<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Recovery on Deevnet IoTaaS</title><link>https://deevnet.github.io/deevnet-docs/docs/runbook/tenant/recovery/</link><description>Recent content in Recovery on Deevnet IoTaaS</description><generator>Hugo</generator><language>en-us</language><atom:link href="https://deevnet.github.io/deevnet-docs/docs/runbook/tenant/recovery/index.xml" rel="self" type="application/rss+xml"/><item><title>After a Site Rebuild</title><link>https://deevnet.github.io/deevnet-docs/docs/runbook/tenant/recovery/after-a-site-rebuild/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://deevnet.github.io/deevnet-docs/docs/runbook/tenant/recovery/after-a-site-rebuild/</guid><description>&lt;h1 id="after-a-site-rebuild">
 After a Site Rebuild
 &lt;a class="anchor" href="#after-a-site-rebuild">#&lt;/a>
&lt;/h1>
&lt;p>The operator tells you what was rebuilt. What you do depends on which part it was.&lt;/p>
&lt;table>
 &lt;thead>
 &lt;tr>
 &lt;th>What the site rebuilt&lt;/th>
 &lt;th>What comes back on its own&lt;/th>
 &lt;th>What you do&lt;/th>
 &lt;/tr>
 &lt;/thead>
 &lt;tbody>
 &lt;tr>
 &lt;td>&lt;strong>The Deevnet API&amp;rsquo;s registry&lt;/strong>&lt;/td>
 &lt;td>Nothing about you, until you apply&lt;/td>
 &lt;td>&lt;code>terraform apply&lt;/code>. Your state restores your tenant with the same index and keys, and the plan is otherwise empty. Only if another tenant has taken your index meanwhile are you given a new one, and your network and workloads are rebuilt on it&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>The tenant hypervisor&lt;/strong>&lt;/td>
 &lt;td>Your network, once the operator reconciles your tenant&lt;/td>
 &lt;td>Your &lt;strong>workloads do not come back yet&lt;/strong>: see below&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>The whole site&lt;/strong>&lt;/td>
 &lt;td>Nothing about you&lt;/td>
 &lt;td>Wait for the operator&amp;rsquo;s new handover file: it carries a new developer Wi-Fi key. Then apply. With your state, your tenant comes back with its keys. Without it, use the handover&amp;rsquo;s enrollment token and create your tenant again from your repository; it may get a new index, which doesn&amp;rsquo;t matter if you use names, and your devices need new secrets. Then push your application to each workload&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>&lt;strong>DNS, the state store, the log store or dashboards&lt;/strong>&lt;/td>
 &lt;td>Your zone and key, your state access, log tokens and dashboards login, once the operator reconciles your tenant&lt;/td>
 &lt;td>Re-check your names: see below. Log lines and dashboards stored on a lost host are gone&lt;/td>
 &lt;/tr>
 &lt;/tbody>
&lt;/table>
&lt;h2 id="your-workloads-after-a-tenant-hypervisor-rebuild">
 Your workloads, after a tenant hypervisor rebuild
 &lt;a class="anchor" href="#your-workloads-after-a-tenant-hypervisor-rebuild">#&lt;/a>
&lt;/h2>
&lt;p>A rebuilt tenant hypervisor comes back without your VMs. The site still lists them, so a plain
&lt;code>terraform apply&lt;/code> shows &lt;strong>no changes&lt;/strong> and rebuilds nothing. The API does rebuild a workload&amp;rsquo;s VM,
with the same address and name, whenever that workload is applied again. But there is no tested way
yet to make your apply send it. Until there is, ask the operator. Closing this is on the

 &lt;a href="https://deevnet.github.io/deevnet-docs/deevnet-docs/docs/roadmap/infrastructure/mobile/tenant-platform/">Tenant Platform&lt;/a> roadmap.&lt;/p></description></item><item><title>Lost State or Credentials</title><link>https://deevnet.github.io/deevnet-docs/docs/runbook/tenant/recovery/lost-credentials/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://deevnet.github.io/deevnet-docs/docs/runbook/tenant/recovery/lost-credentials/</guid><description>&lt;h1 id="lost-state-or-credentials">
 Lost State or Credentials
 &lt;a class="anchor" href="#lost-state-or-credentials">#&lt;/a>
&lt;/h1>
&lt;p>Your Terraform state holds every credential your tenant was issued, and for your &lt;strong>API token&lt;/strong> it is
the only copy. What you can get back depends on what you still have.&lt;/p>
&lt;table>
 &lt;thead>
 &lt;tr>
 &lt;th>You still have&lt;/th>
 &lt;th>You lost&lt;/th>
 &lt;th>Do this&lt;/th>
 &lt;/tr>
 &lt;/thead>
 &lt;tbody>
 &lt;tr>
 &lt;td>Your state&lt;/td>
 &lt;td>Your API token in this shell&lt;/td>
 &lt;td>&lt;code>export DEEVNET_API_TOKEN=$(terraform output -raw api_token)&lt;/code>&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>State in the site&amp;rsquo;s state store&lt;/td>
 &lt;td>The keys to read it (&lt;code>AWS_ACCESS_KEY_ID&lt;/code>, &lt;code>AWS_SECRET_ACCESS_KEY&lt;/code>)&lt;/td>
 &lt;td>See 
 &lt;a href="#keys-to-the-state-store">below&lt;/a>&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>A local &lt;code>terraform.tfstate.backup&lt;/code> from before you moved state into the store&lt;/td>
 &lt;td>Everything else&lt;/td>
 &lt;td>That file holds your API token and the state-store keys from before the move. Read them out without printing them, then read your state as usual&lt;/td>
 &lt;/tr>
 &lt;tr>
 &lt;td>Nothing&lt;/td>
 &lt;td>Your state and your token&lt;/td>
 &lt;td>Your tenant cannot be reached through its own Terraform. Ask the operator; the recovery is a rebuild, and devices need their keys reissued and reflashing&lt;/td>
 &lt;/tr>
 &lt;/tbody>
&lt;/table>
&lt;h2 id="keys-to-the-state-store">
 Keys to the state store
 &lt;a class="anchor" href="#keys-to-the-state-store">#&lt;/a>
&lt;/h2>
&lt;p>&lt;strong>Your state-store keys live inside the state they unlock, and there is no way yet to get the secret
key back without them.&lt;/strong>&lt;/p></description></item></channel></rss>