NetBackup™ Snapshot Manager for Cloud Install and Upgrade Guide
- Introduction
- Section I. NetBackup Snapshot Manager for Cloud installation and configuration
- Preparing for NetBackup Snapshot Manager for Cloud installation
- Meeting system requirements
- NetBackup Snapshot Manager host sizing recommendations
- NetBackup Snapshot Manager extension sizing recommendations
- Creating an instance or preparing the host to install NetBackup Snapshot Manager
- Installing container platform (Docker, Podman)
- Creating and mounting a volume to store NetBackup Snapshot Manager data
- Verifying that specific ports are open on the instance or physical host
- Preparing NetBackup Snapshot Manager for backup from snapshot jobs
- OCI - iptables rules for backup from snapshot jobs
- Deploying NetBackup Snapshot Manager for Cloud using container images
- Before you begin installing NetBackup Snapshot Manager
- Installing NetBackup Snapshot Manager in the Docker/Podman environment
- Installing NetBackup Snapshot Manager on CIS Level 2 v2 configured host
- Securing the connection to NetBackup Snapshot Manager
- Verifying that NetBackup Snapshot Manager is installed successfully
- Restarting NetBackup Snapshot Manager
- Deploying NetBackup Snapshot Manager for Cloud extensions
- Before you begin installing NetBackup Snapshot Manager extensions
- Downloading the NetBackup Snapshot Manager extension
- Installing the NetBackup Snapshot Manager extension on a VM
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (AKS) in Azure
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (EKS) in AWS
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (GKE) in GCP
- Install extension using the Kustomize and CR YAMLs
- Managing the extensions
- NetBackup Snapshot Manager for cloud providers
- Why to configure the NetBackup Snapshot Manager cloud providers?
- AWS plug-in configuration notes
- Prerequisites for configuring the AWS plug-in
- Before you create a cross account configuration
- Prerequisites for application consistent snapshots using AWS Systems Service Manager
- Prerequisites for configuring AWS plug-in using VPC endpoint
- AWS permissions required by NetBackup Snapshot Manager
- Configuring AWS permissions for NetBackup Snapshot Manager
- Google Cloud Platform plug-in configuration notes
- Prerequisites for configuring the GCP plug-in using Credential and Service Account option
- Google Cloud Platform permissions required by NetBackup Snapshot Manager
- Preparing the GCP service account for plug-in configuration
- Configuring a GCP service account for NetBackup Snapshot Manager
- GCP cross-project configuration
- GCP shared VPC configuration
- Microsoft Azure plug-in configuration notes
- Microsoft Azure Stack Hub plug-in configuration notes
- OCI plug-in configuration notes
- Cloud Service Provider endpoints for DBPaaS
- Configuration for protecting assets on cloud hosts/VM
- Deciding which feature (on-host agent or agentless) of NetBackup Snapshot Manager is to be used for protecting the assets
- Protecting assets with NetBackup Snapshot Manager's on-host agent feature
- Installing and configuring NetBackup Snapshot Manager agent
- Configuring the NetBackup Snapshot Manager application plug-in
- Configuring an application plug-in
- Microsoft SQL plug-in
- Oracle plug-in
- Protecting assets with NetBackup Snapshot Manager's agentless feature
- Snapshot Manager for cloud catalog backup and recovery
- NetBackup Snapshot Manager for cloud assets protection
- Volume encryption in NetBackup Snapshot Manager for cloud
- NetBackup Snapshot Manager for Cloud security
- Preparing for NetBackup Snapshot Manager for Cloud installation
- Section II. NetBackup Snapshot Manager for Cloud maintenance
- NetBackup Snapshot Manager for Cloud logging
- Upgrading NetBackup Snapshot Manager for Cloud
- About NetBackup Snapshot Manager for Cloud upgrades
- Supported upgrade path
- Upgrade scenarios
- Preparing to upgrade NetBackup Snapshot Manager
- Upgrading NetBackup Snapshot Manager
- Upgrading NetBackup Snapshot Manager using patch or hotfix
- Applying operating system patches on NetBackup Snapshot Manager host
- Migrating and upgrading NetBackup Snapshot Manager
- GCP configuration for migration from zone to region
- Post-upgrade tasks
- Post-migration tasks
- Uninstalling NetBackup Snapshot Manager for Cloud
- Preparing to uninstall NetBackup Snapshot Manager
- Backing up NetBackup Snapshot Manager
- Unconfiguring NetBackup Snapshot Manager plug-ins
- Unconfiguring NetBackup Snapshot Manager agents
- Removing the NetBackup Snapshot Manager agents
- Removing NetBackup Snapshot Manager from a standalone Docker host environment
- Removing NetBackup Snapshot Manager extensions - VM-based or managed Kubernetes cluster-based
- Restoring NetBackup Snapshot Manager
- Troubleshooting NetBackup Snapshot Manager for Cloud
- Troubleshooting NetBackup Snapshot Manager
- SQL snapshot or restore and granular restore operations fail if the Windows instance loses connectivity with the NetBackup Snapshot Manager host
- Disk-level snapshot restore fails if the original disk is detached from the instance
- Discovery is not working even after assigning system managed identity to the control node pool
- Performance issue with GCP backup from snapshot
- Post migration on host agents fail with an error message
- File restore job fails with an error message
- Acknowledgment not received for datamover
- Google Cloud Platform does display the Snapshot ID of the disk
- Application state of the connected/configured cloud VM(s) displays an error after upgrading to NetBackup Snapshot Manager version 11.x
- Backup and restore jobs fail with timeout error
- GCP restore with encryption key failed with an error message
- Amazon Redshift clusters and databases not available after discovery
- Shared VPC subnet not visible
- Container manager may not spawn the ephemeral registration container timely
- GCP restore from VM fails to obtain firewall rules
- Parameterised VM restore fails to retrieve encryption keys
- Restore from snapshot of a VM with security type Trusted Launch fails
- Snapshot Manager failed to retrieve the specified cloud domain(s), against the specified plugin instance
- Issues with SELinux configuration
- Performance issues with OCI backup from snapshot and restore from backup copy
- Connection to Amazon Linux 2023 or Alma Linux machines fail
- Single file restore from snapshot copy fails with an error
- MS SQL application backup, restore, or SFR job on Windows cloud VM fails with an error
- Status 49 error appears
- Restore from backup fails with an error
- (For AWS) If the specified AMI is not subscribed in the given region an error message appears
- Restore of Azure Disk Encrypted VM fails with an error
Installing the extension on GCP (GKE)
Before you install the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (GKE) in GCP:
To install the extension
- Download the extension script
nbu_flexsnap_extension.tar.See Downloading the NetBackup Snapshot Manager extension.
Note:
Do not create the authentication token yet, as it is valid only for 180 seconds.
- If the host from which you want to install the extension is not the same host where your NetBackup Snapshot Manager is installed, load the NetBackup Snapshot Manager container images on the extension host (
flexsnap-deploy, flexsnap-core, flexsnap-fluentd, flexsnap-datamover)The image names are in the following format:
Example:
veritas/flexsnap-deploy - Tag the images to map the source image with the target image, so that you can push the images to the GCP container registry.
Gather the following parameters beforehand:
Parameter
Description
container_registry_path
To obtain the container registry path, go to your container registry in GCP and from the Overview pane, copy the 'Login server'.
Example:
gcr.io/<project-name>/<dir>tag
NetBackup Snapshot Manager image version.
Example:
11.0.x.x-xxxxTo tag the images, run the following command for each image, depending on the container platform running on your host:
For Docker: # docker tag source_image:tag target_image:tag
For Podman: # podman tag source_image:tag target_image:tag
Where,
the source image tag is: veritas/flexsnap-deploy:tag>
the target image tag is:
<container_registry_path>/<source_image_name>:<SnapshotManager_version_tag>
Example:
# docker tag veritas/flexsnap-deploy:11.0.x.x-xxxx gcr.io/<project-name>/ veritas/flexsnap-deploy:11.0.x.x-xxxx # docker tag veritas/flexsnap-core:11.0.x.x-xxxx gcr.io/<project-name>/ veritas/flexsnap-listener:11.0.x.x-xxxx # docker tag veritas/flexsnap-fluentd:11.0.x.x-xxxx gcr.io/<project-name>/ veritas/flexsnap-fluentd:11.0.x.x-xxxx # docker tag veritas/flexsnap-datamover:11.0.x.x-xxxx gcr.io/<project-name>/ veritas/flexsnap-datamover:11.0.x.x-xxxx
- To push the images to the container registry, run the following command for each image, depending on the container platform running on your host:
For Docker: # docker push target_image:tag
For Podman: # podman push target_image:tag
Example:
# docker push gcr.io/<project-name>/veritas/flexsnap-deploy:11.0.x.x-xxxx # docker push gcr.io/<project-name>/veritas/flexsnap-core:11.0.x.x-xxxx # docker push gcr.io/<project-name>/veritas/flexsnap-fluentd:11.0.x.x-xxxx # docker push gcr.io/<project-name>/veritas/flexsnap-datamover:11.0.x.x-xxxx
- Finally, run the script
cp_extension.shthat was downloaded earlier.See Downloading the NetBackup Snapshot Manager extension.
The script can be executed either by providing all the required input parameters in one command, or in an interactive way where you will be prompted for input.
Gather the following parameters before running the script:
Parameter
Description
cloudpoint_ip
Provide IP address or FQDN of the main NetBackup Snapshot Manager host.
target_image:tag
Target image tag created for the flexsnap-deploy image in step 3.
Example: gcr.io/<project-name>/veritas/flexsnap-deploy:11.0.x.x-xxxx
namespace
NetBackup Snapshot Manager namespace that was created earlier in the preparation steps.
tag_key=tag_val
tag_keyandtag_valcan be retrieved by using the following command:# gcloud container node-pools list --cluster=<cluster-name> --zone=<zone-name>
persistent_volume
Kubernetes persistent volume that was created earlier in the preparation steps.
Size in GiB
Volume size to be provisioned as per your scaling requirements.
workflow_token
Authentication token created from the NetBackup Web UI - Add extension dialog.
Note:
While deploying NetBackup Snapshot Manager Kubernetes extension, create a persistent volume and provide it as an input to the NetBackup Snapshot Manager extension installation script.
Run the script as an executable file:
Permit the script to run as an executable:
# chmod +x cp_extension.sh
Run the installation command with all the input parameters described in the above table:
./cp_extension.sh install -c <snapshotmanager-ip> -i <target-image:tag> -n <namespace> -p cloud.google.com/gke-nodepool=<nodepool-name> -v <persistent-volume-name> -k <size-in-GiB> -t <token>
Example:
# ./cp_extension.sh install Snapshot Manager image repository path. Format=<Login-server/image:tag>: gcr.io/cloudpoint-development/test/veritas/flexsnap-deploy:11.0.x.x-xxxx Snapshot Manager extension namespace: test-ns Snapshot Manager IP or fully-qualified domain name: <ip Address> Node group/pool label with format key=value: cloud.google.com/gke-nodepool= test-pool-dnd Persistent volume name: test-fileserver-pv Size in GiB (minimum 30 GiB, Please refer NetBackup Snapshot Manager Install and Upgrade Guide for PV size): 30 Snapshot Manager extension token: This is a fresh NetBackup Snapshot Manager Extension Installation Starting Snapshot Manager service deployment customresourcedefinition.apiextensions.k8s.io/cloudpoint-servers.veritas.com unchanged serviceaccount/cloudpoint-acc unchanged clusterrole.rbac.authorization.k8s.io/cloudpoint-shashwat-ns configured clusterrolebinding.rbac.authorization.k8s.io/cloudpoint-rolebinding-shashwat-ns unchanged deployment.apps/flexsnap-operator created Snapshot Manager service deployment ...done customresourcedefinition.apiextensions.k8s.io/cloudpoint-servers.veritas.com condition met Generating Snapshot Manager Custom Resource Definition object Waiting for deployment "flexsnap-operator" rollout to finish: 0 of 1 updated replicas are available... deployment "flexsnap-operator" successfully rolled out cloudpointrule.veritas.com/cloudpoint-config-rule created Snapshot Manager extension installation ... Operator operations passed Waiting for all components to come up ...Done [root@xxxx]# kubectl get pods NAME READY STATUS RESTARTS AGE flexsnap-fluentd-collector-79f4dd8447-5lgrf 1/1 Running 0 34s flexsnap-fluentd-xl7px 1/1 Running 0 33s flexsnap-listener-598f48d59b-crfjq 1/1 Running 0 33s flexsnap-operator-574dccc58f-fnkdf 1/1 Running 0 104s
Run the script as an interactive file:
Run the following command:
# ./cp_extension.sh install
When the script runs, provide the input parameters as described in the above table:
./cp_extension.sh install Snapshot Manager image repository path. Format=<Login-server/image:tag>: cpautomation.gcr.io/ <project-name>/veritas/flexsnap-deploy:11.0.x.x-xxxx Snapshot Manager extension namespace: snapshot-manager Snapshot Manager IP or fully-qualified domain name: xx.xxx.xx.xx Node group/pool label with format key=value: agentpool=extpool Persistent volume name: Size in GiB (minimum 30 GiB, Please refer NetBackup Snapshot Manager Install and Upgrade Guide for PV size): 50 Snapshot Manager extension token: This is a fresh NetBackup Snapshot Manager Extension Installation Starting Snapshot Manager service deployment customresourcedefinition.apiextensions.k8s.io/cloudpoint-servers.veritas.com unchanged serviceaccount/cloudpoint-acc created clusterrole.rbac.authorization.k8s.io/cloudpoint-cloudpoint-yj created clusterrolebinding.rbac.authorization.k8s.io/cloudpoint-rolebinding-cloudpoint-yj created deployment.apps/flexsnap-operator created Snapshot Manager service deployment ...done Generating Snapshot Manager Custom Resource Definition object Waiting for deployment "flexsnap-operator" rollout to finish:0 of 1 updated replicas are available.. deployment "flexsnap-operator" successfully rolled out cloudpointrule.veritas.com/cloudpoint-config-rule created Snapshot Manager extension installation ... Operator operations passed Waiting for all components to come up ...Done Waiting for all components to come up ...Done
Note:
The output examples have been formatted to fit the screen.
This concludes the NetBackup Snapshot Manager extension installation on a managed Kubernetes cluster (in GCP).
To verify that the extension is installed successfully:
Verify that the success message is displayed at the command prompt.
Verify that the extension is listed on the NetBackup Web UI.
Go to Cloud > NetBackup Snapshot Manager tab > click Advanced settings > go to NetBackup Snapshot Manager extensions tab and verify.
Run the following command and verify that there are five pods, namely,
flexsnap-operator-xxx,flexsnap-fluentd-xxx,flexsnap-listener-xxx,flexsnap-deploy-xxxandflexsnap-fluentd-collector-xxxare in Running state:# kubectl get pods -n <namespace>
Example: # kubectl get pods -n cloudpoint-system
The
flexsnap-datamover-xxxxpod will not run by-default after deployment, it will get created only if backup operation is triggered.