R-1252 (P2): a rejected or absent backup block never deletes second-drive copies — reconcile only on a valid classification; a rejected block is said on the app's status and once a day to the operator (backup_run_failures); kept copies stay kept (H2); Remove drops the kept records it deleted (H9). Commit only.

2026-10-24 20:07:16 +02:00
parent 062f9b41d9
commit 518a13592d
16 changed files with 400 additions and 6 deletions
@@ -185,6 +185,8 @@ type Manager struct {

 	// hollow (Part D, v0.279.0) — the running apps whose newest copy holds no data. See hollow_watch.go.
 	hollow hollowWatch
+	// tier2Unreadable (R-1252) dedupes the operator signal for a rejected backup block: once per app per day.
+	tier2Unreadable tier2UnreadableWatch

 	// F17 restore seams — overridable in tests so the .sql re-import orchestration can be unit-tested
 	// without Docker. Default to the real DiscoverDatabases / ImportDump (lazy-init in reimportDBDumps).