Merge pull request #128 from oci-hpc/2.10.3_an_bastion_boot_vol_bkup

2.10.3 bastion boot volume backup

Author: arnaudfroidmont

bastion.tf

@@ -17,6 +17,25 @@ resource "oci_core_volume_attachment" "bastion_volume_attachment" {
   device          = "/dev/oracleoci/oraclevdb"
 } 
 
+resource "oci_core_volume_backup_policy" "bastion_boot_volume_backup_policy" {
+  count = var.bastion_boot_volume_backup ? 1 : 0
+	compartment_id = var.targetCompartment
+	display_name = "${local.cluster_name}-bastion_boot_volume_daily"
+	schedules {
+		backup_type = var.bastion_boot_volume_backup_type
+		period = var.bastion_boot_volume_backup_period
+		retention_seconds = var.bastion_boot_volume_backup_retention_seconds
+		time_zone = var.bastion_boot_volume_backup_time_zone
+	}
+}
+
+resource "oci_core_volume_backup_policy_assignment" "boot_volume_backup_policy" {
+  count = var.bastion_boot_volume_backup ? 1 : 0
+  depends_on = [oci_core_volume_backup_policy.bastion_boot_volume_backup_policy]
+  asset_id  = oci_core_instance.bastion.boot_volume_id
+  policy_id = oci_core_volume_backup_policy.bastion_boot_volume_backup_policy[0].id
+}
+
 resource "oci_resourcemanager_private_endpoint" "rms_private_endpoint" {
   count = var.private_deployment ? 1 : 0
   compartment_id = var.targetCompartment
@@ -26,6 +45,13 @@ resource "oci_resourcemanager_private_endpoint" "rms_private_endpoint" {
   subnet_id      = local.subnet_id
 }
 
+resource "null_resource" "boot_volume_backup_policy" { 
+  depends_on = [oci_core_instance.bastion, oci_core_volume_backup_policy.bastion_boot_volume_backup_policy, oci_core_volume_backup_policy_assignment.boot_volume_backup_policy] 
+  triggers = { 
+    bastion = oci_core_instance.bastion.id
+  } 
+}
+
 resource "oci_core_instance" "bastion" {
   depends_on          = [local.bastion_subnet]
   availability_domain = var.bastion_ad
@@ -150,6 +176,16 @@ resource "null_resource" "bastion" {
       private_key = tls_private_key.ssh.private_key_pem
     }
   }
+  provisioner "file" {
+    source      = "scripts"
+    destination = "/opt/oci-hpc/"
+    connection {
+      host        = local.host
+      type        = "ssh"
+      user        = var.bastion_username
+      private_key = tls_private_key.ssh.private_key_pem
+    }
+  }
   provisioner "file" { 
     content        = templatefile("${path.module}/configure.tpl", { 
       configure = var.configure
@@ -256,7 +292,6 @@ resource "null_resource" "cluster" {
     }
   }
 
-
   provisioner "file" {
     content     = var.node_count > 0 ? join("\n",local.cluster_instances_ips) : "\n"
     destination = "/tmp/hosts"
@@ -444,4 +479,4 @@ provisioner "file" {
       private_key = tls_private_key.ssh.private_key_pem
     }
   }
-}
+}

schema.yaml

@@ -34,6 +34,7 @@ variableGroups:
       - ${bastion_custom_memory}
       - ${bastion_memory}
       - ${bastion_boot_volume_size}
+      - ${bastion_boot_volume_backup}
   - title: "Compute node options"
     variables:
       - ${use_multiple_ads}
@@ -188,6 +189,10 @@ variableGroups:
       - ${ssh_cidr}
       - ${marketplace_source_images}
       - ${marketplace_version_id}
+      - ${bastion_boot_volume_backup_period}
+      - ${bastion_boot_volume_backup_retention_seconds}
+      - ${bastion_boot_volume_backup_time_zone}
+      - ${bastion_boot_volume_backup_type}
     visible: false
   - title: "Debug"
     variables: 
@@ -433,6 +438,13 @@ variables:
     minimum: 50
     title: "Size of the boot volume in GB"
     default: 50
+
+  bastion_boot_volume_backup:
+    type: boolean
+    title: "Enable boot volume backup"
+    description: "Schedule: Daily, Type: Incremental, Start Time: 00:00 Regional Time, Retention: 90 days."
+    default: true
+  
   bastion_block:
     type: boolean
     title: Additional block volume for shared space

variables.tf

@@ -26,6 +26,11 @@ variable "custom_login_image" {
   default = "image.ocid" 
 }
 variable "bastion_boot_volume_size" {}
+variable "bastion_boot_volume_backup" {}
+variable "bastion_boot_volume_backup_type" {default = "INCREMENTAL"}
+variable "bastion_boot_volume_backup_period" {default = "ONE_DAY"}
+variable "bastion_boot_volume_backup_retention_seconds" {default = "7776000"}
+variable "bastion_boot_volume_backup_time_zone" {default = "REGIONAL_DATA_CENTER_TIME"}
 variable "cluster_network_shape" { default = "BM.HPC2.36" }
 variable "instance_pool_shape" { default = "VM.Standard2.4" }
 variable "node_count" { default = 2 }