Repository navigation
[compliance] Off-cluster copy of postgres backups (residual gap from #321) #3681
Description
Follow-up to #321 (closed) and #310. Found by the #310 measurement pass on 2026-11-07.
- postgres-backup runs nightly (last ok 2026-11-07 02:15) and a restore drill is recorded in dr-runbook.md (2026-08-10).
- The backups never leave the cluster. factory-gitops#70 added an off-cluster copy but was closed by the maintainer because there is no external S3 target.
- Nothing tracked this after [compliance] Business continuity / DR — backups, HA Postgres, RTO/RPO, tested restore #321 closed. soc2-gap-assessment.md (docs(compliance): SOC 2 TSC gap assessment + ISO gap summary (#324) #3678) lists it in the sign-off section.
Needs from the owner: an external S3-compatible target and its credentials, or a risk-register entry accepting the gap with a review date.
Then: re-open the factory-gitops#70 approach against that target and record a restore from the off-cluster copy.
Parent: #310
🤖 Generated with Claude Code
Activity