EDIT: I should clarify that, like the other HA solutions in the article, of course you need to couple this with a backup solution, like periodic dumps to S3, such as the article suggests.
EDIT: I should clarify that, like the other HA solutions in the article, of course you need to couple this with a backup solution, like periodic dumps to S3, such as the article suggests.
But thanks for the reply, I've edited to clarify that disk sharing is an alternative to the three HA solutions in the article, not the one backup solution (which in all examples is the mundane "copy to S3").
And gives a little more insight into backup options too: https://www.postgresql.org/docs/10/static/backup.html
If you mis-manage failover, you will destroy your data. This makes proper backup even more important.
Yep, botched failovers are bad. Of course, a botched failover between replicated DBs is no walk in the park either. In many such cases you'll still want to pull backups anyway, if there's no clear way in your domain to merge two "authoritative" databases.
In all cases where you care about your data, you must take backups. There is no substitute for that step.
Additionally, you want to periodically restore your backups and test them for validity — ideally automatically. There's a saying in the ops world, borne of bitter experience:
"Your backups are only as good as their last successful restore."
Ambiguity in online discourse is an ongoing problem. Thanks for helping resolve this occurrence without acrimony.