Currently the database is backed up as a cron job on the superset bastion.

This could be improved by having it run on a separate system, perhaps as part of the k8s cluster itself, maybe dumping the backup to a volume. Having a separate server to do the backup isn't as easy as one would hope as ssh is largely blocked from the bastion, the sshd_config file is overwritten by puppet and doesn't allow for keys in user homes, limiting the ability for ansible to do its magic. So maybe a different way.