NetBackup™ Web UI Kubernetes Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (10.4)
  1. Overview of NetBackup for Kubernetes
    1.  
      Overview
    2.  
      Features of NetBackup support for Kubernetes
  2. Deploying and configuring the NetBackup Kubernetes operator
    1.  
      Prerequisites for NetBackup Kubernetes Operator deployment
    2.  
      Deploy service package on NetBackup Kubernetes operator
    3.  
      Port requirements for Kubernetes operator deployment
    4.  
      Upgrade the NetBackup Kubernetes operator
    5.  
      Delete the NetBackup Kubernetes operator
    6.  
      Configure NetBackup Kubernetes data mover
    7.  
      Automated configuration of NetBackup protection for Kubernetes
    8. Configure settings for NetBackup snapshot operation
      1.  
        Kubernetes operators supported configuration parameters
      2.  
        Prerequisites for backup from snapshot and restore from backup operations
      3.  
        DTE client settings supported in Kubernetes
      4.  
        Customization of datamover properties
    9.  
      Troubleshooting NetBackup servers with short names
    10.  
      Data mover pod schedule mechanism support
    11.  
      Validating accelerator storage class
  3. Deploying certificates on NetBackup Kubernetes operator
    1.  
      Deploy certificates on the Kubernetes operator
    2.  
      Perform Host-ID-based certificate operations
    3.  
      Perform ECA certificate operations
    4.  
      Identify certificate types
  4. Managing Kubernetes assets
    1.  
      Add a Kubernetes cluster
    2. Configure settings
      1.  
        Change resource limits for Kuberentes resource types
      2.  
        Configure autodiscovery frequency
      3.  
        Configure permissions
    3.  
      Add protection to the assets
    4. Scan for malware
      1.  
        Assets by workload type
  5. Managing Kubernetes intelligent groups
    1.  
      About intelligent group
    2.  
      Create an intelligent group
    3.  
      Delete an intelligent group
    4.  
      Edit an intelligent group
  6. Protecting Kubernetes assets
    1.  
      Protect an intelligent group
    2.  
      Remove protection from an intelligent group
    3.  
      Configure backup schedule
    4.  
      Configure backup options
    5.  
      Configure backups
    6.  
      Configure Auto Image Replication (AIR) and duplication
    7.  
      Configure storage units
    8.  
      Volume mode support
    9.  
      Configure application consistent backup
  7. Managing image groups
    1. About image groups
      1.  
        Image expire
      2.  
        Image copy
  8. Protecting Rancher managed clusters in NetBackup
    1.  
      Add Rancher managed RKE cluster in NetBackup using automated configuration
    2.  
      Add Rancher managed RKE cluster manually in NetBackup
  9. Recovering Kubernetes assets
    1.  
      Explore and validate recovery points
    2.  
      Restore from snapshot
    3.  
      Restore from backup copy
  10. About incremental backup and restore
    1.  
      Incremental backup and restore support for Kubernetes
  11. Enabling accelerator based backup
    1.  
      About NetBackup accelerator support for Kubernetes workloads
    2.  
      Controlling disk space for track logs on primary server
    3.  
      Impact of storage class behavior on accelerator
    4.  
      About accelerator forced rescan
    5.  
      Warnings and probable reason for accelerator backup failures
  12. Enabling FIPS mode in Kubernetes
    1.  
      Enable Federal Information Processing Standards (FIPS) mode in Kubernetes
  13. Troubleshooting Kubernetes issues
    1.  
      Error during the primary server upgrade: NBCheck fails
    2.  
      Error during an old image restore: Operation fails
    3.  
      Error during persistent volume recovery API
    4.  
      Error during restore: Final job status shows partial failure
    5.  
      Error during restore on the same namespace
    6.  
      Datamover pods exceed the Kubernetes resource limit
    7.  
      Error during restore: Job fails on the highly loaded cluster
    8.  
      Custom Kubernetes role created for specific clusters cannot view the jobs
    9.  
      Openshift creates blank non-selected PVCs while restoring applications installed from OperatorHub
    10.  
      NetBackup Kubernetes operator become unresponsive if PID limit exceeds on the Kubernetes node
    11.  
      Failure during edit cluster in NetBackup Kubernetes 10.1
    12.  
      Restore from snapshot fails for large sized PVC
    13.  
      Restore of namespace file mode PVCs to different file system partially fails
    14.  
      Restore from backup copy fails with image inconsistency error
    15.  
      Connectivity checks between NetBackup primary, media, and Kubernetes servers.
    16.  
      Error during accelerator backup when there is no space available for track log
    17.  
      Error during accelerator backup due to track log PVC creation failure
    18.  
      Error during accelerator backup due to invalid accelerator storage class
    19.  
      Error occurred during track log pod start
    20.  
      Failed to setup the data mover instance for track log PVC operation
    21.  
      Error to read track log storage class from configmap

Incremental backup and restore support for Kubernetes

NetBackup Kubernetes release 10.4 provides backup support using differential, cumulative and automatic schedules.

Incremental backups reduce the backup window significantly in NetBackup. In this method, NetBackup, backs up only the data that has been changed since the subsequent full backup.

Incremental backup support

Incremental backup supports only the filesystem type persistent volumes. The block type persistent volumes backups are always full backup irrespective of the schedule types.

Note:

Snapshot copy is always a full backup due to storage class limitation. Apart from snapshot copy, backup from snapshot, duplicate copies have incremental support.

Restore jobs

Restore from a complete recovery point performs point in time restore. All the data till that recovery point is restored.

Restore from a recovery point marked as Complete = No (incomplete) cannot be possible.

Image chain validation

Image chain validation operation is performed for recovery point copies, the validation is reflected in the Complete field of recovery point of each backup copy.

Complete field is set to Yes when all the related images of the recovery points are present.

Note:

Recovery point completeness marked as No (Complete = No) if incremental backups chain is incomplete or any image is missing from the image group.

Auto Image Replication (AIR) limitation

AIR is supported only for the full schedule backup jobs. AIR function is not supported for Differential Incremental, Cumulative Incremental, or Automatic schedules.

Restore from manual import

Manually imported incremental images can be restored from a valid recovery point (Complete = Yes).

Troubleshooting for manual import

After manual import, if the recovery point is marked as Incomplete, then the image chain might be broken due to few images missed out during the manual import operation.

To recreate an image chain for manual import operation

  1. Check /usr/openv/netbackup/logs/bpdbm/root{dateformat}.log and find log line previous backup relationship. To restore the relationship, know which image/ images are missed out from the manual import operation.
  2. Import the missed out images and run the following command to create a new image chain.

    `bpimage -update -id <backupid> -previous_backupid <previous backup id>`

CTIME and MTIME flags
  • USE_CTIME_FOR_INCREMENTALS option for NetBackup clients:

    • The USE_CTIME_FOR_INCREMENTALS entry changes how NetBackup determines whether or not a file has changed. This entry causes the client software to use both modification time and inode change time during incremental backups to determine if a file has changed (mtime and ctime).

  • DO_NOT_RESET_FILE_ACCESS_TIME option for NetBackup clients:

    • The DO_NOT_RESET_FILE_ACCESS_TIME entry specifies that if a file is backed up, its access time (atime) displays the time of the backup. By default, NetBackup preserves the access time. NetBackup resets the previous value of the backup.

    • To set the datamover properties: User must set or update the flag in NetBackup primary server specific configmap created under NetBackupKOps namespace on Kubernetes cluster.

    • Example:

      apiVersion: v1 
      
      data: 
      
        datamover.properties: | 
      
          image=reg.domain.com/datamover/image:latest 
      
          VERBOSE=5 
      
          VXMS_VERBOSE=5 
      
          USE_CTIME_FOR_INCREMENTALS=YES 
      
          DO_NOT_RESET_FILE_ACCESS_TIME=YES 
      
           version: "1" 
      
      kind: ConfigMap 
      
      metadata: 
      
        name: backupserver.sample.domain.com 
      
        namespace: <NetBackupKOps-Namespace>
Protection plan

Following the schedules are supported in NetBackup Kubernetes workload.

  • Automatic

  • Full

  • Differential Incremental

  • Cumulative Incremental

A protection plan with different schedules can be configured as follows

To backup with different schedules types

  1. In a protection plan, select backup type (Full, Differential Incremental, Cumulative Incremental, Automatic).
  2. Under configure schedule for snapshot, provide values for recurrence and snapshot retention.

    Provide values for Backup from snapshot retention period.

  3. In the start window tab, set a schedule time and then click Add.
  4. Under Schedules and retention section, click Add schedule to add multiple schedules in the same protection plan (Differential Incremental, Cumulative Incremental).
  5. Select a storage and follow the remaining steps to run a backup job.
Automatic schedule
  • In the case of automatic type schedule, based on recurrence of snapshot schedule get resolved after creation of protection plan.

  • If recurrence is less than one week, then a single differential and full schedule is created.

Recommendations
  • Follow the recommendation for Retention values in a protection plan for incremental schedules.

    • To perform a restore from recovery point for any copies (snapshot, backup from snapshot, duplicate), it is recommended to keep the retention duration of the copy for longer period.

    • Example, to restore from a backup copy, retention of Backup from Snapshot must be more than Snapshot copy. Otherwise, the backup copy will expire and recovery point will be marked as COMPLETE = NO

    • In such cases, the warnings appears on the NetBackup web UI as follows:

      • It is recommended to set backup retention period more than snapshot retention period.

      • It is recommended to set duplication retention period more than the backup retention period.

  • Always add full backup schedule along with cumulative backup schedule. Otherwise, every Cumulative backup will be Full backup.

  • By default, the Backup from Snapshot option is always enabled for incremental backup types.