2.11. 为备份和恢复配置 hub 集群

流程

1. 创建一个策略，将 cluster.open-cluster-management.io/backup=cluster-activation 标签添加到具有 infraenvs.agent-install.openshift.io 标签的所有 BareMetalHost 资源中。将策略保存为 BareMetalHostBackupPolicy.yaml。

   以下示例将 cluster.open-cluster-management.io/backup 标签添加到具有 infraenvs.agent-install.openshift.io 标签的所有 BareMetalHost 资源中：

   策略示例

   apiVersion: policy.open-cluster-management.io/v1
   kind: Policy
   metadata:
     name: bmh-cluster-activation-label
     annotations:
       policy.open-cluster-management.io/description: Policy used to add the cluster.open-cluster-management.io/backup=cluster-activation label to all BareMetalHost resources
   spec:
     disabled: false
     policy-templates:
       - objectDefinition:
           apiVersion: policy.open-cluster-management.io/v1
           kind: ConfigurationPolicy
           metadata:
             name: set-bmh-backup-label
           spec:
             object-templates-raw: |
               {{- /* Set cluster-activation label on all BMH resources */ -}}
               {{- $infra_label := "infraenvs.agent-install.openshift.io" }}
               {{- range $bmh := (lookup "metal3.io/v1alpha1" "BareMetalHost" "" "" $infra_label).items }}
                   - complianceType: musthave
                     objectDefinition:
                       kind: BareMetalHost
                       apiVersion: metal3.io/v1alpha1
                       metadata:
                         name: {{ $bmh.metadata.name }}
                         namespace: {{ $bmh.metadata.namespace }}
                         labels:
                           cluster.open-cluster-management.io/backup: cluster-activation 1
               {{- end }}
             remediationAction: enforce
             severity: high
   ---
   apiVersion: cluster.open-cluster-management.io/v1beta1
   kind: Placement
   metadata:
     name: bmh-cluster-activation-label-pr
   spec:
     predicates:
       - requiredClusterSelector:
           labelSelector:
             matchExpressions:
               - key: name
                 operator: In
                 values:
                   - local-cluster
   ---
   apiVersion: policy.open-cluster-management.io/v1
   kind: PlacementBinding
   metadata:
     name: bmh-cluster-activation-label-binding
   placementRef:
     name: bmh-cluster-activation-label-pr
     apiGroup: cluster.open-cluster-management.io
     kind: Placement
   subjects:
     - name: bmh-cluster-activation-label
       apiGroup: policy.open-cluster-management.io
       kind: Policy
   ---
   apiVersion: cluster.open-cluster-management.io/v1beta2
   kind: ManagedClusterSetBinding
   metadata:
     name: default
     namespace: default
   spec:
     clusterSet: default

   1

   如果您将 cluster.open-cluster-management.io/backup: cluster-activation 标签应用到 BareMetalHost 资源，RHACM 集群备份这些资源。如果在恢复 hub 激活资源时，如果活跃的集群不可用，可以恢复 BareMetalHost 资源。

2. 运行以下命令来应用策略：

   $ oc apply -f BareMetalHostBackupPolicy.yaml

验证

1. 运行以下命令，使用标签 infraenvs.agent-install.openshift.io 查找所有 BareMetalHost 资源：

   $ oc get BareMetalHost -A -l infraenvs.agent-install.openshift.io

   输出示例

   NAMESPACE      NAME             STATE   CONSUMER   ONLINE   ERROR   AGE
   baremetal-ns   baremetal-name                      false            50s

2. 运行以下命令，验证策略是否已将标签 cluster.open-cluster-management.io/backup=cluster-activation 应用到所有这些资源：

   $ oc get BareMetalHost -A -l infraenvs.agent-install.openshift.io,cluster.open-cluster-management.io/backup=cluster-activation

   输出示例

   NAMESPACE      NAME             STATE   CONSUMER   ONLINE   ERROR   AGE
   baremetal-ns   baremetal-name                      false            50s

   输出必须显示与上一步中的相同列表，该列表列出了带有标签 infraenvs.agent-install.openshift.io 的所有 BareMetalHost 资源。这确认所有带有 infraenvs.agent-install.openshift.io 标签的 BareMetalHost 资源也具有 cluster.open-cluster-management.io/backup: cluster-activation 标签。

   以下示例显示了带有 infraenvs.agent-install.openshift.io 标签的 BareMetalHost 资源。资源还必须有 cluster.open-cluster-management.io/backup: cluster-activation 标签，该标签由您创建的策略添加。

   apiVersion: metal3.io/v1alpha1
   kind: BareMetalHost
   metadata:
     labels:
       cluster.open-cluster-management.io/backup: cluster-activation
       infraenvs.agent-install.openshift.io: value
     name: baremetal-name
     namespace: baremetal-ns