adfinis / openshift-etcd-backup

CronJob to perform an etcd backup inside an OpenShift cluster
GNU Affero General Public License v3.0
17 stars 18 forks source link

feat(backup.sh): add separate s3 bucket functionality for kuberesources #88

Open eyenx opened 2 months ago

eyenx commented 2 months ago

Partially fixes #83

Sets new OCP_BACKUP_KUBERESOURCSES_S3_* variables, to push kuberesources which may contain the encrypted keys for the etcd backup (if encryption is enabled on etcd) to a separate bucket.

Only works when using S3, not yet when only using local backup folder.

See https://docs.openshift.com/container-platform/4.12/backup_and_restore/control_plane_backup_and_restore/backing-up-etcd.html

If etcd encryption is enabled, it is recommended to store this second file separately from the etcd snapshot for security reasons. However, this file is required to restore from the etcd snapshot.