system-config/zuul.d
Ian Wienand 8361ab701c
backups: add retirement and purge lists
This adds a retirement and purge list to the borg management role.

The idea here is that when a backed-up host is shut-down, we add its
backup user to the retired list.  On the next ansible run the user
will be disabled on the backup-server and the backup repo marked as
retired.  On the next prune, we will trim the backup to only the last
run to save space.  This gives us a grace period to restore if we
should need to.

When we are sure we don't want the data, we can put it in the purge
list, and the backup repo is removed on the next ansible run (hosts
can go straight into this if we want).  This allows us to have a
review process/history before we purge data.

To test, we create a fake "borg-retired" user on the backup-server,
and give it a simple backup.  This is marked as retired, which is
reflected in the testinfra run of the prune script.  Similarly a
"borg-purge" user is created, and we ensure it's backup dir is
removed.

Documentation is updated.

Change-Id: I5dff0a9d35b11a1f021048a12ecddce952c0c13c
2024-11-08 22:30:49 +11:00
..
docker-images Merge "Update Gerrit images to 3.9.7 and 3.10.2" 2024-10-18 18:30:24 +00:00
goaccess.yaml Organize zuul jobs in zuul.d/ dir 2020-05-07 17:30:48 -05:00
infra-prod.yaml Remove most linaro cloud resources 2024-08-02 09:21:11 -07:00
project.yaml Cleanup python 3.10 bullseye images 2024-10-10 09:50:27 -07:00
system-config-roles.yaml Merge "Drop more Xenial testing from system-config" 2024-10-09 17:35:19 +00:00
system-config-run.yaml backups: add retirement and purge lists 2024-11-08 22:30:49 +11:00