|
| 1 | +#!/usr/bin/env bash |
| 2 | + |
| 3 | +# This script performs a full logical backup of Elasticsearch using elasticsearch-dump (multielasticdump). |
| 4 | +# It dumps all indices' data, mappings, analyzers, aliases, settings, and templates, |
| 5 | +# packages them into a tar archive, and pushes to backup storage via datasafed. |
| 6 | + |
| 7 | +set -e |
| 8 | +set -o errexit |
| 9 | +set -x |
| 10 | + |
| 11 | +export PATH="$PATH:$DP_DATASAFED_BIN_PATH" |
| 12 | +export DATASAFED_BACKEND_BASE_PATH="$DP_BACKUP_BASE_PATH" |
| 13 | + |
| 14 | +ES_ENDPOINT="http://${DP_DB_HOST}.${KB_NAMESPACE}.svc.cluster.local:9200" |
| 15 | + |
| 16 | +# Exit handler: write backup info on success, or touch exit file on failure |
| 17 | +handle_exit() { |
| 18 | + exit_code=$? |
| 19 | + if [ $exit_code -ne 0 ]; then |
| 20 | + echo "failed with exit code $exit_code" |
| 21 | + touch "${DP_BACKUP_INFO_FILE}.exit" |
| 22 | + exit 1 |
| 23 | + else |
| 24 | + echo "{}" >"${DP_BACKUP_INFO_FILE}" |
| 25 | + exit 0 |
| 26 | + fi |
| 27 | +} |
| 28 | +trap handle_exit EXIT |
| 29 | + |
| 30 | +# Build authenticated endpoint URL for elasticdump |
| 31 | +if [ -n "${ELASTIC_USER_PASSWORD}" ]; then |
| 32 | + ES_AUTH_ENDPOINT="http://elastic:${ELASTIC_USER_PASSWORD}@${DP_DB_HOST}.${KB_NAMESPACE}.svc.cluster.local:9200" |
| 33 | +else |
| 34 | + ES_AUTH_ENDPOINT="${ES_ENDPOINT}" |
| 35 | +fi |
| 36 | + |
| 37 | +# Create temporary backup directory |
| 38 | +BACKUP_DIR=/tmp/es-dump-backup |
| 39 | +rm -rf ${BACKUP_DIR} |
| 40 | +mkdir -p ${BACKUP_DIR} |
| 41 | + |
| 42 | +echo "INFO: Starting elasticsearch-dump full backup" |
| 43 | +echo "INFO: Elasticsearch endpoint: ${ES_ENDPOINT}" |
| 44 | + |
| 45 | +# Default match pattern: only backup user indices (exclude system indices starting with ".") |
| 46 | +# System indices (.kibana, .kibana_task_manager, .security, .tasks, .apm, etc.) |
| 47 | +# are managed internally by Elasticsearch and Kibana. Restoring them from a backup |
| 48 | +# will overwrite their internal migration/state tracking and cause errors (e.g. Kibana |
| 49 | +# migration lock). Override with the MATCH env variable if needed. |
| 50 | +MATCH_PATTERN="${MATCH:-^[^\.]}" |
| 51 | +echo "INFO: Index match pattern: ${MATCH_PATTERN}" |
| 52 | + |
| 53 | +# Set elasticdump options |
| 54 | +DUMP_OPTS="" |
| 55 | +if [ -n "${SCROLL_TIME}" ]; then |
| 56 | + DUMP_OPTS="${DUMP_OPTS} --scrollTime=${SCROLL_TIME}" |
| 57 | +fi |
| 58 | +if [ -n "${LIMIT}" ]; then |
| 59 | + DUMP_OPTS="${DUMP_OPTS} --limit=${LIMIT}" |
| 60 | +fi |
| 61 | + |
| 62 | +# Use multielasticdump to dump all matched indices |
| 63 | +# Types: data (documents), mapping (index mappings), analyzer (custom analyzers), |
| 64 | +# alias (index aliases), settings (index settings), template (index templates) |
| 65 | +multielasticdump \ |
| 66 | + --direction=dump \ |
| 67 | + --input="${ES_AUTH_ENDPOINT}" \ |
| 68 | + --output="${BACKUP_DIR}" \ |
| 69 | + --match="${MATCH_PATTERN}" \ |
| 70 | + --includeType=data,mapping,analyzer,alias,settings,template \ |
| 71 | + "${DUMP_OPTS}" |
| 72 | + |
| 73 | +echo "INFO: elasticsearch-dump completed, packaging backup data" |
| 74 | + |
| 75 | +# Tar and push to backup storage via datasafed |
| 76 | +cd ${BACKUP_DIR} |
| 77 | +tar -cf - . | datasafed push -z zstd-fastest - "/${DP_BACKUP_NAME}.tar.zst" |
| 78 | + |
| 79 | +echo "INFO: Backup data pushed to storage successfully" |
| 80 | + |
| 81 | +# Cleanup |
| 82 | +rm -rf ${BACKUP_DIR} |
0 commit comments