Please enter search query.
Search <book_title>...
NetBackup™ for OpenStack Administrator's Guide
Last Published:
2024-09-29
Product(s):
NetBackup & Alta Data Protection (10.5)
- Introduction
- Deploying NetBackup for OpenStack
- Requirements
- NetBackup for OpenStack network considerations
- Preparing the installation
- Spinning up the NetBackup for OpenStack virtual machine
- Installing NetBackup for OpenStack Components
- Installing on RHOSP
- Prepare for deployment
- Updating the overcloud roles data file to include NetBackup for OpenStack services
- Additional Steps on NetBackup for OpenStack Appliance
- Installing on Ansible OpenStack Ussuri
- Installing on Kolla
- Pushing NetBackup for OpenStack images to the local registry
- Installing on RHOSP
- Configuring NetBackup for OpenStack
- Post Installation Health-Check
- Uninstalling NetBackup for OpenStack
- Uninstalling from RHOSP
- Uninstalling from Ansible OpenStack
- Uninstalling from Kolla Openstack
- Uninstalling from RHOSP
- Upgrading NetBackup for OpenStack
- Configuring NetBackup OpenStack Appliance
- Configuring NetBackup primary server
- NetBackup for OpenStack protections
- Performing snapshots, backups, and restores of OpenStack
- About restores
- Required restore.json file for CLI
- About schedules
- Performing Backup Administration tasks
- Disaster recovery
- Troubleshooting
- General Troubleshooting Tips
- Health check of NetBackup for OpenStack
- Important log files
Configuring the NBOSVM service principal
You must configure service principal for a secure communication between NBOSVM and NetBackup.
Configuring the NBOSVM service principal
- Create a non-root user in the NetBackup primary server.
adduser <username>
- Log in to the NetBackup primary server web UI.
- From the left side menu, go to Security > RBAC > Default Security Administrator.
- On the Users tab, add the non-root user that you have created.
- Go to Security > Access keys.
- Click Add and enter the non-root user to create the access token.
- Add the generated access token and NetBackupHostName in the cURL command and run it on the NetBackup primary server.
curl --insecure --location --request POST \ 'https://<NetBackupHostName>:1556/netbackup/security/service-principal-configs' \ -H 'accept: application/vnd.netbackup+json;version=11.0' \ -H 'Content-Type: application/vnd.netbackup+json;version=11.0' \ -H 'Authorization: <Access Token>' \ -d '{ "data": { "type": "servicePrincipalConfiguration", "attributes": { "servicePrincipalId": "Service_Principal_NBOSVM", "servicePrincipalType": "OPENSTACK", "servicePrincipalApiKeyExpireAfterDays": "P365D", "isSecurityAdmin": true, "accessDefinitions": [ { "namespace": "|SECURITY|USERS|API-KEYS|", "operations": [ "|OPERATIONS|VIEW|" ] }, { "namespace": "|SECURITY|SERVICE-PRINCIPAL|", "operations": [ "|OPERATIONS|VIEW|" ] }, { "namespace": "|ASSETS|OPENSTACK|", "operations": [ "|OPERATIONS|ADD|", "|OPERATIONS|VIEW|", "|OPERATIONS|UPDATE|", "|OPERATIONS|ASSETS|OPENSTACK|RESTORE_ORIGINAL|", "|OPERATIONS|ASSETS|OPENSTACK|RESTORE_ALTERNATE|", "|OPERATIONS|ASSETS|OPENSTACK|PROTECT|" ] }, { "namespace": "|PROTECTION|PROTECTION_PLAN|", "operations": [ "|OPERATIONS|VIEW|", "|OPERATIONS|PROTECTION|PROTECTION_PLAN|SUBSCRIBE|" ] }, { "namespace": "|PROTECTION|POLICIES|", "operations": [ "|OPERATIONS|PROTECTION|POLICIES|MANUAL-BACKUP|", "|OPERATIONS|VIEW|" ] }, { "namespace": "|CREDENTIALS|", "operations": [ "|OPERATIONS|ADD|", "|OPERATIONS|UPDATE|", "|OPERATIONS|DELETE|" ] }, { "namespace": "|MANAGE|NBOSVM-SERVER|", "operations": [ "|OPERATIONS|ADD|", "|OPERATIONS|UPDATE|", "|OPERATIONS|DELETE|" ] }, { "namespace": "|MANAGE|JOBS|", "operations": [ "|OPERATIONS|ADD|", "|OPERATIONS|VIEW|" ] }, { "namespace": "|STORAGE|STORAGE-SERVERS|", "operations": [ "|OPERATIONS|VIEW|" ] }, { "namespace": "|STORAGE|STORAGE-SERVERS|UNIVERSAL-SHARES|", "operations": [ "|OPERATIONS|VIEW|" ] }, { "namespace": "|MANAGE|IMAGES|", "operations": [ "|OPERATIONS|VIEW|" ] } ] } } }'
Note:
Keep a note of servicePrincipalId and apiKey from the response of the cURL. They are required in the NetBackup for OpenStack configuration.
For information about service-principal-configs API, see the NetBackup API Documentation.