This repo contains example Kubernetes CronJob manifests to backup the etcd state store of Talos Linux to S3-compatible storage.
The approach uses the command-line tool talosctl and a dedicated Talos API account with limited privileges to create a snapshot file. The snapshot file is then encrypted client-side and backup up using restic.
For full step-by-step instructions, please see my blog post.