# Vault on GKE Backup

**URL:** <https://discuss.hashicorp.com/t/vault-on-gke-backup/62272>\
**Category:** Vault\
**Created:** [January 31, 2024, 6:57am UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272 "2024-01-31T06:57:01Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![omkar.gujar](https://avatars.discourse-cdn.com/v4/letter/o/8edcca/32.png) [@omkar.gujar](https://discuss.hashicorp.com/u/omkar.gujar)\
**Post date:** [January 31, 2024, 6:57am UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272/1 "2024-01-31T06:57:01Z")

</div>

Hello All,

I have setup community Vault on Google kubernetes Engine with Google cloud storage as a backend. I am not sure how to take backup of running vault. I have tried to take backup of backend Google cloud storage using Storage transfer service in GCP. But when I restore the Storage bucket data only policies are getting recovered, secrets and secret engines are not getting recovered. Is there any other better way to back vault which is running on kubernetes.

---

<div class="post-metadata">

**Author:** ![rtwolfe](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/rtwolfe/32/39999_2.png) [@rtwolfe](https://discuss.hashicorp.com/u/rtwolfe)\
**Post date:** [February 2, 2024, 3:50am UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272/2 "2024-02-02T03:50:21Z")

</div>

The root cause of your issue is that simply backing up the Google Cloud Storage bucket used by Vault doesn’t capture the full state of Vault, including its encryption keys and the state of dynamic secrets and engines. For a comprehensive backup, you need to employ a strategy that includes Vault’s data, its configuration, and encryption keys, ensuring all aspects are consistently and securely backed up.

Cheers!

Tim

---

<div class="post-metadata">

**Author:** ![omkar.gujar](https://avatars.discourse-cdn.com/v4/letter/o/8edcca/32.png) [@omkar.gujar](https://discuss.hashicorp.com/u/omkar.gujar)\
**Post date:** [February 2, 2024, 8:23am UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272/3 "2024-02-02T08:23:51Z")

</div>

Thanks Tim. Let us know how to employ a strategy to backup all vault components. We tried to use vault native backup which create backup.snap file but it was not working with GCS as a backend. It requires consul or raft as a backend and we cannot use both raft+ gcs as a backend.

---

<div class="post-metadata">

**Author:** ![jonathanfrappier](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/jonathanfrappier/32/28004_2.png) [@jonathanfrappier](https://discuss.hashicorp.com/u/jonathanfrappier)\
**Post date:** [February 2, 2024, 3:22pm UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272/4 "2024-02-02T15:22:37Z")

</div>

Hi @omkar.gujar ,

Have you reviewed the backup and restore tutorials here:

> **[Standard procedures | Vault | HashiCorp Developer](https://developer.hashicorp.com/vault/tutorials/standard-procedures)**
>
> Guide to standard Vault production cluster operating procedures.

Not specific to running on any specific platform, but should give you an idea of what to back up.

---

<div class="post-metadata">

**Author:** ![omkar.gujar](https://avatars.discourse-cdn.com/v4/letter/o/8edcca/32.png) [@omkar.gujar](https://discuss.hashicorp.com/u/omkar.gujar)\
**Post date:** [February 3, 2024, 5:56am UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272/5 "2024-02-03T05:56:19Z")

</div>

Hi Jonathan,

I have read above documentation from official website but it can backup only if we used raft or consul as a backend storage. It was not working with GCS as a backend.

---

<div class="post-metadata">

**Author:** ![byungsoo.kim](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/byungsoo.kim/32/46522_2.png) [@byungsoo.kim](https://discuss.hashicorp.com/u/byungsoo.kim)\
**Post date:** [March 17, 2026, 12:27pm UTC](https://discuss.hashicorp.com/t/vault-on-gke-backup/62272/6 "2026-03-17T12:27:23Z")

</div>

@omkar.gujar Have you successfully made snapshots and recovered vault from the snapshots? I have a vault cluster with the exact set up as yours and I am trying to figure out the best way to create backup. Thanks in advance
