Velero backup

[devendrasinghrawat]

Hi, I want to understand if Velero an be used as the only backup & restore solution for k8s cluster. The three things that is required to restore any k8s cluster are:-

1. Persistent Volumes: I can see Velero supports this quite efficiently
2. Certificates (pki): I am unable to see that Velero is backing up this
3. etcd: I understand Velero interacts with kube-apiserver to fetch the resources does this mean all etcd data will be backed-up like network policies?

Use case: 3 master & 3 worker node cluster with Velero installed and having scheduled backup enabled (full without any exclusions). Now if one master (or all master) fails and we build new master. Then using Velero restore will master be similar as earlier terminated ones? I believe since nodes are excluded from restore we will have to register worker nodes with master. Also the certificates (pki) would have to be restored from some other backup mechanism. Any other backup restoration required?