etcdctl snapshot save命令备份集群状态数据，需指定证书路径（如--cacert=/etc/kubernetes/pki/etcd/ca.crt）。kubeconfig文件、证书及/etc/kubernetes目录下的配置。kubectl cp备份Pod数据，或使用rsync备份持久卷（PV）数据。etcdctl snapshot restore恢复数据，替换数据目录后重启服务。kubeconfig文件及证书，重启API Server、etcd等组件。kubectl cp或rsync恢复Pod和PV数据。ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 \
--cacert=/etc/kubernetes/pki/etcd/ca.crt \
--cert=/etc/kubernetes/pki/etcd/server.crt \
--key=/etc/kubernetes/pki/etcd/server.key \
snapshot save /opt/backup/etcd-$(date +%Y%m%d).db
ETCDCTL_API=3 etcdctl snapshot restore /opt/backup/etcd-20250912.db \
--data-dir=/var/lib/etcd-restore
mv /var/lib/etcd-restore /var/lib/etcd
chown -R etcd:etcd /var/lib/etcd
systemctl restart etcd kube-apiserver
