stolostron / cluster-backup-operator

Backup and restore cluster hub resources

Welcome to the Stolostron Project

Getting started with Red Hat Advanced Cluster Management for Kubernetes? Ready to manage your fleet of OpenShift and Kubernetes clusters? You're in the right place! The Stolostron project houses the projects built into Red Hat Advanced Cluster Management for Kubernetes. This repo contains tools, integrations, and suggestions to jumpstart your multicluster and multicloud presence!

Looking for Development Preview Content?

If you're looking to try out our Development Preview content - you're in the right place! Visit our Development Preview Section to discover, install, use, and provide feedback for our new features and capabilities. Your feedback is most welcome and will help us shape the future of these features!

Getting Started Resources

Day 0

Description	Link
Sizing Documentation	TBD
Results from 1k SNO Scale Testing	TBD
Results from 2k SNO Scale Testing	TBD

Day 1

GITOPS is short for Openshift-Gitops. Pipeline is short for Openshift-Pipelines. AAP is Ansible Automation Platform.

Description	Link	Technology
Bare metal Zero Touch Provisioning	https://github.com/jparrill/ztp-the-hard-way	ACM, GITOPS
OpenShift 4 Azure IPI installation	https://github.com/stolostron/ocp4-azure-ipi	AAP
ACM managed service Deployment	https://github.com/stolostron/acm-aap-aas-operations	AAP, ACM, GITOPS
Openshift-Pipeline ACM Pipelines	https://github.com/stolostron/openshift-pipelines	Pipeline

Day 2

Description	Link
A comprehensive collection of managing your fleet using RHACM Policies	https://github.com/stolostron/policy-collection
Collection of Kustomize bases	https://github.com/redhat-cop/gitops-catalog
Operate First	https://github.com/operate-first/apps
cm cli	https://github.com/stolostron/cm-cli
RHACM Ansible collection project	https://github.com/stolostron/ansible-collection.core
RHACM: How to configure an ApplicationSet to deploy Policies?	https://access.redhat.com/solutions/6553071
RHACM: Can Policies also be applied via Gitops when using ArgoCD?	https://access.redhat.com/solutions/6435991
RHACM: What is the Polling Interval in ArgoCD-Applications compared to RHACM-Applications?	https://access.redhat.com/solutions/6390571

Reference:

https://www.redhat.com/en/blog/how-does-red-hat-support-day-2-operations

cluster-backup-operator's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• Update quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1 Docker digest to b7f9f87 (release-2.11)
• Update quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4 Docker digest to 0d61c9a (release-2.11)
• Update quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.1 Docker digest to 962fbf0 (release-2.11)
• Update quay.io/konflux-ci/tekton-catalog/task-sbom-json-check:0.1 Docker digest to acc9cb8 (release-2.11)

Detected dependencies

Branch release-2.10

dockerfile

Dockerfile

Dockerfile.rhtap

tekton

.tekton/cluster-backup-operator-acm-210-pull-request.yaml

• quay.io/redhat-appstudio-tekton-catalog/task-init 0.2@sha256:b23c7a924f303a67b3a00b32a6713ae1a4fccbc5327daa76a6edd250501ea7a3
• quay.io/redhat-appstudio-tekton-catalog/task-git-clone 0.1@sha256:2be7c9c83159c5247f1f9aab8fa1a2cb29d0df66f6c5bb48a012320bdcb03c7d
• quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies 0.1@sha256:9aec3ae9f0f50a05abdc739faf4cbc82832cff16c77ac74e1d54072a882c0503
• quay.io/redhat-appstudio-tekton-catalog/task-buildah 0.1@sha256:021f7029d0d8a1834bc45a4cd3cc451c03d0f87a5793eb19e1902f8b00dd3d4c
• quay.io/redhat-appstudio-tekton-catalog/task-source-build 0.1@sha256:83ee909cb8f7d659fac380a2521fb60f30c309e5ecb91f3aad2433936e690d98
• quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check 0.4@sha256:54bbf968893823622cfbab2dd5a6e08e66ec7649673e21f5a4ebb8944e23535b
• quay.io/redhat-appstudio-tekton-catalog/task-clair-scan 0.1@sha256:4545291a178d5643d64b51424dffb2a48fe35e9918d7385707d7407522a8a7e0
• quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check 0.1@sha256:60774c68333a34579d4f5044d395ee8edf87738a7d56205bfb1b83e93dbe0a41
• quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan 0.1@sha256:3d175c521a65a8c00f509e67e62def03ab28911f70868399619c9804b81e38a0
• quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check 0.1@sha256:d34362be8843715b1bcdaf55fcbf1be315094e0dc840562c5cec22716a37a1fe
• quay.io/redhat-appstudio-tekton-catalog/task-show-sbom 0.1@sha256:9cd4bf015b18621834f40ed02c8dccda1f7834c7d989521a8314bdb3a596e96b
• quay.io/redhat-appstudio-tekton-catalog/task-summary 0.2@sha256:51d5aaa4e13e9fb4303f667e38d07e758820040032ed9fb3ab5f6afaaffc60d8

.tekton/cluster-backup-operator-acm-210-push.yaml

• quay.io/redhat-appstudio-tekton-catalog/task-init 0.2@sha256:b23c7a924f303a67b3a00b32a6713ae1a4fccbc5327daa76a6edd250501ea7a3
• quay.io/redhat-appstudio-tekton-catalog/task-git-clone 0.1@sha256:2be7c9c83159c5247f1f9aab8fa1a2cb29d0df66f6c5bb48a012320bdcb03c7d
• quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies 0.1@sha256:9aec3ae9f0f50a05abdc739faf4cbc82832cff16c77ac74e1d54072a882c0503
• quay.io/redhat-appstudio-tekton-catalog/task-buildah 0.1@sha256:021f7029d0d8a1834bc45a4cd3cc451c03d0f87a5793eb19e1902f8b00dd3d4c
• quay.io/redhat-appstudio-tekton-catalog/task-source-build 0.1@sha256:83ee909cb8f7d659fac380a2521fb60f30c309e5ecb91f3aad2433936e690d98
• quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check 0.4@sha256:54bbf968893823622cfbab2dd5a6e08e66ec7649673e21f5a4ebb8944e23535b
• quay.io/redhat-appstudio-tekton-catalog/task-clair-scan 0.1@sha256:4545291a178d5643d64b51424dffb2a48fe35e9918d7385707d7407522a8a7e0
• quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check 0.1@sha256:60774c68333a34579d4f5044d395ee8edf87738a7d56205bfb1b83e93dbe0a41
• quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan 0.1@sha256:3d175c521a65a8c00f509e67e62def03ab28911f70868399619c9804b81e38a0
• quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check 0.1@sha256:d34362be8843715b1bcdaf55fcbf1be315094e0dc840562c5cec22716a37a1fe
• quay.io/redhat-appstudio-tekton-catalog/task-show-sbom 0.1@sha256:9cd4bf015b18621834f40ed02c8dccda1f7834c7d989521a8314bdb3a596e96b
• quay.io/redhat-appstudio-tekton-catalog/task-summary 0.2@sha256:51d5aaa4e13e9fb4303f667e38d07e758820040032ed9fb3ab5f6afaaffc60d8

Branch release-2.11

dockerfile

Dockerfile

Dockerfile.rhtap

tekton

.tekton/cluster-backup-operator-acm-211-pull-request.yaml

• quay.io/konflux-ci/tekton-catalog/task-init 0.2@sha256:83b7df553a736def52dd47bca2a3614c8fa2c88d112d691a4834289cf8c2abf5
• quay.io/konflux-ci/tekton-catalog/task-git-clone 0.1@sha256:9ea6101d110d96dd95216ee5fb73213c394ee62280f2bf1d61bb460f56dac027
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.1@sha256:c22f2537b73add9b9cef0c1ac92187abb8d265756eaa1e6e568a4f4215720cc3
• quay.io/konflux-ci/tekton-catalog/task-buildah 0.1@sha256:cdcb8b80c3071b226b6a688f4735b4e3ae888841601b32ac681b5a74a992e11b
• quay.io/konflux-ci/tekton-catalog/task-source-build 0.1@sha256:6e1815b51294e897474c2b09bea84cbb11ddbaf8028d7e10cf95a0181c565cc9
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.4@sha256:d70d970e689a26f1c9e6a1db69580a06cde989c7278c402316278d78c17d2927
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.1@sha256:48a051b5d9cb93f722a9fa2eca0e1d28eb3a28118cfff74a6448b2ee956d95f9
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.1@sha256:8838d3e1628dbe61f4851b3640d2e3a9a3079d3ff3da955f4a3e4c2c95a013df
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.1@sha256:a74dae0d2a7914c64adb07fe5e4187576f4e8686698612c8792f7c4517c188ea
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.1@sha256:46fcff23fd21772572c5fd62f6bbaf8fa2913d3d464c685bf7a2d0da05a448c0
• quay.io/konflux-ci/tekton-catalog/task-sbom-json-check 0.1@sha256:fe6e910cf25664dc6c192023f178a4066e20307d7f888f6d0fe0304c5c11a3c4
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.1@sha256:175162b0a1c55e911d0d25ddef97e90932b5043f0b523cf83ed4824363840d74
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:bb6de6584cc47524ac69d2fb0bc310e546696b707e4052a465966e2446e33a15
• quay.io/konflux-ci/tekton-catalog/task-summary 0.2@sha256:fc1b0a4efc83c91cd4a24020daabb874b3f33a87c34cd157cda0b7e6d4b7779a

.tekton/cluster-backup-operator-acm-211-push.yaml

• quay.io/konflux-ci/tekton-catalog/task-init 0.2@sha256:83b7df553a736def52dd47bca2a3614c8fa2c88d112d691a4834289cf8c2abf5
• quay.io/konflux-ci/tekton-catalog/task-git-clone 0.1@sha256:9ea6101d110d96dd95216ee5fb73213c394ee62280f2bf1d61bb460f56dac027
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.1@sha256:c22f2537b73add9b9cef0c1ac92187abb8d265756eaa1e6e568a4f4215720cc3
• quay.io/konflux-ci/tekton-catalog/task-buildah 0.1@sha256:cdcb8b80c3071b226b6a688f4735b4e3ae888841601b32ac681b5a74a992e11b
• quay.io/konflux-ci/tekton-catalog/task-source-build 0.1@sha256:6e1815b51294e897474c2b09bea84cbb11ddbaf8028d7e10cf95a0181c565cc9
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.4@sha256:d70d970e689a26f1c9e6a1db69580a06cde989c7278c402316278d78c17d2927
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.1@sha256:48a051b5d9cb93f722a9fa2eca0e1d28eb3a28118cfff74a6448b2ee956d95f9
• quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks 0.1@sha256:8838d3e1628dbe61f4851b3640d2e3a9a3079d3ff3da955f4a3e4c2c95a013df
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.1@sha256:a74dae0d2a7914c64adb07fe5e4187576f4e8686698612c8792f7c4517c188ea
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.1@sha256:46fcff23fd21772572c5fd62f6bbaf8fa2913d3d464c685bf7a2d0da05a448c0
• quay.io/konflux-ci/tekton-catalog/task-sbom-json-check 0.1@sha256:fe6e910cf25664dc6c192023f178a4066e20307d7f888f6d0fe0304c5c11a3c4
• quay.io/konflux-ci/tekton-catalog/task-apply-tags 0.1@sha256:175162b0a1c55e911d0d25ddef97e90932b5043f0b523cf83ed4824363840d74
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:bb6de6584cc47524ac69d2fb0bc310e546696b707e4052a465966e2446e33a15
• quay.io/konflux-ci/tekton-catalog/task-summary 0.2@sha256:fc1b0a4efc83c91cd4a24020daabb874b3f33a87c34cd157cda0b7e6d4b7779a

when run the restore hub cluster backup showing error

when run the restore cluster backup showing this error
[[email protected] ~]# oc describe Restore.cluster.open-cluster-management.io -n open-cluster-management-backup
Name: restore-acm
Namespace: open-cluster-management-backup
Labels:
Annotations:
API Version: cluster.open-cluster-management.io/v1beta1
Kind: Restore
Metadata:
Creation Timestamp: 2022-10-06T14:22:08Z
Generation: 4
Managed Fields:
API Version: cluster.open-cluster-management.io/v1beta1
Fields Type: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.:
f:kubectl.kubernetes.io/last-applied-configuration:
f:spec:
.:
f:cleanupBeforeRestore:
f:veleroCredentialsBackupName:
f:veleroManagedClustersBackupName:
f:veleroResourcesBackupName:
Manager: kubectl-client-side-apply
Operation: Update
Time: 2022-10-06T14:22:08Z
API Version: cluster.open-cluster-management.io/v1beta1
Fields Type: FieldsV1
fieldsV1:
f:status:
.:
f:lastMessage:
f:phase:
Manager: manager
Operation: Update
Subresource: status
Time: 2022-10-06T14:22:08Z
Resource Version: 5398419
UID: 2891e9f8-b207-4323-b574-656c3f1174ad
Spec:
Cleanup Before Restore: CleanupAll
Velero Credentials Backup Name: acm-credentials-cluster-schedule-20221006140010
Velero Managed Clusters Backup Name: acm-managed-clusters-schedule-20221006140010
Velero Resources Backup Name: acm-resources-schedule-20221006140010
Status:
Last Message: This resource is ignored because BackupSchedule resource open-cluster-management-backup is currently active, before creating another resource verify that any active resources are removed.
Phase: FinishedWithErrors
Events:

Name: restore-acm-passive-activate
Namespace: open-cluster-management-backup
Labels:
Annotations:
API Version: cluster.open-cluster-management.io/v1beta1
Kind: Restore
Metadata:
Creation Timestamp: 2022-10-07T05:23:10Z
Generation: 1
Managed Fields:
API Version: cluster.open-cluster-management.io/v1beta1
Fields Type: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.:
f:kubectl.kubernetes.io/last-applied-configuration:
f:spec:
.:
f:cleanupBeforeRestore:
f:veleroCredentialsBackupName:
f:veleroManagedClustersBackupName:
f:veleroResourcesBackupName:
Manager: kubectl-client-side-apply
Operation: Update
Time: 2022-10-07T05:23:10Z
API Version: cluster.open-cluster-management.io/v1beta1
Fields Type: FieldsV1
fieldsV1:
f:status:
.:
f:lastMessage:
f:phase:
Manager: manager
Operation: Update
Subresource: status
Time: 2022-10-07T05:23:10Z
Resource Version: 7986795
UID: c3283e4b-27ff-45a8-973a-86e0034659f5
Spec:
Cleanup Before Restore: CleanupRestored
Velero Credentials Backup Name: skip
Velero Managed Clusters Backup Name: acm-managed-clusters-schedule-20221006140010
Velero Resources Backup Name: skip
Status:
Last Message: This resource is ignored because BackupSchedule resource open-cluster-management-backup is currently active, before creating another resource verify that any active resources are removed.
Phase: FinishedWithErrors
Events:
[[email protected] ~]#

Incorrect command in README

Changed
Run os get schedules -A | grep acm to view the list of backup scheduled.
to
Run oc get schedules -A | grep acm to view the list of backup scheduled.

Also an issue in the documentation in section 1.22.2.3

Managed cluster namespaces should be label to say `cluster backup operator managed cluster` and `accepted or not`

In order to have restore operator working properly we need to add a lable or an annotations (better a label) saying something like this:

backup.cluster.open-cluster-manegement.io/accepted=true or backup.cluster.open-cluster-manegement.io/accepted=false.
In this way we'll accomplish two goals

1. Understand which managed cluster namespace comes from a backup
2. Understand which managed cluster namespace was accepted previously (already talked about this in a chat)

To be honest I don't care too much about the way accomplish this, but we need to solve both and this is the first idea I got (open for discussion)