Isolated (Air Gap) Environment Setup
You may sometimes need to work in an environment that is completely behind the firewall. This section addresses the backup and restore procedures for those environments.
See Backup for restrictions and limitations.
Minio Server Setup
You need to set up a Minio server to configure a S3-compatible backup storage location. Refer to https://min.io/download#/macos to setup the Minio server.
Once the Minio server is setup, use YOUR Minio server credentials to login to your Minio server.
Minio server URL
Minio server username
Minio server password
Backup and Restore Process
The script provided as part of this process uses publicly available Velero and Minio tools to complete the manual backup and restore process in isolated environments.
To backup and restore the CloudCenter Suite data in an air gap environment, follow this procedure.
Create a bucket on the Minio server and provide a meaningful name. This example, uses velero. See Backup for details.
Before installing Velero, annotate all the pods in your cluster by using Velero-specific annotations that are provided in the script below.
To make things simpler here is a utility that does it for you. Be sure to save the following script contents to a file called pod_vol_restic_scan.py to your local system.
From where you have saved the pod_vol_restic_scan.py script, run the following command.
Install Velero Version 0.11.0 – refer to https://velero.io/docs/v0.11.0/ for details.
Create a credential file to store your credentials. This example, uses the following URL and credentials – this is only an example!
On the existing Kubernetes cluster, you must deploy Velero and configure it with the AWS compatible bucket location, in this example, minio.
Velero and Minio Usage
This process uses Velero to backup the Kubernetes data to a Minio server.
Once you finish this task you can configure the AWS S3 storage provider using the Minio server credentials as specified below. Configuring Minio is similar to configuring an AWS S3 environment, the difference is that you must provide the region and endpoint details when adding the Minio server as AWS S3 storage. You can verify the data from Minio server GUI or command line. The following steps are an example to verify the data from the Minio command line.
Refer to https://docs.min.io/docs/aws-cli-with-minio.html for additional details.
Start a backup using the following command.
- Wait for the backup to complete and watch the logs. Once the backup is complete, the Minio output should look like the information displayed in the following screenshot.
To restore the backup to a different cluster or a fresh cluster (assuming that the cisco namespace is not present).
Start the restore process:
The Minio output should look like the information displayed in the following screenshot – you will see an additional restore folder as displayed in the following screenshot
You have now backed up and restored the CloudCenter Suite to an isolated environment using the Minio server.
Sample Commands Using Fictional Names
The following commands are only examples and need to be run using the names that you have assigned to resources in your environment.
- No labels