etcd backup¶

ETCD backup is based on cluster data as the core backup. In Cases such as hardware device damage, development and test configuration errors, etc., the backup cluster data can be restored.

This section will introduce how to realize the etcd backup of the cluster through the container management interface.

Prerequisites¶

• The container management module connected to the Kubernetes cluster or created the Kubernetes cluster, and can access the UI interface of the cluster .

• Completed a namespace creation, user creation, and grant NS Admin or higher permissions to the user. For details, refer to Namespace Authorization.

• Prepare a MinIO instance. It is recommended to create it through DCE 5.0's MinIO middleware. For specific steps, refer to MinIO Object Storage.

Create etcd backup¶

Follow the steps below to create an etcd backup.

1. On the Backup and Recovery - ETCD Backup page, you can see all the current backup strategies. Click Create Backup Strategy on the right to create an ETCD backup strategy for the target cluster.

2. Fill in the basic information. After filling in, click Next to automatically verify the connectivity of ETCD. If the verification passes, proceed to the next step.

   • First select the backup cluster and log in to the terminal
   • Fill in the ETCD address, most standard K8s clusters are: https://node number:2379

   • Fill in the CA certificate, you can use the following command to view the content of the certificate and copy and paste it to the corresponding location:

     cat /etc/kubernetes/ssl/etcd/ca.crt
     

   • Fill in the Cert certificate, you can use the following command to view the content of the certificate and copy and paste it to the corresponding location:

     cat /etc/kubernetes/ssl/apiserver-etcd-client.crt
     

   • Fill in the Key, you can use the following command to view the content of the certificate and copy and paste it to the corresponding location:

     cat /etc/kubernetes/ssl/apiserver-etcd-client.key
     

3. Select the backup method, which is divided into manual backup and scheduled backup.

   • Manual backup: Perform a backup of ETCD full data immediately based on the backup configuration. Backup chain length: The longest length of backup data to keep, the default is 30.

   • Timing backup: Perform periodic full backup of ETCD data according to the set backup frequency. Choose backup frequency: support hourly, daily, weekly, monthly levels and custom methods.

4. Storage location

   • Storage provider: S3 storage is selected by default
   • Object storage access address: MinIO access address
   • Bucket: Create a Bucket in MinIO and fill in the name
   • Username: MinIO login username
   • Password: MinIO login password

5. After the creation is successful, a piece of data will be generated in the backup policy list. Operations include log, view YAML, update policy, stop, run now. When the backup method is manual, you can click Immediately to back up. When the backup method is scheduled backup, the backup will be performed according to the configured time.

6. Click View Log to display the log content. By default, 100 lines are displayed. If you want to view more log information or download logs, go to Observability

Backup policy details¶

1. Click to enter the details of the backup strategy, including basic information and backup records.

2. Check the backup point. After selecting a cluster, you can view all the backup information under the cluster. Every time a backup is performed, a backup point is correspondingly generated, and the application can be quickly restored through the backup point in the successful state.

Comments