Velero 백업, 같은 클러스터에 저장하면 DR이 아니다

1
flowchart LR
2
    V[Velero] -->|백업 저장| M[MinIO]
3
    subgraph home[Home Cluster]
4
        V
5
        M
6
    end

1
flowchart LR
2
    V[Velero] -->|백업 저장| M[MinIO]
3
    M -->|CronJob<br>매일 동기화| G[Garage]
4
    subgraph home[Home Cluster]
5
        V
6
        M
7
    end
8
    subgraph oci[OCI Cluster — Always Free]
9
        G
10
    end

1
# OCI Garage 핵심 설정
2
garage:
3
  replicationFactor: "1" # OCI 단일 노드
4
image:
5
  repository: dxflrs/arm64_garage # ARM 이미지
6
  tag: "v2.2.0"
7
persistence:
8
  meta:
9
    storageClass: oci-bv
10
    size: 1Gi
11
  data:
12
    storageClass: oci-bv
13
    size: 50Gi

1
apiVersion: batch/v1
2
kind: CronJob
3
metadata:
4
  name: velero-backup-mirror
5
  namespace: velero
6
spec:
7
  schedule: "30 18 * * *"
8
  concurrencyPolicy: Forbid
9
  jobTemplate:
10
    spec:
11
      backoffLimit: 2
12
      template:
13
        spec:
14
          containers:
15
            - name: rclone
16
              image: rclone/rclone:latest
17
              command:
18
                - /bin/sh
19
                - -c
20
                - |
21
                  set -e
22
                  mkdir -p /tmp/rclone
23
                  cat > /tmp/rclone/rclone.conf << EOF
24
                  [home]
25
                  type = s3
26
                  provider = Minio
27
                  endpoint = http://velero-minio.velero.svc:9000
28
                  access_key_id = ${HOME_USER}
29
                  secret_access_key = ${HOME_PASSWORD}
30

31
                  [airflow]
32
                  type = s3
33
                  provider = Minio
34
                  endpoint = http://airflow-minio.airflow.svc:9000
35
                  access_key_id = ${AIRFLOW_MINIO_USER}
36
                  secret_access_key = ${AIRFLOW_MINIO_PASSWORD}
37
                  region = us-east-1
38

39
                  [oci]
40
                  type = s3
41
                  provider = Other
42
                  endpoint = ${OCI_ENDPOINT}
43
                  access_key_id = ${OCI_ACCESS_KEY}
44
                  secret_access_key = ${OCI_SECRET_KEY}
45
                  region = garage
46
                  force_path_style = true
47
                  EOF
48

49
                  CONF="/tmp/rclone/rclone.conf"
50
                  OPTS="--config $CONF --transfers 4 --checkers 4 --stats-one-line -v"
51

52
                  echo "--- Velero backup sync ---"
53
                  rclone sync home:velero oci:velero-backup $OPTS
54

55
                  echo "--- Airflow CNPG backup sync ---"
56
                  rclone sync airflow:postgres oci:airflow-pg-backup $OPTS
57
              env:
58
                - name: HOME_USER
59
                  valueFrom:
60
                    secretKeyRef:
61
                      name: velero-minio-credentials
62
                      key: rootUser
63
                # HOME_PASSWORD, OCI_ENDPOINT, OCI_ACCESS_KEY, OCI_SECRET_KEY 동일 패턴
64
              resources:
65
                requests:
66
                  cpu: 100m
67
                  memory: 128Mi
68
                limits:
69
                  cpu: 500m
70
                  memory: 512Mi
71
          restartPolicy: OnFailure

1
flowchart LR
2
    V[Velero] -->|03:00<br>일일 백업| M[Velero MinIO]
3
    A[Airflow CNPG] -->|WAL 아카이브| AM[Airflow MinIO]
4
    M -->|03:30<br>rclone sync| G[Garage]
5
    AM -->|03:30<br>rclone sync| G
6
    subgraph home[Home Cluster]
7
        V
8
        M
9
        A
10
        AM
11
    end
12
    subgraph oci[OCI Cluster]
13
        G
14
    end

1
# 백업 전: pg_dump로 일관된 덤프 생성
2
pre.hook.backup.velero.io/command: >-
3
  ["/bin/sh", "-c",
4
   "PGPASSWORD=$POSTGRES_PASSWORD
5
    pg_dump -U gitlab -d gitlabhq_production
6
    -Fc -f /bitnami/postgresql/data/velero-backup.dump"]
7
pre.hook.backup.velero.io/container: postgresql
8
# 백업 후: 덤프 파일 삭제
9
post.hook.backup.velero.io/command: >-
10
  ["/bin/sh", "-c",
11
   "rm -f /bitnami/postgresql/data/velero-backup.dump"]
12
post.hook.backup.velero.io/container: postgresql

1
pre-hook: pg_dump 실행 → velero-backup.dump 생성
2
  ↓
3
FSB: data 디렉토리 전체 백업 (dump 파일 포함)
4
  ↓
5
post-hook: dump 파일 삭제