NetBackup™ for Kubernetes Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (10.5)
  1. Overview of NetBackup for Kubernetes
    1.  
      Overview
    2.  
      Features of NetBackup support for Kubernetes
  2. Deploying and configuring the NetBackup Kubernetes operator
    1.  
      Prerequisites for NetBackup Kubernetes Operator deployment
    2.  
      Deploy service package on NetBackup Kubernetes operator
    3.  
      Port requirements for Kubernetes operator deployment
    4.  
      Upgrade the NetBackup Kubernetes operator
    5.  
      Delete the NetBackup Kubernetes operator
    6.  
      Configure NetBackup Kubernetes data mover
    7.  
      Automated configuration of NetBackup protection for Kubernetes
    8. Configure settings for NetBackup snapshot operation
      1.  
        Kubernetes operators supported configuration parameters
      2.  
        Prerequisites for backup from snapshot and restore from backup operations
      3.  
        DTE client settings supported in Kubernetes
      4.  
        Customization of datamover properties
    9.  
      Troubleshooting NetBackup servers with short names
    10.  
      Data mover pod schedule mechanism support
    11.  
      Validating accelerator storage class
  3. Deploying certificates on NetBackup Kubernetes operator
    1.  
      Deploy certificates on the Kubernetes operator
    2.  
      Perform Host-ID-based certificate operations
    3.  
      Perform ECA certificate operations
    4.  
      Identify certificate types
  4. Managing Kubernetes assets
    1.  
      Add a Kubernetes cluster
    2. Configure settings
      1.  
        Change resource limits for Kuberentes resource types
      2.  
        Configure autodiscovery frequency
      3.  
        Configure permissions
    3.  
      Add protection to the assets
    4. Scan for malware
      1.  
        Assets by workload type
  5. Managing Kubernetes intelligent groups
    1.  
      About intelligent group
    2.  
      Create an intelligent group
    3.  
      Delete an intelligent group
    4.  
      Edit an intelligent group
  6. Managing Kubernetes policies
    1.  
      Create a policy
  7. Protecting Kubernetes assets
    1.  
      Protect an intelligent group
    2.  
      Remove protection from an intelligent group
    3.  
      Configure backup schedule
    4.  
      Configure backup options
    5.  
      Configure backups
    6.  
      Configure Auto Image Replication (A.I.R.) and duplication
    7.  
      Configure storage units
    8.  
      Volume mode support
    9.  
      Configure application consistent backup
  8. Managing image groups
    1. About image groups
      1.  
        Image expire
      2.  
        Image copy
  9. Protecting Rancher managed clusters in NetBackup
    1.  
      Add Rancher managed RKE cluster in NetBackup using automated configuration
    2.  
      Add Rancher managed RKE cluster manually in NetBackup
  10. Recovering Kubernetes assets
    1.  
      Explore and validate recovery points
    2.  
      Restore from snapshot
    3.  
      Restore from backup copy
  11. About incremental backup and restore
    1.  
      Incremental backup and restore support for Kubernetes
  12. Enabling accelerator based backup
    1.  
      About NetBackup Accelerator support for Kubernetes workloads
    2.  
      Controlling disk space for track logs on primary server
    3.  
      Effect of storage class behavior on Accelerator
    4.  
      About Accelerator forced rescan
    5.  
      Warnings and probable reason for Accelerator backup failures
  13. Enabling FIPS mode in Kubernetes
    1.  
      Enable Federal Information Processing Standards (FIPS) mode in Kubernetes
  14. About Openshift Virtualization support
    1.  
      OpenShift Virtualization support
    2.  
      Application consistent virtual machines backup
    3.  
      Troubleshooting for virtualization
  15. Troubleshooting Kubernetes issues
    1.  
      Error during the primary server upgrade: NBCheck fails
    2.  
      Error during an old image restore: Operation fails
    3.  
      Error during persistent volume recovery API
    4.  
      Error during restore: Final job status shows partial failure
    5.  
      Error during restore on the same namespace
    6.  
      Datamover pods exceed the Kubernetes resource limit
    7.  
      Error during restore: Job fails on the highly loaded cluster
    8.  
      Custom Kubernetes role created for specific clusters cannot view the jobs
    9.  
      Openshift creates blank non-selected PVCs while restoring applications installed from OperatorHub
    10.  
      NetBackup Kubernetes operator become unresponsive if PID limit exceeds on the Kubernetes node
    11.  
      Failure during edit cluster in NetBackup Kubernetes 10.1
    12.  
      Backup or restore fails for large sized PVC
    13.  
      Restore of namespace file mode PVCs to different file system partially fails
    14.  
      Restore from backup copy fails with image inconsistency error
    15.  
      Connectivity checks between NetBackup primary, media, and Kubernetes servers.
    16.  
      Error during accelerator backup when there is no space available for track log
    17.  
      Error during accelerator backup due to track log PVC creation failure
    18.  
      Error during accelerator backup due to invalid accelerator storage class
    19.  
      Error occurred during track log pod start
    20.  
      Failed to setup the data mover instance for track log PVC operation
    21.  
      Error to read track log storage class from configmap

About NetBackup Accelerator support for Kubernetes workloads

NetBackup Accelerator reduces the backup time for Kubernetes cluster backups.

For Kubernetes backups, the Accelerator feature is activated when you select a storage type that supports Accelerator. For example, MSDP, OpenStorage, CloudStorage, and MSDP-C (Azure and AWS), and Kubernetes clusters that support Accelerator-enabled backups.

Note:

Accelerator enabled backup is supported only for the file mode PVCs.

Enable accelerator support for a specific Kubernetes cluster

The NetBackup Kubernetes Operator values.yaml has an entry acceleratorTracklogPvcStorageClass: None

To enable Accelerator, specify a valid storage class name to generate the track logs for Accelerator backups. Storage class helps to create a file mode volume which is usable on any of the worker nodes within the Kubernetes cluster.

Note:

If the acceleratorTracklogPvcStorageClass is set to None and an Accelerator-enabled storage is selected, then the Accelerator backup jobs do not run. After upgrade to NetBackup 10.4 release, the default value of acceleratorTracklogPvcStorageClass is None.

For more details, refer to the Validating accelerator storage classsection in the NetBackup for Kubernetes Administrator's Guide.

Resource throttling and storage requirements for Accelerator track log storage class
  • The default value for the number of Backup from Snapshot jobs per Kubernetes cluster is 4.

  • If 4 Backup from Snapshot jobs with Accelerator run to back up 4 PVCs simultaneously, these jobs consume some storage.

  • As per this calculation, each PVC requires some space for track log creation. Track log size in Bytes = 2*((Number of files in PVC * 200) + ((Total used disk space in PVC KiB/128KiB) * 20))

  • The storage that is required to run 4 Backup from Snapshot jobs simultaneously = Sum of track log size of 4 PVCs.

    Therefore, the storage requirement changes if the number of Backup from Snapshot jobs per Kubernetes cluster is changed.

  • Ensure that a sufficient storage is available before running the backups jobs. To avoid storage issues, elastic storage can be used.

Backup streams

NetBackup Accelerator creates the backup stream as follows:

  • If the namespace has no previous backup, NetBackup performs a full backup.

  • For the next backup job, NetBackup identifies data that is changed since the previous backup. Only the changed blocks and the header information are included in the backup, to create a full backup.

  • Once the backup is done, bpbkar on the data mover updates the track log. Track log path inside data mover - usr/openv/netbackup/track/<primary server>/<storage server>/<k8s cluster name>_<namespace uuid>_<pvc uuid>/<policy>/<backup selection>

  • This track log is then transferred to primary server in the inline style at the following location:

    /usr/openv/netbackup/db/track/<primary server>/<storage server>/<k8s cluster name>_<namespace uuid>_<pvc uuid>/<policy>/<backup selection>

  • When the next Accelerator backup job is initiated, the track log is fetched from the primary server to identify the changed files. Then it is updated with the new content and transferred back to the primary server.