Appendix - Backup and Restore

Backup and Restore Overview

Backup

The Protegrity Agent Helm chart includes automated Postgres backup and disaster recovery via Velero. Backup runs by default on every installation.

How It Works

A CronJob runs pg_dump every three hours to a dedicated Persistent Volume Claim (PVC). Velero snapshots that PVC to S3 thirty minutes later. This two-stage approach ensures database consistency.

Restore

To recover from a disaster, reinstall the chart with global.restore=true:

helm upgrade --install protegrity-agent \
  --namespace pty-protegrity-agent \
  --set global.restore=true \
  --timeout 15m

To restore a specific point-in-time backup, add --set backup.backupName=<name>.

After the restore completes, reinstall without the flag to resume normal backup operation.

Key Configuration

ValueDefaultDescription
backup.enabledtrueEnable or disable all backup resources
backup.schedule0 */3 * * *CronJob schedule for the pg_dump export
global.restorefalseSet to true to trigger disaster recovery
backup.backupName""Specify a backup name for point-in-time restore

Last modified : April 06, 2026