system-config/playbooks/zuul/templates/host_vars
Ian Wienand 8361ab701c
backups: add retirement and purge lists
This adds a retirement and purge list to the borg management role.

The idea here is that when a backed-up host is shut-down, we add its
backup user to the retired list.  On the next ansible run the user
will be disabled on the backup-server and the backup repo marked as
retired.  On the next prune, we will trim the backup to only the last
run to save space.  This gives us a grace period to restore if we
should need to.

When we are sure we don't want the data, we can put it in the purge
list, and the backup repo is removed on the next ansible run (hosts
can go straight into this if we want).  This allows us to have a
review process/history before we purge data.

To test, we create a fake "borg-retired" user on the backup-server,
and give it a simple backup.  This is marked as retired, which is
reflected in the testinfra run of the prune script.  Similarly a
"borg-purge" user is created, and we ensure it's backup dir is
removed.

Documentation is updated.

Change-Id: I5dff0a9d35b11a1f021048a12ecddce952c0c13c
2024-11-08 22:30:49 +11:00
..
borg-backup01.region.provider.opendev.org.yaml.j2 backups: add retirement and purge lists 2024-11-08 22:30:49 +11:00
codesearch01.opendev.org.yaml.j2 Migrate codesearch site to container 2020-11-20 07:41:12 +11:00
etherpad99.opendev.org.yaml.j2 Update etherpad to v2.0.3 2024-04-29 14:17:55 -07:00
gitea99.opendev.org.yaml.j2 Manage opendev.org cert with LE 2019-11-18 12:07:10 -08:00
grafana01.opendev.org.yaml.j2 Grafana container deployment 2020-07-03 07:17:22 +10:00
letsencrypt01.opendev.org.yaml.j2 Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
letsencrypt02.opendev.org.yaml.j2 Use handlers for letsencrypt cert updates 2019-05-14 08:14:51 +10:00
lists.openstack.org.yaml.j2 Use newlist's automate option 2021-12-15 17:42:58 +00:00
mirror01.openafs.provider.opendev.org.yaml.j2 Separate openafs CI mirror 2019-06-17 15:56:09 +10:00
mirror02.openafs.provider.opendev.org.yaml.j2 Add focal testing for mirror nodes 2020-05-13 05:32:54 +10:00
mirror03.openafs.provider.opendev.org.yaml.j2 Add a jammy test node for regional mirrors 2023-10-31 18:27:59 -05:00
mirror04.openafs.provider.opendev.org.yaml.j2 Test mirror services on noble 2024-06-28 08:15:41 +10:00
mirror-update99.opendev.org.yaml.j2 mirror-update: move testing to mirror-update99 2022-08-05 08:18:55 +10:00
paste99.opendev.org.yaml.j2 paste: move certificate to group variable 2022-08-05 08:18:55 +10:00
refstack01.openstack.org.yaml.j2 Deploy refstack with ansible docker 2021-02-05 19:23:34 +00:00
review99.opendev.org.yaml.j2 Reapply "Switch Gerrit replication to a larger RSA key" 2023-12-06 09:02:17 -08:00