Enable Container Registry DB backups for Registry GA
## Short description <!-- add a short summary of what is being proposed --> The container registry meta db is not currently being considered for backup using the current backup and restore rake tasks https://gitlab.com/gitlab-org/gitlab/-/issues/532507 This feature is [committed to be GA by Q4](https://gitlab.com/gitlab-org/gitlab/-/issues/532507#note_2511480980) so we need to create a backup and restore solution for customers. ## Connection to technical roadmap <!-- Link to https://infra-roadmap-c6d14f.gitlab.io/ items, such as https://infra-roadmap-c6d14f.gitlab.io/#project-durability_unified_backup_restore In the technical roadmap [YAML](https://gitlab.com/gitlab-com/gl-infra/infra-roadmap/-/blob/main/data/stage-data_access.yml), explain how the project aligns with stated goals of the company. Which goal(s) is it helping along? - [FY26-28 Platforms strategy](https://docs.google.com/document/d/1E5T9TSkqxWkvCpWNbfrqmEFM5sXMO4HT-D22m_QjfyA/edit?tab=t.0) - [FY26 Data Access Product Outcomes](https://docs.google.com/document/d/1ymSJU24RkSC7n4YzuwYgQj6F8Yx_rNsSBk-2hIgkxI4/edit?tab=t.0#heading=h.lun6ty6cqwk6) - [FY26 plan from Bill](https://university.gitlab.com/learn/course/draft-fy26-company-memo/main/fy26-company-memo?client=internal-team-members&page=3) - [Data Access Vision](https://handbook.gitlab.com/handbook/engineering/infrastructure-platforms/data-access/#vision) Don't forget to link back this epic from the yml. --> ## Expected impact <!-- What will happen? How will it be measured? --> - Meet customer requirements for backup and restore that includes the Registry meta db. ## Exit criteria <!-- When is it done? Prevent scope creep by defining it here! --> 1. We can backup and restore the container registry db in both Omnibus and CNG environments 1. Registry meta-database is part of our automated backup and restore testing ## Timeline and Effort <!-- How much time do we think it'll take to complete? Wild guesses are appropriate here! We can always iterate on any section here. --> <!-- DO NOT EDIT BELOW - Used for the epic status automation bot --> <!-- STATUS NOTE START --> ## Status 2026-02-26 This week saw active development across multiple implementation tracks for the Container Registry database backup feature. The Omnibus backup role MR ([omnibus-gitlab!9129](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/9129)) received significant attention with architectural discussions around making the role additive and organizingation of the omnibus-gitlab changes. :clock1: **total hours spent this week by all contributors**: 8 :tada: **achievements**: - [charts/gitlab!4717](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/4717) — Changes for Cloud Native GitLab are progressing through maintainer review - [omnibus-gitlab!9129](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/9129) — Draft MR implementing the Omnibus backup role received substantial review activity: - Architectural discussion resolved: the backup role will be **additive** (not disabling other services), making it safe for single-node deployments. - Core Rails change [gitlab!215296](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/215296) continues progressing through review :issue-blocked: **blockers**: - [omnibus-gitlab!9005](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/9005) — Still awaiting **maintainer review**. This is the primary blocker for the Omnibus track; it implements registry backup credentials and must merge before [omnibus-gitlab!9129](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/9129) can follow - The core Rails change [gitlab!215296](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/215296) not yet being merged makes end-to-end testing in downstream MRs more difficult :arrow_forward: **next**: - Obtain review and merge [omnibus-gitlab!9005](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/9005) - Continue refinement and review of the backup role in [omnibus-gitlab!9129](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/9129) - Merge [charts/gitlab!4717](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/4717) once maintainer review is complete - Complete backend and database review on [gitlab!215296](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/215296) - Begin documentation work per [gitlab#581281](https://gitlab.com/gitlab-org/gitlab/-/issues/581281) and plan integration testing once primary MRs are merged _Copied from https://gitlab.com/groups/gitlab-com/gl-infra/data-access/durability/-/epics/45#note_3114193084_ <!-- STATUS NOTE END -->
epic