Ceph Rollback

Ceph Rollback
Certified
Roll back an RBD image to a snapshot

Calls POST /api/block/image/{image_spec}/snap/{snapshot_name}/rollback, reverting the image's data to the snapshot's state. Destructive: any writes made to the image after the snapshot was taken are discarded.

yaml
type: io.kestra.plugin.ceph.rbd.snapshots.Rollback

Examples

Roll back an RBD image to a previous snapshot

yaml
id: rollback_rbd_image
namespace: company.team

tasks:
  - id: rollback
    type: io.kestra.plugin.ceph.rbd.snapshots.Rollback
    host: "ceph-mgr.internal"
    username: "admin"
    password: "{{ secret('CEPH_DASHBOARD_PASSWORD') }}"
    poolName: "rbd"
    imageName: "data-volume"
    snapshotName: "before-migration"

Properties

host *string

Ceph Dashboard host

Hostname or IP address of the Ceph Manager Dashboard. Must be reachable from the Kestra worker.

imageName *string

Image name

Name of the RBD image to roll back.

poolName *string

Pool name

Pool the image belongs to.

snapshotName *string

Snapshot name

Name of the snapshot to roll back to.

password string

Password

Password for the Ceph Dashboard account. Never logged. Required unless token is set; ignored otherwise.

pluginDefaultsRef string

Reference (ref) of the pluginDefaults to apply to this task.

port integerstring

Default8443

Ceph Dashboard port

TCP port of the Ceph Manager Dashboard REST API. Defaults to 8443.

skipSsl booleanstring

Defaultfalse

Skip TLS certificate verification

When true, disables TLS certificate verification. Useful when the Ceph Manager Dashboard uses a self-signed certificate, which is the default on most Ceph deployments. Defaults to false (secure): enable it explicitly and only for trusted networks.

token string

Pre-obtained JWT

A JWT obtained from POST /api/auth, used directly instead of username/password. Reused as-is for every request in the execution. It expires (Ceph default 8h TTL) and is NOT auto-renewed, so do not use it in triggers or scheduled flows; use username/password there instead. Mutually exclusive with password: when set, username/password are ignored.