第 10 章 来自 AWS Marketplace 的 Ansible Automation Platform 备份和恢复过程

流程

1. 使用与基础部署相同的标签版本拉取 ansible-on-clouds-ops 容器镜像。

   注意

   在拉取 docker 镜像前，请确保使用 docker 登录到 registry.redhat.com。使用以下命令登录到 registry.redhat.com。

   $ docker login registry.redhat.io

   Copy to Clipboard Toggle word wrap

   有关 registry 登录的更多信息，请参阅 Registry 身份验证

   $ export IMAGE=registry.redhat.io/ansible-on-clouds/ansible-on-clouds-ops-rhel8:2.3.20230221
   $ docker pull $IMAGE --platform=linux/amd64

   Copy to Clipboard Toggle word wrap

流程

1. 创建存放配置的文件夹

   $ mkdir command_generator_data

   Copy to Clipboard Toggle word wrap

2. 使用配置文件模板填充 command_generator_data 文件夹。这会在带有 root:root_user 和 group 权限的 command-generator_data 目录中创建 extra-vars.yaml 文件。

   $ docker run --rm -v $(pwd)/command_generator_data:/data $IMAGE \
     command_generator_vars aws_backup_stack \
     --output-data-file /data/extra_vars.yaml

   Copy to Clipboard Toggle word wrap

3. 运行这些命令后，会创建一个 command_generator_data/extra_vars.yaml 模板文件。此模板文件类似于以下内容：

   aws_backup_stack:
     cloud_credentials_path:
     deployment_name:
     extra_vars:
       aws_backup_iam_role_arn:
       aws_backup_vault_name:
       aws_region:
       aws_s3_bucket:

   Copy to Clipboard Toggle word wrap

流程

1. 要运行备份，请运行命令生成器。

   $ docker run --rm -v $(pwd)/command_generator_data:/data $IMAGE command_generator aws_backup_stack --data-file /data/extra_vars.yaml

   Copy to Clipboard Toggle word wrap

   这会生成 backup CLI 命令

   ----------------------------------------------
   docker run --rm --env PLATFORM=AWS -v ~/.aws/credentials:/home/runner/.aws/credentials:ro \
   --env ANSIBLE_CONFIG=../aws-ansible.cfg  $IMAGE redhat.ansible_on_clouds.aws_backup_stack \
   -e 'aws_foundation_stack_name=AnsibleAutomationPlatform aws_region=us-east-1 aws_backup_vault_name=Default \
   aws_backup_iam_role_arn=arn:aws:iam::123456789012:role/service-role/AWSBackupDefaultServiceRole \
   aws_s3_bucket=AnsibleAutomationPlatform-bucket'
   ===============================================

   Copy to Clipboard Toggle word wrap

2. 运行生成的命令以触发备份。

   $ docker run --rm --env PLATFORM=AWS -v ~/.aws/credentials:/home/runner/.aws/credentials:ro \
   --env ANSIBLE_CONFIG=../aws-ansible.cfg  $IMAGE redhat.ansible_on_clouds.aws_backup_stack \
   -e 'aws_foundation_stack_name=AnsibleAutomationPlatform aws_region=us-east-1 \
   aws_backup_vault_name=Default \
   aws_backup_iam_role_arn=arn:aws:iam::123456789012:role/service-role/AWSBackupDefaultServiceRole \ aws_s3_bucket=AnsibleAutomationPlatform-bucket'

   Copy to Clipboard Toggle word wrap

3. 根据数据库大小，备份可能需要几分钟才能完成。成功备份会返回类似如下的日志：

   {
       "efs_restore_points": [
           {
               "CreationDate": "2023-02-28T21:54:07.515000+00:00",
               "RecoveryPointArn": "arn:aws:backup:us-east-1:080914983077:recovery-point:967be465-a43e-432a-b536-8b16e6b0452d"
           },
           {
               "CreationDate": "2023-02-28T16:08:08.905000+00:00",
               "RecoveryPointArn": "arn:aws:backup:us-east-1:080914983077:recovery-point:d2058e3a-dca6-4a18-b175-5ef624f513a7"
           }
       ],
       "rds_db_snapshot_arn": "arn:aws:rds:us-east-1:080914983077:snapshot:test-bnr-ops-container-rds169785b9-orm2iuzlfqem-snap-2023-02-28"
   }

   Copy to Clipboard Toggle word wrap
4. AWS Marketplace 部署的 Ansible Automation Platform 现在已被成功备份。当日志显示时，playbook 可以成功填充部署的 EFS 备份和 RDS 快照，列出最新的 EFS 恢复点和 RDS 快照信息。