配置备份合规性策略

If you have strict data protection requirements, you can use Atlas Kubernetes Operator to enable a Backup Compliance Policy to protect your backup data.

重要

无法禁用备份合规策略

After you enable a Backup Compliance Policy, you can't disable it without MongoDB support. To disable a Backup Compliance Policy, the security or legal representative specified for the Backup Compliance Policy must request support and complete an extensive verification process. Before you enable a Backup Compliance Policy, carefully review the prohibited actions and considerations. You can re-enable a Backup Compliance Policy at any time.

禁止的操作

如果启用备份合规策略，则任何用户（无论角色如何）都无法执行某些操作。仔细查看禁止的行为。

重要

如果您将此参数设立为true ， Atlas都会升级项目中的所有备份策略，无论AtlasBackupPolicy自定义资源中指定了什么内容。 Atlas覆盖AtlasBackupPolicy自定义资源，并将该自定义资源的状态更新为Ready: False 。您必须手动更新AtlasBackupPolicy自定义资源，以与备份合规策略保持一致。

如果将此参数设立为false ，则如果现有备份策略不满足备份合规性策略，则创建备份合规性策略将失败。

Considerations

After you enable a Backup Compliance Policy, certain behaviors apply. Carefully review the considerations.

必需的访问权限

To configure a Backup Compliance Policy, you must have Project Owner access to the project. Users with Organization Owner access must add themselves as a Project Owner to the project before configuring a Backup Compliance Policy.

先决条件

仅 MongoDB 支持部门可以执行以下操作：
- 禁用备份合规策略。
- Disable Continuous Cloud Backup if the Backup Compliance Policy has the Require Point in Time Restore to all clusters option set to On.
- Reduce the Continuous Cloud Backup Restore Window.
- Delete policy items specified in the Backup Compliance Policy.
Only the specified security or legal representative can request support.
您只能将备份合规策略应用于 M10+ 专用集群。

注意
您无法将专用集群转换为 M0 免费集群、Flex集群或无服务器实例。

步骤

创建备份合规策略。

要学习；了解有关备份合规策略参数的更多信息，请参阅AtlasBackupCompliancePolicy自定义资源。

示例：

cat <<EOF | kubectl apply -f -
apiVersion: atlas.mongodb.com/v1
kind: AtlasBackupCompliancePolicy
metadata:
  name: my-backup-compliance-policy
  namespace: mongdb-atlas-system
spec:
  authorizedEmail: john.doe@example.com
  authorizedUserFirstName: John
  authorizedUserLastName: Doe
  copyProtectionEnabled: false
  encryptionAtRestEnabled: false
  onDemandPolicy:
    retentionUnit: weeks
    retentionValue: 3
  overwriteBackupPolicies: false
  pointInTimeEnabled: true
  restoreWindowDays: 42
  scheduledPolicyItems:
  - frequencyInterval: 2
    frequencyType: daily
    retentionUnit: days
    retentionValue: 7
EOF

注意

此备份合规性策略作为最低备份策略应用于项目中的所有集群。备份合规性策略可保护所有现有快照。备份合规性策略可防止任何用户（无论角色如何）在现有快照过期之前修改或删除现有快照。对此备份合规性策略所做的更改仅适用于未来的快照。如果启用备份合规性策略，则该策略会限制您降低备份存储成本的能力。您无法通过调整保留或删除备份来降低备份存储成本。

将备份合规性策略应用于项目。

在 spec.backupCompliancePolicyRef AtlasProject参数，指定引用 AtlasBackupCompliancePolicy自定义资源的不透明密钥的名称和命名空间。

示例：

cat <<EOF | kubectl apply -f -
apiVersion: atlas.mongodb.com/v1
kind: AtlasProject
metadata:
  name: my-project
spec:
  backupCompliancePolicyRef:
    name: my-backup-compliance-policy
    namespace: mongodb-atlas-system
EOF