12
edits
Backing up Object Store: Difference between revisions
Jump to navigation
Jump to search
m
Slight re-wording of first para. Minor spelling corrections.
No edit summary |
m (Slight re-wording of first para. Minor spelling corrections.) |
||
| Line 1: | Line 1: | ||
__FORCETOC__ | __FORCETOC__ | ||
Object Store data, while stored redundantly via Ceph, is not backed up. Object Store buckets are backed up to the TSM tape system upon request only by following the procedures listed on this page. | |||
The following contents and policies apply to backups by default: | |||
What is in the backup? | What is in the backup? | ||
* Only bucket data is backed up | * Only the bucket data is backed up. We are not currently backing up the IAM policies of the buckets or objects. | ||
* Only current version of the data is seen by the | * Only the current version of the data is seen by the backup system. Object chunks or versioned objects are not seen by the backups system. | ||
What is the backup policy? | What is the backup policy? | ||
* | * Backups are run on a daily basis. | ||
* | * The current object and one modified version of object are kept (this is different than full bucket versioning). | ||
* The modified version is | * The modified version is kept for 6 month - after that period only the current object is kept. | ||
* Deleted objects are | * Deleted objects are kept for 6 months. | ||
= Backup Procedure = | = Backup Procedure = | ||
Please follow this procedure to request backups of your buckets. | |||
==List bucket== | ==List bucket== | ||
| Line 24: | Line 26: | ||
You need to configure the iam policy statement of '''all the buckets''' you want to back up so your TSM robot user in charge of the backup can access them. Here is the policy that needs to be added. | You need to configure the iam policy statement of '''all the buckets''' you want to back up so your TSM robot user in charge of the backup can access them. Here is the policy that needs to be added. | ||
For example, using the [https://docs.aws.amazon.com/cli/latest/ aws cli] | For example, using the [https://docs.aws.amazon.com/cli/latest/ aws cli], apply the policy on <code>my-bucket</code> using the <code>my-profile</code> identity. | ||
First, we make sure that <code>my-bucket</code> has | First, we make sure that <code>my-bucket</code> currently has no policy. | ||
<pre>$aws s3api --profile my-project get-bucket-policy --bucket my-bucket | <pre>$aws s3api --profile my-project get-bucket-policy --bucket my-bucket | ||
| Line 70: | Line 72: | ||
==Give us permission== | ==Give us permission== | ||
You will be asked to create a bucket for each bucket you want to restore to | You will be asked to create a bucket for each bucket you want to restore to restore with the <code>-restore</code> suffix. | ||
<div class="filename">'''File :''' policy.json </div> | <div class="filename">'''File :''' policy.json </div> | ||
<syntaxhighlight lang="json" file="my-policy.json"> | <syntaxhighlight lang="json" file="my-policy.json"> | ||