NetBackup™ Deployment Guide for Kubernetes Clusters
- Introduction
- Section I. Deployment
- Prerequisites for Kubernetes cluster configuration
- Deployment with environment operators
- Deploying NetBackup
- Preparing the environment for NetBackup installation on Kubernetes cluster
- Recommendations of NetBackup deployment on Kubernetes cluster
- Limitations of NetBackup deployment on Kubernetes cluster
- Primary and media server CR
- Configuring NetBackup IT Analytics for NetBackup deployment
- Managing NetBackup deployment using VxUpdate
- Migrating the cloud node for primary or media servers
- Deploying NetBackup using Helm charts
- Deploying MSDP Scaleout
- Deploying MSDP Scaleout
- Prerequisites for AKS
- Prerequisites for EKS
- Installing the docker images and binaries
- Initializing the MSDP operator
- Configuring MSDP Scaleout
- Using MSDP Scaleout as a single storage pool in NetBackup
- Configuring the MSDP cloud in MSDP Scaleout
- Using S3 service in MSDP Scaleout for AKS
- Enabling MSDP S3 service after MSDP Scaleout is deployed for AKS
- Deploying Snapshot Manager
- Section II. Monitoring and Management
- Monitoring NetBackup
- Monitoring MSDP Scaleout
- Monitoring Snapshot Manager
- Managing the Load Balancer service
- Managing MSDP Scaleout
- Performing catalog backup and recovery
- Section III. Maintenance
- MSDP Scaleout Maintenance
- Upgrading
- Uninstalling
- Troubleshooting
- Troubleshooting AKS and EKS issues
- View the list of operator resources
- View the list of product resources
- View operator logs
- View primary logs
- Socket connection failure
- Resolving an invalid license key issue
- Resolving an issue where external IP address is not assigned to a NetBackup server's load balancer services
- Resolving the issue where the NetBackup server pod is not scheduled for long time
- Resolving an issue where the Storage class does not exist
- Resolving an issue where the primary server or media server deployment does not proceed
- Resolving an issue of failed probes
- Resolving token issues
- Resolving an issue related to insufficient storage
- Resolving an issue related to invalid nodepool
- Resolving a token expiry issue
- Resolve an issue related to KMS database
- Resolve an issue related to pulling an image from the container registry
- Resolving an issue related to recovery of data
- Check primary server status
- Pod status field shows as pending
- Ensure that the container is running the patched image
- Getting EEB information from an image, a running container, or persistent data
- Resolving the certificate error issue in NetBackup operator pod logs
- Pod restart failure due to liveness probe time-out
- NetBackup messaging queue broker take more time to start
- Host mapping conflict in NetBackup
- Issue with capacity licensing reporting which takes longer time
- Local connection is getting treated as insecure connection
- Primary pod is in pending state for a long duration
- Backing up data from Primary server's /mnt/nbdata/ directory fails with primary server as a client
- Storage server not supporting Instant Access capability on Web UI after upgrading NetBackup
- Taint, Toleration, and Node affinity related issues in cpServer
- Operations performed on cpServer in environment.yaml file are not reflected
- Elastic media server related issues
- Troubleshooting AKS-specific issues
- Troubleshooting EKS-specific issues
- Troubleshooting AKS and EKS issues
- Appendix A. CR template
Enabling MSDP S3 service after MSDP Scaleout is deployed for AKS
If MSDP S3 service is not enabled during the initial deployment, you can enable it later.
To enable MSDP S3 service
- Generate S3 root credential. Run the following command to generate the secret:
$ kubectl msdp generate-s3-secret --namespace <sample-namespace> --s3secret <s3-secret-name>
Ensure that you save the S3 credential at a secure place after it is generated for later use.
If MSDP kubectl plug-in is not installed, copy MSDP kubectl plug-in from the operator TAR folder to a directory from where you access AKS host. This directory can be configured in the PATH environment variable so that kubectl can load MSDP kubectl as a plug-in automatically.
For example,
$ cp ./VRTSk8s-netbackup-10.2-0065/bin/kubectl-msdp /usr/local/bin/
- Input S3 credential field in existing CR resources.
If the MSDP Scaleout is deployed with environment YAML, run the following command to update the spec.msdpScaleouts[<index>].s3Credential field in the existing CR resources:
$ kubectl edit environment <environmentCR_name> -n <sample-namespace>
Content format:
msdpScaleouts: - credential: autoDelete: true secretName: msdp-creds skipPrecheck: false s3Credential: secretName: <s3secretName>If the MSDP Scaleout is deployed with MSDP Scaleout YAML, run the following command to update the spec.s3Credential field in the existing CR resources:
$ kubectl edit msdpscaleout <MSDP Scaleout CR name> -n <sample-namespace>
Content format:
spec: - credential: autoDelete: true secretName: msdp-creds skipPrecheck: false s3Credential: secretName: <s3secretName>
Wait for a few minutes. MSDP operator enables S3 service automatically.
- Run the following command to check the S3 service status:
$ kubectl get msdpscaleouts.msdp.veritas.com/<MSDP Scaleout CR name> -o=jsonpath={.status.s3srvConfigured}
If the command output is true, S3 service is configured and ready for use.
- Before you start using S3 service, run the following command to restart pdde-s3srv service in the first MSDP engine:
$ kubectl exec <first-MSDP-engine-FQDN> -n <sample-namespace> -c uss-engine -- systemctl restart pdde-s3srv