Customize scope of backup and restore
You can use the --scope option to customize what data
is backed up or restored.
By default, the puppet-backup create command backs up the
following data, and the puppet-backup restore command
restores the same data:
- Your PE configuration, including license, classification, and RBAC settings. However, the configuration backup data does not include Puppet gems or Puppet Server gems.
- PE CA certificates and the full SSL directory.
- The Puppet code deployed to your code directory at the time of the backup.
- PuppetDB data, including facts, catalogs and historical reports.
puppet-backup command does not
include secret keys. You must back up this data separately and securely.If you want to have discrete backup files, or if you want to back up some parts of your
infrastructure more often than others, you can use --scope command line option to limit the scope of a backup or restore. The
--scope option accepts one or more of certs, code, config, or puppetdb. If
unspecified, the default value is all. For details about
what is and isn't included in each scope, refer to Directories and data in backups.
For example, if you have frequent code changes, you might back up your Puppet code more often than you back up the rest of your infrastructure. When you limit the backup scope, the backup file contains only the parts of your infrastructure that you specify. Be sure to identify the scope in your backup file's name so you know what each file contains.
When you restore your primary server, you must restore your Puppet configuration, certificates, code, and PuppetDB data. However, you can restore each aspect from
different files, either by using backup files that have limited scopes or by limiting
the restore scope. For example, by limiting the scope when you run the puppet-backup restore command, you could restore Puppet code, configuration, and certificates from one
backup file, and then restore PuppetDB from a different
backup file.
puppet-backup restore command multiple times,
restoring a different file each time, until you have restored all four data sets
(configuration, certificates, code, and PuppetDB).





