NetBackup™ for Kubernetes Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (11.0)
  1. Overview of NetBackup for Kubernetes
    1.  
      Overview
    2.  
      Features of NetBackup support for Kubernetes
  2. Deploying and configuring the NetBackup Kubernetes operator
    1.  
      Prerequisites for NetBackup Kubernetes Operator deployment
    2.  
      Deploy service package on NetBackup Kubernetes operator
    3.  
      Port requirements for Kubernetes operator deployment
    4.  
      Upgrade the NetBackup Kubernetes operator
    5.  
      Delete the NetBackup Kubernetes operator
    6.  
      Configure NetBackup Kubernetes data mover
    7.  
      Automated configuration of NetBackup protection for Kubernetes
    8. Customize Kubernetes workload
      1.  
        Prerequisites for backup from snapshot and restore from backup operations
      2.  
        DTE client settings supported in Kubernetes
      3.  
        Customization of datamover properties
    9.  
      Troubleshooting NetBackup servers with short names
    10.  
      Data mover pod schedule mechanism support
    11.  
      Validating accelerator storage class
  3. Deploying certificates on NetBackup Kubernetes operator
    1.  
      Deploy certificates on the Kubernetes operator
    2.  
      Perform Host-ID-based certificate operations
    3.  
      Perform ECA certificate operations
    4.  
      Identify certificate types
  4. Managing Kubernetes assets
    1.  
      Add a Kubernetes cluster
    2. Configure settings
      1.  
        Change resource limits for Kuberentes resource types
      2.  
        Configure autodiscovery frequency
      3.  
        Configure permissions
      4.  
        Asset cleanup
    3.  
      Add protection to the assets
    4. Scan for malware
      1.  
        Assets by workload type
  5. Managing Kubernetes intelligent groups
    1.  
      About intelligent group
    2.  
      Create an intelligent group
    3.  
      Delete an intelligent group
    4.  
      Edit an intelligent group
  6. Protecting Kubernetes assets
    1.  
      Protect an intelligent group
    2.  
      Remove protection from an intelligent group
    3.  
      Configure backup schedule
    4.  
      Configure backup options
    5.  
      Configure backups
    6.  
      Configure Auto Image Replication (A.I.R.) and duplication
    7.  
      Configure storage units
    8.  
      Volume mode support
    9.  
      Configure application consistent backup
  7. Managing image groups
    1. About image groups
      1.  
        Image expire
      2.  
        Image copy
  8. Protecting Rancher managed clusters in NetBackup
    1.  
      Add Rancher managed RKE cluster in NetBackup using automated configuration
    2.  
      Add Rancher managed RKE cluster manually in NetBackup
  9. Recovering Kubernetes assets
    1.  
      Explore and validate recovery points
    2.  
      Restore from snapshot
    3.  
      Restore from backup copy
  10. About incremental backup and restore
    1.  
      Incremental backup and restore support for Kubernetes
  11. Enabling accelerator based backup
    1.  
      About NetBackup Accelerator support for Kubernetes workloads
    2.  
      Controlling disk space for track logs on primary server
    3.  
      Effect of storage class behavior on Accelerator
    4.  
      About Accelerator forced rescan
    5.  
      Warnings and probable reason for Accelerator backup failures
  12. Enabling FIPS mode in Kubernetes
    1.  
      Enable Federal Information Processing Standards (FIPS) mode in Kubernetes
  13. Troubleshooting Kubernetes issues
    1.  
      Error during the primary server upgrade: NBCheck fails
    2.  
      Error during an old image restore: Operation fails
    3.  
      Error during persistent volume recovery API
    4.  
      Error during restore: Final job status shows partial failure
    5.  
      Error during restore on the same namespace
    6.  
      Datamover pods exceed the Kubernetes resource limit
    7.  
      Error during restore: Job fails on the highly loaded cluster
    8.  
      Custom Kubernetes role created for specific clusters cannot view the jobs
    9.  
      Openshift creates blank non-selected PVCs while restoring applications installed from OperatorHub
    10.  
      NetBackup Kubernetes operator become unresponsive if PID limit exceeds on the Kubernetes node
    11.  
      Failure during edit cluster in NetBackup Kubernetes 10.1
    12.  
      Backup or restore fails for large sized PVC
    13.  
      Restore of namespace file mode PVCs to different file system partially fails
    14.  
      Restore from backup copy fails with image inconsistency error
    15.  
      Connectivity checks between NetBackup primary, media, and Kubernetes servers.
    16.  
      Error during accelerator backup when there is no space available for track log
    17.  
      Error during accelerator backup due to track log PVC creation failure
    18.  
      Error during accelerator backup due to invalid accelerator storage class
    19.  
      Error occurred during track log pod start
    20.  
      Failed to setup the data mover instance for track log PVC operation
    21.  
      Error to read track log storage class from configmap

Incremental backup and restore support for Kubernetes

NetBackup Kubernetes versions 10.4 and later provide backup support for differential, cumulative, and automatic schedules.

Incremental backups reduce the backup window significantly in NetBackup. In this method, NetBackup backs up only the data that has been changed since the subsequent full backup.

Incremental backup support

Incremental backup supports only the file system type persistent volumes. The block type persistent volumes backups are always full backup irrespective of the schedule types.

Note:

Snapshot copy is always a full backup due to storage class limitation. Apart from snapshot copy, backup from snapshot, duplicate copies have incremental support.

Restore jobs

Restore from a complete recovery point performs point in time restore. All the data till that recovery point is restored.

If the Complete field displays No, you cannot restore from that recovery point.

Image chain validation

Image chain validation operation is performed for recovery point copies, the validation is reflected in the Complete field of recovery point of each backup copy.

The Complete field is set to Yes when all the related images of the recovery points are present.

Note:

The Complete field is marked as No (Complete = No) if the incremental backups chain is incomplete or if any image is missing from the image group.

Auto Image Replication (A.I.R.) limitation

A.I.R. is supported only for the full schedule backup jobs. A.I.R. function is not supported for differential incremental, cumulative incremental, or automatic schedules.

Restore from manual import

Manually imported incremental images can be restored from a valid recovery point (Complete = Yes).

Troubleshooting for manual import

After manual import, if the recovery point is marked as Incomplete, then the image chain might be broken because of the images that were missed for the manual import operation.

To recreate an image chain for manual import operation

  1. Open the file /usr/openv/netbackup/logs/bpdbm/root{dateformat}.log and find the line previous backup relationship. To restore the relationship, know which images are missed from the manual import operation.
  2. Import the missed out images and run the following command to create a new image chain.

    `bpimage -update -id <backupid> -previous_backupid <previous backup id>`

ctime and mtime flags

USE_CTIME_FOR_INCREMENTALS option for NetBackup clients:

  • The USE_CTIME_FOR_INCREMENTALS entry changes how NetBackup determines whether or not a file has changed. This entry causes the client software to use both modification time and inode change time during incremental backups to determine if a file has changed (mtime and ctime).

DO_NOT_RESET_FILE_ACCESS_TIME option for NetBackup clients:

  • The DO_NOT_RESET_FILE_ACCESS_TIME entry specifies that if a file is backed up, its access time (Atime) displays the time of the backup. By default, NetBackup preserves the access time. NetBackup resets the previous value of the backup.

  • To set the data mover properties: The user must set or update the flag in the NetBackup primary server-specific ConfigMap that is created under the NetBackupKOps namespace on the Kubernetes cluster.

  • Example:

    apiVersion: v1 
    data: 
      datamover.properties: | 
        image=reg.domain.com/datamover/image:latest 
        VERBOSE=5 
        VXMS_VERBOSE=5 
        USE_CTIME_FOR_INCREMENTALS=YES 
        DO_NOT_RESET_FILE_ACCESS_TIME=YES 
         version: "1" 
    kind: ConfigMap 
    metadata: 
      name: backupserver.sample.domain.com 
      namespace: <NetBackupKOps-Namespace>
Protection plan

Following the schedules are supported in NetBackup Kubernetes workload.

  • Automatic

  • Full

  • Differential Incremental

  • Cumulative Incremental

A protection plan with different schedules can be configured as follows.

To backup with different schedule types

  1. In a protection plan, select backup type (Full, Differential Incremental, Cumulative Incremental, Automatic).
  2. Under configure schedule for snapshot, provide values for recurrence and snapshot retention.

    Provide values for Backup from snapshot retention period.

  3. In the start window tab, set a schedule time and then click Add.
  4. Under the Schedules and retention section, click Add schedule to add multiple schedules in the same protection plan (Differential Incremental, Cumulative Incremental).
  5. Select a storage and follow the remaining steps to run a backup job.
Automatic schedule
  • In the case of automatic type schedule, based on recurrence of snapshot schedule get resolved after creation of protection plan.

  • If recurrence is less than one week, then a single differential and full schedule is created.

Recommendations
  • Follow the recommendation for Retention values in a protection plan for incremental schedules.

    • To perform a restore from recovery point for any copies (snapshot, backup from snapshot, duplicate), it is recommended to keep the retention duration of the copy for a longer period.

    • For example, to restore from a backup copy the retention of Backup from Snapshot must be more than a Snapshot copy. Otherwise, the backup copy expires and the recovery point is marked as COMPLETE = NO.

    • In such cases, the warnings appear in the NetBackup web UI as follows:

      • It is recommended to set backup retention period more than snapshot retention period.

      • It is recommended to set duplication retention period more than the backup retention period.

  • Always add a full backup schedule along with cumulative backup schedule. Otherwise, every Cumulative backup is performed as a Full backup.

  • By default, the Backup from Snapshot option is always enabled for incremental backup types.