Velero Azure

https://learn.microsoft.com/en-us/azure/aks/hybrid/backup-workload-cluster

Helm

#!/bin/bash
set -eu
. ../includes/main.sh

AZURE_BACKUP_DST_RESOURCE_GROUP=<backup destination>
AZURE_BACKUP_SRC_RESOURCE_GROUP=<aks group with disks and such>
# AZURE_STORAGE_ACCOUNT_ID=<>
AZURE_STORAGE_ACCOUNT_ID=mytest
AZURE_BACKUP_SUBSCRIPTION_ID=${AZURE_SUBSCRIPTION_ID}
AZURE_BACKUP_REGION=USWest2

BLOB_CONTAINER=velero

cat << EOF  > ./velero-credentials
AZURE_SUBSCRIPTION_ID=${AZURE_BACKUP_SUBSCRIPTION_ID}
AZURE_TENANT_ID=${AZURE_TENANT_ID}
AZURE_CLIENT_ID=${AZURE_CLIENT_ID}
AZURE_CLIENT_SECRET=${AZURE_CLIENT_SECRET}
AZURE_RESOURCE_GROUP=${AZURE_BACKUP_SRC_RESOURCE_GROUP}
AZURE_CLOUD_NAME=AzurePublicCloud
EOF


helm_upgrade "--install velero vmware-tanzu/velero \
  --namespace velero \
  --set-file credentials.secretContents.cloud=./velero-credentials \
  --set configuration.backupStorageLocation[0].name=default \
  --set configuration.backupStorageLocation[0].provider=azure \
  --set configuration.backupStorageLocation[0].bucket=velero \
  --set configuration.backupStorageLocation[0].config.resourceGroup=${AZURE_BACKUP_DST_RESOURCE_GROUP} \
  --set configuration.backupStorageLocation[0].config.subscriptionId=${AZURE_BACKUP_SUBSCRIPTION_ID} \
  --set configuration.backupStorageLocation[0].config.storageAccount=${AZURE_STORAGE_ACCOUNT_ID} \
  --set configuration.volumeSnapshotLocation[0].config.resourceGroup=${AZURE_BACKUP_SRC_RESOURCE_GROUP} \
  --set configuration.volumeSnapshotLocation[0].config.subscriptionId=${ARM_SUBSCRIPTION_ID} \
  --set configuration.volumeSnapshotLocation[0].name=default \
  --set configuration.volumeSnapshotLocation[0].provider=azure \
  --set initContainers[0].name=velero-plugin-for-microsoft-azure \
  --set initContainers[0].image=velero/velero-plugin-for-microsoft-azure:main \
  --set initContainers[0].volumeMounts[0].mountPath=/target \
  --set initContainers[0].volumeMounts[0].name=plugins"