53 lines
1.8 KiB
Bash
53 lines
1.8 KiB
Bash
#!/bin/bash
|
||
|
||
BACKUPDIR="/data/backups/vault"
|
||
CLASS="STANDARD"
|
||
BUCKET=""
|
||
ENDPOINT=""
|
||
LOGFILE="/data/log/scripts/vault-snapshot.sh"
|
||
DATE=$(date +"%Y%m%d")
|
||
STATUS="0"
|
||
STATUSFILE="/var/tmp/batch.vault-snapshot.sh"
|
||
STANDBY="true"
|
||
|
||
export VAULT_SKIP_VERIFY="TRUE"
|
||
|
||
source /root/.config/vault-snapshot.conf
|
||
set -eu
|
||
|
||
# Function to handle error during the script.
|
||
function set_error_status() {
|
||
echo "[$(date '+%Y%m%d %H%M%S')] : Something went wrong in the script, exiting." | tee -a "${LOGFILE}"
|
||
echo "2 vault-snapshot-restore - KO" > ${STATUSFILE}
|
||
}
|
||
|
||
trap set_error_status ERR
|
||
|
||
cd "${BACKUPDIR}" || exit
|
||
|
||
echo "${DATE} : Récupération du token" | tee -a "${LOGFILE}"
|
||
TOKEN=$(/usr/bin/vault write -field="token" auth/approle/login role_id="${ROLEID}" secret_id="${SECRETID}")
|
||
export VAULT_TOKEN="${TOKEN}"
|
||
|
||
# Check if the node is the active one, if not we stop.
|
||
STANDBY=$(/usr/bin/vault read sys/health -format=json | jq '.data.standby')
|
||
if [ ! "${STANDBY}" == "false" ]; then
|
||
echo "${DATE} : Noeud en standby, on arrête le snapshot" | tee -a "${LOGFILE}"
|
||
echo "${DATE} : ###### FIN ######" | tee -a "${LOGFILE}"
|
||
echo "0 vault-snapshot - Standby node" > ${STATUSFILE}
|
||
exit 0
|
||
fi
|
||
|
||
echo "${DATE} : Lancement du snapshot" | tee -a "${LOGFILE}"
|
||
/usr/bin/vault operator raft snapshot save "${BACKUPDIR}"/vault-"${DATE}".snap |tee -a "${LOGFILE}"
|
||
|
||
echo "${DATE} : Upload du snapshot sur S3" | tee -a "${LOGFILE}"
|
||
/usr/local/bin/aws --endpoint-url "${ENDPOINT}" s3 cp "${BACKUPDIR}"/vault-"${DATE}".snap s3://"${BUCKET}"/ --storage-class "${CLASS}" --only-show-errors |tee -a "${LOGFILE}"
|
||
|
||
echo "${DATE} : Nettoyage des snapshots de +10 jours" | tee -a "${LOGFILE}"
|
||
/usr/bin/find ${BACKUPDIR} -name "*.snap" -mtime 10 -delete
|
||
|
||
echo "0 vault-snapshot - OK" > ${STATUSFILE}
|
||
echo "${DATE} : ###### FIN ######" | tee -a "${LOGFILE}"
|
||
exit ${STATUS}
|