RestoreConfig

Configuration of a restore. Next id: 12

JSON representation
{
  "volumeDataRestorePolicy": enum (VolumeDataRestorePolicy),
  "clusterResourceConflictPolicy": enum (ClusterResourceConflictPolicy),
  "namespacedResourceRestoreMode": enum (NamespacedResourceRestoreMode),
  "clusterResourceRestoreScope": {
    object (ClusterResourceRestoreScope)
  },
  "substitutionRules": [
    {
      object (SubstitutionRule)
    }
  ],
  "transformationRules": [
    {
      object (TransformationRule)
    }
  ],

  // Union field namespaced_resource_restore_scope can be only one of the
  // following:
  "allNamespaces": boolean,
  "selectedNamespaces": {
    object (Namespaces)
  },
  "selectedApplications": {
    object (NamespacedNames)
  },
  "noNamespaces": boolean,
  "excludedNamespaces": {
    object (Namespaces)
  }
  // End of list of possible types for union field
  // namespaced_resource_restore_scope.
}
Fields
volumeDataRestorePolicy

enum (VolumeDataRestorePolicy)

Specifies the mechanism to be used to restore volume data. Default: VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED (will be treated as NO_VOLUME_DATA_RESTORATION).

clusterResourceConflictPolicy

enum (ClusterResourceConflictPolicy)

Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster. This MUST be set to a value other than CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED if clusterResourceRestoreScope is not empty.

namespacedResourceRestoreMode

enum (NamespacedResourceRestoreMode)

Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster. This MUST be set to a value other than NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED.

clusterResourceRestoreScope

object (ClusterResourceRestoreScope)

Identifies the cluster-scoped resources to restore from the Backup. Not specifying it means NO cluster resource will be restored.

substitutionRules[]

object (SubstitutionRule)

A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no substitution will occur.

transformationRules[]

object (TransformationRule)

A list of transformation rules to be applied against Kubernetes resources as they are selected for restoration from a Backup. Rules are executed in order defined - this order matters, as changes made by a rule may impact the filtering logic of subsequent rules. An empty list means no transformation will occur.

Union field namespaced_resource_restore_scope. Specifies the namespaced resources to restore from the Backup. Only one of the entries may be specified. If not specified, NO namespaced resources will be restored.

Note: Resources will never be restored into managed namespaces such as kube-system, kube-public, or kube-node-lease. These namespaces are silently skipped when all_namespaces is selected. Listing them explicitly will result in an error. namespaced_resource_restore_scope can be only one of the following:

allNamespaces

boolean

Restore all namespaced resources in the Backup if set to "True". Specifying this field to "False" is an error.

selectedNamespaces

object (Namespaces)

A list of selected Namespaces to restore from the Backup. The listed Namespaces and all resources contained in them will be restored.

selectedApplications

object (NamespacedNames)

A list of selected ProtectedApplications to restore. The listed ProtectedApplications and all the resources to which they refer will be restored.

noNamespaces

boolean

Do not restore any namespaced resources if set to "True". Specifying this field to "False" is not allowed.

excludedNamespaces

object (Namespaces)

A list of selected namespaces excluded from restoration. All namespaces except those in this list will be restored.

VolumeDataRestorePolicy

Defines how volume data should be restored.

Enums
VOLUME_DATA_RESTORE_POLICY_UNSPECIFIED Unspecified (illegal).
RESTORE_VOLUME_DATA_FROM_BACKUP For each PVC to be restored, create a new underlying volume and PV from the corresponding VolumeBackup contained within the Backup.
REUSE_VOLUME_HANDLE_FROM_BACKUP For each PVC to be restored, attempt to reuse the original PV contained in the Backup (with its original underlying volume). This option is likely only usable when restoring a workload to its original cluster.
NO_VOLUME_DATA_RESTORATION For each PVC to be restored, create PVC without any particular action to restore data. In this case, the normal Kubernetes provisioning logic would kick in, and this would likely result in either dynamically provisioning blank PVs or binding to statically provisioned PVs.

ClusterResourceConflictPolicy

Defines the behavior for handling the situation where cluster-scoped resources being restored already exist in the target cluster.

Enums
CLUSTER_RESOURCE_CONFLICT_POLICY_UNSPECIFIED Unspecified. Only allowed if no cluster-scoped resources will be restored.
USE_EXISTING_VERSION Do not attempt to restore the conflicting resource.
USE_BACKUP_VERSION Delete the existing version before re-creating it from the Backup. This is a dangerous option which could cause unintentional data loss if used inappropriately. For example, deleting a CRD will cause Kubernetes to delete all CRs of that type.

NamespacedResourceRestoreMode

Defines the behavior for handling the situation where sets of namespaced resources being restored already exist in the target cluster.

Enums
NAMESPACED_RESOURCE_RESTORE_MODE_UNSPECIFIED Unspecified (invalid).
DELETE_AND_RESTORE When conflicting top-level resources (either Namespaces or ProtectedApplications, depending upon the scope) are encountered, this will first trigger a delete of the conflicting resource AND ALL OF ITS REFERENCED RESOURCES (e.g., all resources in the Namespace or all resources referenced by the ProtectedApplication) before restoring the resources from the Backup. This mode should only be used when you are intending to revert some portion of a cluster to an earlier state.
FAIL_ON_CONFLICT If conflicting top-level resources (either Namespaces or ProtectedApplications, depending upon the scope) are encountered at the beginning of a restore process, the Restore will fail. If a conflict occurs during the restore process itself (e.g., because an out of band process creates conflicting resources), a conflict will be reported.

ClusterResourceRestoreScope

Defines the scope of cluster-scoped resources to restore.

Some group kinds are not reasonable choices for a restore, and will cause an error if selected here. Any scope selection that would restore "all valid" resources automatically excludes these group kinds. - gkebackup.gke.io/BackupJob - gkebackup.gke.io/RestoreJob - metrics.k8s.io/NodeMetrics - migration.k8s.io/StorageState - migration.k8s.io/StorageVersionMigration - Node - snapshot.storage.k8s.io/VolumeSnapshotContent - storage.k8s.io/CSINode

Some group kinds are driven by restore configuration elsewhere, and will cause an error if selected here. - Namespace - PersistentVolume

JSON representation
{
  "selectedGroupKinds": [
    {
      object (GroupKind)
    }
  ],
  "excludedGroupKinds": [
    {
      object (GroupKind)
    }
  ],
  "allGroupKinds": boolean,
  "noGroupKinds": boolean
}
Fields
selectedGroupKinds[]

object (GroupKind)

A list of cluster-scoped resource group kinds to restore from the backup. If specified, only the selected resources will be restored. Mutually exclusive to any other field in the message.

excludedGroupKinds[]

object (GroupKind)

A list of cluster-scoped resource group kinds to NOT restore from the backup. If specified, all valid cluster-scoped resources will be restored except for those specified in the list. Mutually exclusive to any other field in the message.

allGroupKinds

boolean

If True, all valid cluster-scoped resources will be restored. Mutually exclusive to any other field in the message.

noGroupKinds

boolean

If True, no cluster-scoped resources will be restored. This has the same restore scope as if the message is not defined. Mutually exclusive to any other field in the message.

GroupKind

This is a direct map to the Kubernetes GroupKind type GroupKind and is used for identifying specific "types" of resources to restore.

JSON representation
{
  "resourceGroup": string,
  "resourceKind": string
}
Fields
resourceGroup

string

API group string of a Kubernetes resource, e.g. "apiextensions.k8s.io", "storage.k8s.io", etc. Note: use empty string for core API group

resourceKind

string

Kind of a Kubernetes resource, e.g. "CustomResourceDefinition", "StorageClass", etc.

SubstitutionRule

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to substitution) and substitution logic.

JSON representation
{
  "targetNamespaces": [
    string
  ],
  "targetGroupKinds": [
    {
      object (GroupKind)
    }
  ],
  "targetJsonPath": string,
  "originalValuePattern": string,
  "newValue": string
}
Fields
targetNamespaces[]

string

(Filtering parameter) Any resource subject to substitution must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for substitution). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.

targetGroupKinds[]

object (GroupKind)

(Filtering parameter) Any resource subject to substitution must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for substitution).

targetJsonPath

string

Required. This is a JSONPath expression that matches specific fields of candidate resources and it operates as both a filtering parameter (resources that are not matched with this expression will not be candidates for substitution) as well as a field identifier (identifies exactly which fields out of the candidate resources will be modified).

originalValuePattern

string

(Filtering parameter) This is a regular expression that is compared against the fields matched by the targetJsonPath expression (and must also have passed the previous filters). Substitution will not be performed against fields whose value does not match this expression. If this field is NOT specified, then ALL fields matched by the targetJsonPath expression will undergo substitution. Note that an empty (e.g., "", rather than unspecified) value for this field will only match empty fields.

newValue

string

This is the new value to set for any fields that pass the filtering and selection criteria. To remove a value from a Kubernetes resource, either leave this field unspecified, or set it to the empty string ("").

TransformationRule

A transformation rule to be applied against Kubernetes resources as they are selected for restoration from a Backup. A rule contains both filtering logic (which resources are subject to transform) and transformation logic.

JSON representation
{
  "fieldActions": [
    {
      object (TransformationRuleAction)
    }
  ],
  "resourceFilter": {
    object (ResourceFilter)
  },
  "description": string
}
Fields
fieldActions[]

object (TransformationRuleAction)

Required. A list of transformation rule actions to take against candidate resources. Actions are executed in order defined - this order matters, as they could potentially interfere with each other and the first operation could affect the outcome of the second operation.

resourceFilter

object (ResourceFilter)

This field is used to specify a set of fields that should be used to determine which resources in backup should be acted upon by the supplied transformation rule actions, and this will ensure that only specific resources are affected by transformation rule actions.

description

string

The description is a user specified string description of the transformation rule.

TransformationRuleAction

TransformationRuleAction defines a TransformationRule action based on the JSON Patch RFC (https://www.rfc-editor.org/rfc/rfc6902)

JSON representation
{
  "op": enum (Op),
  "fromPath": string,
  "path": string,
  "value": string
}
Fields
op

enum (Op)

Required. op specifies the operation to perform.

fromPath

string

A string containing a JSON Pointer value that references the location in the target document to move the value from.

path

string

A string containing a JSON-Pointer value that references a location within the target document where the operation is performed.

value

string

A string that specifies the desired value in string format to use for transformation.

Op

Possible values for operations of a transformation rule action.

Enums
OP_UNSPECIFIED Unspecified operation
REMOVE The "remove" operation removes the value at the target location.
MOVE The "move" operation removes the value at a specified location and adds it to the target location.
COPY The "copy" operation copies the value at a specified location to the target location.
ADD The "add" operation performs one of the following functions, depending upon what the target location references: 1. If the target location specifies an array index, a new value is inserted into the array at the specified index. 2. If the target location specifies an object member that does not already exist, a new member is added to the object. 3. If the target location specifies an object member that does exist, that member's value is replaced.
TEST The "test" operation tests that a value at the target location is equal to a specified value.
REPLACE The "replace" operation replaces the value at the target location with a new value. The operation object MUST contain a "value" member whose content specifies the replacement value.

ResourceFilter

ResourceFilter specifies matching criteria to limit the scope of a change to a specific set of kubernetes resources that are selected for restoration from a backup.

JSON representation
{
  "namespaces": [
    string
  ],
  "groupKinds": [
    {
      object (GroupKind)
    }
  ],
  "jsonPath": string
}
Fields
namespaces[]

string

(Filtering parameter) Any resource subject to transformation must be contained within one of the listed Kubernetes Namespace in the Backup. If this field is not provided, no namespace filtering will be performed (all resources in all Namespaces, including all cluster-scoped resources, will be candidates for transformation). To mix cluster-scoped and namespaced resources in the same rule, use an empty string ("") as one of the target namespaces.

groupKinds[]

object (GroupKind)

(Filtering parameter) Any resource subject to transformation must belong to one of the listed "types". If this field is not provided, no type filtering will be performed (all resources of all types matching previous filtering parameters will be candidates for transformation).

jsonPath

string

This is a JSONPath expression that matches specific fields of candidate resources and it operates as a filtering parameter (resources that are not matched with this expression will not be candidates for transformation).