66 lines
2.1 KiB
Bash
66 lines
2.1 KiB
Bash
|
#!/usr/bin/env bash
|
||
|
|
set -euo pipefail
|
||
|
|
|
||
|
|
namespace="${CNPG_NAMESPACE:-databases}"
|
||
|
|
clusters=(
|
||
|
|
apps-pg
|
||
|
|
forgejo-db
|
||
|
|
net-kingdom-pg
|
||
|
|
state-hub-db
|
||
|
|
)
|
||
|
|
|
||
|
|
if ! kubectl get ns "$namespace" >/dev/null 2>&1; then
|
||
|
|
echo "ERROR: namespace $namespace is not reachable from the current kubeconfig" >&2
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "CNPG backup posture in namespace ${namespace}"
|
||
|
|
echo
|
||
|
|
|
||
|
|
missing=0
|
||
|
|
|
||
|
|
for cluster in "${clusters[@]}"; do
|
||
|
|
if ! kubectl get cluster "$cluster" -n "$namespace" >/dev/null 2>&1; then
|
||
|
|
echo "${cluster}: MISSING (Cluster CR not found)"
|
||
|
|
missing=$((missing + 1))
|
||
|
|
echo
|
||
|
|
continue
|
||
|
|
fi
|
||
|
|
|
||
|
|
backup_spec="$(kubectl get cluster "$cluster" -n "$namespace" \
|
||
|
|
-o jsonpath='{.spec.backup}' 2>/dev/null || true)"
|
||
|
|
if [[ -z "$backup_spec" || "$backup_spec" == "null" ]]; then
|
||
|
|
echo "${cluster}: backup spec = null"
|
||
|
|
else
|
||
|
|
echo "${cluster}: backup spec configured"
|
||
|
|
fi
|
||
|
|
|
||
|
|
scheduled="$(kubectl get scheduledbackup -n "$namespace" \
|
||
|
|
-o jsonpath="{range .items[?(@.spec.cluster.name=='${cluster}')]}{.metadata.name}{' '}{end}" 2>/dev/null || true)"
|
||
|
|
scheduled="${scheduled%" "}"
|
||
|
|
if [[ -z "$scheduled" ]]; then
|
||
|
|
echo "${cluster}: ScheduledBackup = none"
|
||
|
|
missing=$((missing + 1))
|
||
|
|
else
|
||
|
|
echo "${cluster}: ScheduledBackup = ${scheduled}"
|
||
|
|
fi
|
||
|
|
|
||
|
|
if command -v kubectl >/dev/null 2>&1 && kubectl cnpg status "$cluster" -n "$namespace" >/dev/null 2>&1; then
|
||
|
|
echo "${cluster}: kubectl cnpg status available"
|
||
|
|
kubectl cnpg status "$cluster" -n "$namespace" | sed -n '1,8p'
|
||
|
|
else
|
||
|
|
phase="$(kubectl get cluster "$cluster" -n "$namespace" -o jsonpath='{.status.phase}' 2>/dev/null || true)"
|
||
|
|
instances="$(kubectl get cluster "$cluster" -n "$namespace" -o jsonpath='{.status.instances}' 2>/dev/null || true)"
|
||
|
|
echo "${cluster}: phase=${phase:-unknown} instances=${instances:-unknown}"
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo
|
||
|
|
done
|
||
|
|
|
||
|
|
if (( missing > 0 )); then
|
||
|
|
echo "RESULT: degraded — ${missing} cluster(s) lack ScheduledBackup coverage"
|
||
|
|
echo "See docs/app-data-backup-restore-handoff.md and manifests/cnpg-backup-readiness.yaml"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo "RESULT: ok — all tracked clusters have ScheduledBackup resources"
|