Cohesity Cloud Scale Technology Manual Deployment Guide for Kubernetes Clusters

Note down the MSDP operator Namespace, NodeSelector, StorageClassName, Tolerations and Image tag as follows:

Obtain the name of the msdp operator statefulset using the following command:

kubectl get statefulset -n <msdp-operator-system-namespace>

Use the following command to backup MSDP operator Image tag, Tolerations, and NodeSelector:

kubectl get sts <msdp-operator-statefulset-name> -n <msdp-operator-sample-namespace> -o=jsonpath='{"Namespace :"}{$.metadata.namespace}{$"\nImage :"}{$.spec.template.spec.containers[0].image}{$"\nNodeSelector :"}{$.spec.template.spec.nodeSelector}{$"\nTolerations :"}{$.spec.template.spec.tolerations[2]}{$"\nStorageClassName :"}{$.spec.volumeClaimTemplates[0].spec.storageClassName}{$"\n"}'

From the output, note down the Image tag, StorageClassName, Tolerations and NodeSelector:

Sample Output:
Namespace :msdp-operator-system
Image :nbuk8sreg.azurecr.io/msdp-operator:21.0
NodeSelector :{"agentpool":"nbuxpool"}
Tolerations :{"key":"agentpool","operator":"Equal","value":"nbuxpool"}
StorageClassName :nb-disk-premium

If toleration is not provided for msdp operator, then use the following command:

kubectl get sts <msdp-operator-statefulset-name> -n <msdp-operator-sample-namespace> -o=jsonpath='{"Namespace :"}{$.metadata.namespace}{$"\nImage :"}{$.spec.template.spec.containers[0].image}{$"\nNodeSelector :"}{$.spec.template.spec.nodeSelector}{$"\nStorageClassName :"}{$.spec.volumeClaimTemplates[0].spec.storageClassName}{$"\n"}'

Sample Output:
Namespace :msdp-operator-system
Image :nbuk8sreg.azurecr.io/msdp-operator:21.0
NodeSelector :{"agentpool":"nbuxpool"}
StorageClassName :nb-disk-premium

Backup the above msdp-operator storageClass using the following command:

kubectl get sc <msdp-operator-storageclass-name> -o yaml > msdpopstorageclass_backup.yaml

Note down the NetBackup operator Namespace, NodeSelector, Tolerations and Image tag as follows:

Obtain the name of the NetBackup operator deployment using the following command:

kubectl get deployment -n <netbackup-operator-system-namespace>

Use the following command to backup NetBackup operator Image tag, Tolerations, and NodeSelector:

kubectl get deployment <netbackup-operator-deployment-name> -n <netbackup-operator-system-namespace> -o=jsonpath='{"Namespace :"}{$.metadata.namespace}{$"\nImage :"}{$.spec.template.spec.containers[0].image}{$"\nNodeSelector :"}{$.spec.template.spec.nodeSelector}{$"\nTolerations: "}{$.spec.template.spec.tolerations}{$"\n"}'

From the output, note down the Image tag, Tolerations and NodeSelector:

Sample Output:
Namespace :netbackup-operator-system
Image :nbuk8sreg.azurecr.io/netbackup/operator:11.1.x.x.xxxx
NodeSelector :{"agentpool":"agentpool"}
Tolerations: [{"key":"agentpool","operator":"Equal","value":"agentpool"}]

Note down the flexsnap-operator Namespace, NodeSelector, Tolerations and Image tag as follows:

Obtain the name of the flexsnap-operator deployment using the following command:

kubectl get deployment -n <netbackup-operator-system-namespace>

Use the following command to backup flexsnap operator Image tag, Tolerations, and NodeSelector:

kubectl get deployment <flexsnap-operator-deployment-name> -n <netbackup-operator-system-namespace> -o=jsonpath='{"Namespace :"}{$.metadata.namespace}{$"\nImage :"}{$.spec.template.spec.containers[0].image}{$"\nNodeSelector :"}{$.spec.template.spec.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[0].matchExpressions[0]}{$"\nTolerations :"}{$.spec.template.spec.tolerations}{$"\n"}' 

From the output, note down the Image tag, Tolerations and NodeSelector:

Sample Output:
Namespace :netbackup-operator-system
Image :nbuk8sreg.azurecr.io/veritas/flexsnap-deploy:11.1.x.x.xxxx
NodeSelector :{"key":"agentpool","operator":"In","values":["agentpool"]}
Tolerations :[{"effect":"NoSchedule","key":"agentpool","operator":"Equal","value":"agentpool"}]

(For DBaaS) Note the FQDN of the Postgres server created.

(Applicable only if unified container is created) Note the Postgres unified container image tag, containerPort:

kubectl get statefulset.apps/nb-postgresql -n <sample-namespace> -o=jsonpath='{$"\nImage :"}{$.spec.template.spec.containers[0].image}{$"\ncontainerPort :"}{$.spec.template.spec.containers[0].ports[0].containerPort}{$"\n"}'

Sample output:

Image :cpautomation.azurecr.io/netbackup/postgresql:16.10.1.0-0001-DR1
 
containerPort :13787

Obtain the fluentbit image tags and nodeselector using the following command:

kubectl get deployment.apps/nb-fluentbit-collector -n netbackup -o=jsonpath='{$"\nImage :"}{$.spec.template.spec.containers[0].image}{$"\nImage2 :"}{$.spec.template.spec.containers[1].image}{"\n"}'

Sample output:

Image1:cpautomation.azurecr.io/netbackup/fluentbit:11.1.x-xxxx
Image2:cpautomation.azurecr.io/netbackup/fluentbit-log-cleanup:11.1.x-xxxx

Note down the values of spec, cpServer, storage, log, storageClassName from the cloudscale-values.yaml file using the following command:

kubectl get sc nb-file-premium -o yaml > CPServerLog_storageclass_backup.yaml

Search the storageClassName in cloudscale-values.yaml file using the kubectl get sc nb-disk-standardssd -o yaml > storageclass_backup.yaml command and provide these storageclasses name in the following command:

For example, nb-disk-standardssd

kubectl get sc <storageclass-name1> <storageclass-name2> <storageclass-name3> -o yaml > storageclass_backup.yaml

Note down and save the required values (names) of the secrets obtained from cloudscale-values.yaml file in the above step:

For example, credSecretName: primary-credential-secret

Save the secrets yaml file as follows:

kubectl get secret <secret-name1> <secret-name2> <secret-name3> -n <sample-namespace> -o yaml > secret_backup.yaml

For example, kubectl get secret primary-credential-secret kms-secret example-key-secret -n example-ns -o yaml > secret_backup.yaml

Save the secrets named as Msdp credential and drInfoSecret during creation. As the operator would delete these secrets after using it.

(For DBaaS) Note the password changed during DBaaS cluster deployment:

Note the values (names) of the secretProviderClass.

For example, dbSecretProviderClass: db-secret-provider-class

Save the secretProviderClass.yaml file using the following command:

kubectl get secretproviderclass <secretproviderclass-name> -n <sample-namespace> -o yaml> secretproviderclass_backup.yaml

Note the required values (names)and sSave internal configmap yaml using the following command:

kubectl get configmap nbu-media-autoscaler-configmap flexsnap-conf nbuconf cs-config -n <sample-namespace> -o yaml > internalconfigmap_backup.yaml

Take a note of cert-manager and trust-manager as the same versions of cert-manager and trust-manager should be used when deploying them during recovery.

Note the details of cloud STU used for MSDP storage, such as name of bucket, volume, credential and the respective details added through Credential management in UI.

(Applicable only for DBaaS based deployment environment) Snapshot Manager backup steps:

Take the backup of catalog policy at /mnt/nbdata/DrPackages on the master server.