gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-21 03:46:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(kms): add the disaster-recovery drill runbook

Browse Source 
Documents the procedure the harness automates: what a drill measures and why
the object probe rather than the manifest digest is the acceptance criterion,
the per-backend responsibility split, the disaster matrix, how to read the
evidence bundle, the two interrupted-cutover outcomes, and the Vault variant
whose cryptographic root comes back through Vault's own flow.
This commit is contained in:
overtrue
2026-08-02 02:49:10 +08:00
parent d8ca707fb3
commit 2f597b2855
2 changed files with 117 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/kms/src/backup/drill.rs
+4
View File
@@ -56,6 +56,10 @@
//! the unit tests of [`crate::backup::local_export`] and
//! [`crate::backup::local_restore`]. The drill exercises the operator-facing
//! loop on top of them rather than restating them.
//!
//! The procedure this harness automates, how to read the evidence, and the
//! Vault variant are documented in
//! `docs/operations/kms-disaster-recovery-drill.md`.
use crate::backends::local::{LOCAL_KMS_MASTER_KEY_SALT_FILE, LOCAL_RESTORE_COMMIT_MARKER_FILE, LocalKmsBackend};
use crate::backends::{KmsBackend as KmsBackendTrait, local::validate_key_id};