unkin-agent
9da206dc7c
PVCs and CloudNativePG Clusters need S3 buckets and backup schedules
provisioned consistently. This operator watches the
backups.unkin.net/{schedule,destination} annotations on those objects and
provisions everything needed to back them up, with no new CRDs.
- Add a PVC controller that provisions cephrgw ObjectStoreUser/Bucket/BucketAccess,
auto-generates a restic repo-password Secret and creates a k8up Schedule scoped
to the PVC via spec.backup.volumes[].persistentVolumeClaim.claimName.
- Add a CNPG Cluster controller that provisions the same bucket stack, idempotently
patches spec.backup.barmanObjectStore (leaving a user-set destinationPath alone
with a Warning event) and creates a ScheduledBackup.
- Resolve destinations through a ConfigMap lookup table; requeue until the
BucketAccess is Ready before creating schedule resources; own-reference created
resources and retain bucket data by default.
- Add schedule-mapping helpers (k8up 5-field/shortcut pass-through, CNPG 6-field
seconds-first) and deterministic, length-bounded name derivation.
- Add unit tests (schedule mapping, name derivation, destination resolution) and
envtest controller tests for both paths, wiring the external CRDs into envtest.
- Add kubebuilder-generated RBAC, a Dockerfile (distroless/nonroot), Woodpecker
lint/test/build pipelines and a tag-triggered image push to the artifactapi
docker-internal registry, plus a version-bump Makefile and deploy manifests.
69 lines
1.9 KiB
Go
69 lines
1.9 KiB
Go
// Copyright The Prometheus Authors
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package procfs
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"strconv"
|
|
"strings"
|
|
)
|
|
|
|
// Namespace represents a single namespace of a process.
|
|
type Namespace struct {
|
|
Type string // Namespace type.
|
|
Inode uint32 // Inode number of the namespace. If two processes are in the same namespace their inodes will match.
|
|
}
|
|
|
|
// Namespaces contains all of the namespaces that the process is contained in.
|
|
type Namespaces map[string]Namespace
|
|
|
|
// Namespaces reads from /proc/<pid>/ns/* to get the namespaces of which the
|
|
// process is a member.
|
|
func (p Proc) Namespaces() (Namespaces, error) {
|
|
d, err := os.Open(p.path("ns"))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer d.Close()
|
|
|
|
names, err := d.Readdirnames(-1)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("%w: failed to read contents of ns dir: %w", ErrFileRead, err)
|
|
}
|
|
|
|
ns := make(Namespaces, len(names))
|
|
for _, name := range names {
|
|
target, err := os.Readlink(p.path("ns", name))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
fields := strings.SplitN(target, ":", 2)
|
|
if len(fields) != 2 {
|
|
return nil, fmt.Errorf("%w: namespace type and inode from %q", ErrFileParse, target)
|
|
}
|
|
|
|
typ := fields[0]
|
|
inode, err := strconv.ParseUint(strings.Trim(fields[1], "[]"), 10, 32)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("%w: inode from %q: %w", ErrFileParse, fields[1], err)
|
|
}
|
|
|
|
ns[name] = Namespace{typ, uint32(inode)}
|
|
}
|
|
|
|
return ns, nil
|
|
}
|