
          "s3:PutObject",
          "s3:ListBucket"
        ]
	  },
    {
        "Effect": "Allow",
        "Resource": "*",
        "Action": [
          "ec2:DescribeVolumes",
          "ec2:DescribeSnapshots",
          "ec2:CreateTags",
          "ec2:CreateVolume",
          "ec2:CreateSnapshot",
          "ec2:DeleteSnapshot"
        ]
    }
	]
}

velero.iamrole.yml

configuration:
  provider: aws
  backupStorageLocation:
    provider: aws
    bucket: velero-backup
    config:
       region: eu-west-1
  volumeSnapshotLocation:
    provider: aws
    config:
       region: eu-west-1

initContainers:
  - name: velero-plugin-for-aws
    image: velero/velero-plugin-for-aws:v1.0.0
    imagePullPolicy: IfNotPresent
    volumeMounts:
      - mountPath: /target
        name: plugins

kubectl:
  image:
    repository: docker.io/bitnami/kubectl
    tag: "1.20"

snapshotsEnabled: true

podAnnotations: 
  iam.amazonaws.com/role: "arn:aws:iam::<AWS-ACCOUNT-ID>:role/<VELERO-ROLE>"

velero.sa.yml

configuration:
  provider: aws
  backupStorageLocation:
    provider: aws
    bucket: velero-backup
    config:
       region: eu-west-1
  volumeSnapshotLocation:
    provider: aws
    config:
       region: eu-west-1

initContainers:
  - name: velero-plugin-for-aws
    image: velero/velero-plugin-for-aws:v1.0.0
    imagePullPolicy: IfNotPresent
    volumeMounts:
      - mountPath: /target
        name: plugins

kubectl:
  image:
    repository: docker.io/bitnami/kubectl
    tag: "1.20"

snapshotsEnabled: true

serviceAccount:
  server:
    create: true
    name: velerosa
    annotations: 
      eks.amazonaws.com/role-arn: "arn:aws:iam::<AWS-ACCOUNT-ID>:role/<VELERO-SA-ROLE>"