NetBackup primary server upgrade from version 9.1 to 10.0 fails with a non-critical NBCheck error

Problem

NetBackup primary server upgrade from version 9.1 to 10.0 fails with a non-critical NBCheck error.

Error Message

The test found {{no. of policies}} active Kubernetes policy. This test fails if the NetBackup instance has any active Kubernetes policies. See: https://www.veritas.com/support/en_US/article.100052030.html

NBCheck fails while upgrading the NetBackup primary server from 9.1. to 10.0. Following is the error screenshot captured from Windows machine, similar error will occur for Linux platform.

Note: Above error message shows the count of Kubernetes active policies on NetBackup primary server.  For Windows machine, the message might not show the count of active Kubernetes policies if NetBackup services are down on NetBackup primary server. 

Cause

An error occurs while upgrading the NetBackup primary server from 9.1. to 10.0. version.

NetBackup version 10.0. does not support older NBUKOps version on Kubernetes clusters. Thus, backup images, protection plans, or policies created using NBUKOps 9.1. version will not be supported with NetBackup 10.0 version. So, it is recommended to deactivate all the active Kubernetes policies on the primary server before upgrading NetBackup to 10.0. version.

Solution

Procedure to resolve the problem:

1. Find all the active Kubernetes policies on the NetBackup server.
2. Deactivate all the active Kubernetes policies.
3. Resume the NetBackup primary server upgrade.
4. Uninstall the older version of NBUKOps from the cluster and then install the NBUKOps 10. 0.
5. Re-activate all the Kubernetes policies which are deactivated earlier as mentioned in Step No. 2.

Following are the commands and screenshots for each step:

Find out all Kubernetes policies using NetBackup administrator UI

Before upgrading the NetBackup primary server to 10.0.* version, deactivate all the active Kubernetes policies. To deactivate the policies, find all active policies

A. On the NetBackup Administrator Web UI, in the Protection tab, review the Kubernetes protection plans.

B. Click on a protection plan with Kubernetes type to view the details.
C. Copy the policy name. For example, bpplinfo <policy name> -modify -inactive

Run the following command to deactivate the Kubernetes policy: 

 # bpplinfo <policy name> -modify -inactive 

Resume the NetBackup primary server upgrade.

Note: Once you have deactivated all the active Kubernetes policies, proceed with the primary server upgrade and then the NBCheck can be passed. 

1. Uninstall the previous version of NBUKOps from the Kubernetes cluster and then install NBUKOps 10.0

After successfully upgrading the primary server, uninstall the older version of NBUKOps on the Kubernetes cluster.

Note: For successful Kubernetes protection, NBUKOps version on the Kubernetes cluster must be aligned with NetBackup primary server version.

Run the following command on the Kubernetes cluster to uninstall NBUKops 9.1.* and install the NBUKops 10.0. For more information, refer to WebUI Kubernetes Administrator Guide

• Uninstallation Steps of NBUKops 9.1.*
  >helm uninstall cc -n <namespace-name>
• Installation Steps of NBUKops 10.0
  >helm install cc-100 netbackupkops-helm-chart/ -n <namespace-name>

Follow the steps to reactivate the Kubernetes policies:

a. On the NetBackup WebUI, update the credentials with a new token and CA (Certificate Authority) certificate from the cluster where the NBUKops 10.0.* is installed.
b. Then, reactivate the policy, bpplinfo <Policy Name> -ct Kubernetes -modify –active.