-
Notifications
You must be signed in to change notification settings - Fork 8
Wire Medusa backups in K8ssandraCluster template #31
Copy link
Copy link
Open
Labels
chart-improvementHelm chart / templates / values improvementsHelm chart / templates / values improvementsdocs-debtClosing this issue requires a corresponding docs updateClosing this issue requires a corresponding docs updatehardeningProduction hardening: TLS, secrets, network policies, backupsProduction hardening: TLS, secrets, network policies, backups
Description
Activity
Metadata
Metadata
Assignees
Labels
chart-improvementHelm chart / templates / values improvementsHelm chart / templates / values improvementsdocs-debtClosing this issue requires a corresponding docs updateClosing this issue requires a corresponding docs updatehardeningProduction hardening: TLS, secrets, network policies, backupsProduction hardening: TLS, secrets, network policies, backups
Context
values-production.yamland the hardening documentation havehistorically claimed Medusa backups are configured. The
K8ssandraClustertemplate(
deploy/helm/examon/templates/k8ssandra-cluster.yaml) wires onlyCassandra, Reaper, and telemetry. There is no
spec.medusablock.Impact
Operators following the docs end up with no automated backup. Manual
patching of the CR is required after install.
Desired behaviour
Add a
spec.medusablock to theK8ssandraClustertemplate, gated bycassandra.medusa.enabled. Support common storage backends (S3, GCS,Azure Blob, Ceph/S3) via
cassandra.medusa.storageProperties.values-production.yamlshould set sane defaults;values-staging.yamlkeeps Medusa disabled.
Current workaround (documented)
docs/administrators/deploy/harden-for-production.md§ Backupsdocuments a post-deploy
kubectl patchof theK8ssandraClusterCRwith a
spec.medusablock. The misleading# Full HA, production resources, TLS, Medusa backups.header comment invalues-production.yamlhas been stripped to# Full HA, production resources, TLS.pending the real wiring.Files to touch
deploy/helm/examon/templates/k8ssandra-cluster.yamldeploy/helm/examon/values.yaml(cassandra.medusa.*defaults)deploy/helm/examon/values-production.yamldeploy/helm/examon/values-staging.yamlDoc cleanup when closed
docs/administrators/deploy/harden-for-production.md§ Backupsto point at the chart value instead of the manual patch.
docs/administrators/deploy/staging.mdBackups row in thestaging-vs-production comparison block (currently reads
"Medusa (manual patch in v0.5.0)").
deploy/helm/examon/values-production.yaml(line 2:# Full HA, production resources, TLS, Medusa backups.).