Comments (8)
(by aurelien-lourot)
Hi Jeff, thanks for the feature request! I understand that you're not talking about the keys used for initializing/unsealing the vault but you're basically talking about exporting/importing all secrets included in the vault (no matter whether they are keys, certs, passphrases, whatever). I'm just stating this here explicitly for future travelers.
from juju-backup-all.
(by chris.sanders)
Subscribing field high based on recent deployments which this the CSR processes is making miss deliveries.
from juju-backup-all.
(by james-page)
In terms of feasibility it may be possible to use the "operator migrate" commands to facilitate a secure backup and restore between a MySQL backend and a filesystem.
https://www.vaultproject.io/docs/commands/operator/migrate
This is a direct backend migration i.e. no decryption is involved so the unseal keys will remain the same throughout the process.
This would also require a different path to initialisation of vault during deployment where a migrate from filesystem -> mysql is performed rather than the init process. We'd also need to deal with how the charm then gains access to vault so backup of the approle information the vault charm uses and direct injection of that during redeployment would need to be done.
from juju-backup-all.
(by billy-olsen)
FieldSLA is not applicable for features. This does look like an important feature request and have noted it for planning information.
from juju-backup-all.
(by aurelien-lourot)
Hi Jeff, thanks for the feature request! I understand that you're not talking about the keys used for initializing/unsealing the vault but you're basically talking about exporting/importing all secrets included in the vault (no matter whether they are keys, certs, passphrases, whatever). I'm just stating this here explicitly for future travelers.
from juju-backup-all.
(by chris.sanders)
Subscribing field high based on recent deployments which this the CSR processes is making miss deliveries.
from juju-backup-all.
(by james-page)
In terms of feasibility it may be possible to use the "operator migrate" commands to facilitate a secure backup and restore between a MySQL backend and a filesystem.
https://www.vaultproject.io/docs/commands/operator/migrate
This is a direct backend migration i.e. no decryption is involved so the unseal keys will remain the same throughout the process.
This would also require a different path to initialisation of vault during deployment where a migrate from filesystem -> mysql is performed rather than the init process. We'd also need to deal with how the charm then gains access to vault so backup of the approle information the vault charm uses and direct injection of that during redeployment would need to be done.
from juju-backup-all.
(by billy-olsen)
FieldSLA is not applicable for features. This does look like an important feature request and have noted it for planning information.
from juju-backup-all.
Related Issues (20)
- /tmp directory is being deleted HOT 1
- Juju-backup-all fails with message ‘hook failed: "install"’ in bionic HOT 4
- do-backup action not working HOT 5
- Failing functional tests due to timeout
- Build snap as a confined HOT 1
- Update libjuju to v2.9.4
- Functional test fail HOT 1
- scp from lxd units will fail because hostname is None
- Mistaken `TimeoutError` package while handling timeouts in `run_with_timeout`
- Allow to omit certain models during backup runs
- BackupProcessor.process_backups should return the results of running the backups, instead of printing them to stdout
- Add support for python 3.6 (bionic)
- Replace subprocess with python-libjuju calls HOT 2
- /tmp directory is being deleted HOT 1
- do-backup action not working HOT 5
- Failing functional tests due to timeout
- Function test should use snap instead of Python package
- Parametrized the functional tests to deploy app test backup and destroy it
- No space left on device when doing the backup. HOT 3
- Remove non-implemented Swift backup code
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from juju-backup-all.