cockroachdb / cockroachdb/cockroach
dr/backups: add failsafe for compacted backups
Open
A-disaster-recovery
C-enhancement
P-2
T-disaster-recovery
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
If compactions don't run for some reason, do we have a failsafe that will stop making inc backups if their minimum distance to root becomes too long to safely restore?
basically, if compactions become load-bearing for restorability of a given schedule, seems like we should be asserting they're happening / working. If we detect that we're making an unrestorable chain, we should probably not do that and fail loudly, so you don't have a false sense of security that you have usable backups and everything is fine
Jira issue: CRDB-57652
Contributor guide
Assessment
This issue has not been assessed yet.