README (1244B)
1 NOMAD SNAPSHOTS 2 --------------- 3 4 Run periodic Raft state snapshots for Nomad or bao. Store snapshots on NFS. 5 6 This creates a parameterized job: 7 - https://www.nomadproject.io/docs/job-specification/parameterized 8 - https://www.nomadproject.io/docs/commands/job/dispatch 9 10 nomad run nomad-snapshots.nomad 11 12 The jobs can be dispatched to take snapshots of Nomad state: 13 - nomad job dispatch -meta service=nomad snapshot 14 - nomad job dispatch -meta service=nomad-var snapshot 15 - nomad job dispatch -meta service=bao snapshot 16 17 The service meta parameter is required. 18 19 NOMAD WORKLOAD IDENTITY 20 ----------------------- 21 22 To login at bao, prepare the JWT role first: 23 24 bao write auth/jwt-nomad/role/snapshot @vault-jwt-snapshot.json 25 26 The bound claims require the job running with/in: 27 - Nomad Job ID: "snapshot/dispatch-*" 28 - Nomad namespace: "infra" 29 - Nomad task: "snapshot-save" 30 31 EXEC DRIVER 32 ----------- 33 34 Exec driver is used (instead of raw_exec), because raw_exec does not support 35 CSI volumes. Host volumes suck, because they require client reconfiguration. 36 37 This job uses the "host" network mode. No CNI plugins are required. 38 39 >To use bridge mode, you must have the reference CNI plugins installed 40 https://www.nomadproject.io/docs/job-specification/network