cinder-specs/specs/pike/backup-init.rst
zhangbailin 456b86528d Modify spelling mistakes
When I read this specs file, I found a lot of spelling mistakes,
and I made a change here to give you a good code reading experience.

In specs, modify "acording" to "according" and  "priviledges" to
"privileges" and "Additionaly" to "Additionally" and so on. you can
get them from the "File Path" in the web.

Change-Id: I95228e1a57c7aa588c78d4a3af46b18daadac01d
2017-08-14 17:55:30 -07:00

3.1 KiB

Backup driver initialization

https://blueprints.launchpad.net/cinder/+spec/backup-init

We don't initialize Cinder Backup driver during service startup. It means that we've got cinder-backup service up and running even if it can't connect to the backup storage.

Problem description

Cinder backup manager does not verify that backup driver is initialized successfully. If cinder-backup is started successfully we can create a volume backup. Such backups always will be in 'error' status and tenant user won't be able to delete them.

Use Cases

Cinder backup service should be marked as 'down' if it can't connect to the backup storage.

Proposed change

We should introduce for cinder backups the same mechanism as we've got for volume manager and drivers:

  • Introduce 'init_host' method in backup manager which will be called on service startup and verify that backup driver is initialized: verify driver's configuration is correct, depends on driver, we could check connection to storage, list of available backups. etc.
  • If backup driver initialization fails, manager will mark backup service as 'down'.

In case of initialization failure, cinder will try to do it periodically depends on 'periodic_interval' config option value.

Backup service should be initialized in 'service_down_time' time interval or will be marked as 'down'.

Alternatives

Check for backup storage is available on backup create call. If storage is not available, remove 'host' field from backup object. We could try to re-schedule backup creation on the other host.

Data model impact

None

REST API impact

None

Security impact

None

Notifications impact

New notifications for backup initialization failure and success will be added.

Other end user impact

User will be able to delete backup in error state if it was not created on backend.

Performance Impact

None

Other deployer impact

New 'backup_periodic_initialization' and 'backup_initialization_timeout' config option will be added. Deployer have to enable 'backup_periodic_initialization' if needed.

Developer impact

Backup driver developers should implement new APIs.

Implementation

Assignee(s)

Primary assignee:

Ivan Kolodyazhny <e0ne@e0ne.info>

Other contributors:

Backup drivers maintainers.

Work Items

  • Implement 'do_setup' method in a base backup driver which won't do anything
  • Implement 'do_setup' in each backup driver.
  • Call driver's 'do_setup' during backup-manager 'init_host' call.

Dependencies

None

Testing

Both unit and Tempest tests should be implemented to cover new feature.

Documentation Impact

None

References