Home / BeaverDeck / Docs / Configuration Guide / Backup and restore

Backup, Restore, and Upgrade

Permissions: the shown kubectl operations require Kubernetes access to get and apply the Secret and ConfigMap and to restart the Deployment. Import/export through BeaverDeck User Management instead requires mode: admin.

Back Up Auth Configuration

kubectl -n beaverdeck get secret beaverdeck-config -o yaml > beaverdeck-config-secret.yaml

Treat this file as sensitive. It contains OAuth/OIDC client secrets, Google service account JSON when configured, and local password hashes.

Back Up Suppressed Insights

kubectl -n beaverdeck get configmap beaverdeck-suppressed-insights -o yaml > beaverdeck-suppressed-insights.yaml

Restore

kubectl -n beaverdeck apply -f beaverdeck-config-secret.yaml
kubectl -n beaverdeck apply -f beaverdeck-suppressed-insights.yaml
kubectl -n beaverdeck rollout restart deployment/beaverdeck

Restart after changing the auth Secret outside the Admin UI so startup imports the restored config. Admin UI import updates runtime config and writes the Secret after successful validation.

Upgrade

helm upgrade --install beaverdeck oci://ghcr.io/arequs/charts/beaverdeck --namespace beaverdeck