Adding a Kubernetes Cluster

To protect all the applications that are hosted or managed by a cluster, add the cluster to the Commvault software. The best way to ensure that the entire cluster is protected entails exiting the guided setup as described in the procedure.

The cluster can be in any environment type:

  • A fully managed cloud service (Azure AKS, Amazon EKS, Google GKE)

  • Self-built on a fully managed cloud infrastructure (Azure VM, Amazon EC2, Google VM)

  • Self-built on-premises

You can add multiple Kubernetes clusters with the same kube-apiserver endpoint and/or service account, but with different names.

Before You Begin

Start the Configuration Wizard

  1. From the navigation pane, go to Protect > Kubernetes.

    The Overview page appears.

  2. Go to the Applications tab.

  3. In the upper-right area of the page, click Add cluster.

    The Access Node page of the configuration wizard appears.

Access Node

  1. From the Access nodes list, select the access nodes to use for the cluster.

    To ensure high availability for data management operations, select multiple access nodes. With multiple access nodes, Commvault performs load balancing and automatically recovers from access node outages. For optimal performance of data management operations, select access nodes that have a round trip time (RTT) between the access nodes and the Kubernetes cluster of less than 1 millisecond.

  2. To add a Windows x86 64-bit Windows access node, click the add button add/plus button - gray - no border.

    The Commvault software downloads and installs the Virtual Server package that is required for Kubernetes access nodes.

  3. If the access nodes that you want to select are not listed, click the refresh button refresh button - gray - no border.

  4. Click Next.

    The Plan page of the configuration wizard appears.

Select a Server Plan

  1. Select a server plan.

  2. Click Next.

    The Add Cluster page of the configuration wizard appears.

Add Cluster

  1. In the Kubernetes API server box, enter the API server URL and port number in the following format:


    To get the URL, run the following command:

    kubectl cluster-info

    In the following example output, the Kubernetes control plane is running at https://k8s-123-4.your.domain:6443, so you would enter https://k8s-123-4.your.domain:6443 in the Kubernetes API server box.

    If your control plane is running on port 443, you don't have to include the port number.

    Kubernetes control plane is running at https://k8s-123-4.your.domain:6443 CoreDNS is running at https://k8s-123-4.your.domain:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy

  2. In Name, enter a descriptive name for the cluster.

  3. For Authentication Type, leave Service account selected.

  4. In Service account, enter the name of a service account to access the cluster for backups and other operations.

  5. In Service token, enter the service account token.

  6. To back up the etcd database that Kubernetes uses as the backing store for all the cluster data, move the etcd protection toggle key to the right.

  7. To verify that you selected the correct access nodes and server plan for the cluster, click the Previous button.

    Else, click Next, the Commvault software adds the cluster, and you can't change the access nodes or server plan until after you complete the configuration wizard.

  8. Click Next.

    The Add Application Group page of the configuration wizard appears.


    If you receive an "Unable to create a cluster with the details provided" error, do the following:

    • Verify that you entered the API server endpoint, service account, and service account token values correctly.

    • Verify that the access nodes you selected can access the API server endpoint. To check connectivity to the endpoint for an access node, log onto the access node, and then—using a browser or curl—connect to the kube-apiserver endpoint.

Exit the Wizard to Create a Default Application Group

The best way to ensure that the entire cluster is protected is to exit the configuration wizard at this point. If you exit the wizard, the Commvault software creates a "default" application group that uses namespace-centric protection to protect the entire cluster.

  1. On the Add Application group page, click Cancel.

    A confirmation message appears.

  2. Click Exit Wizard.

    The cluster is added to the Commvault software, and an application group named "default" is created.

    The cluster overview page appears.

  3. On the cluster overview page, click the Application groups tab.

  4. Click the default application group.

    The default application group overview page appears.

  5. In the Summary section, for Plan, click Edit, and then select the server plan that you want to use for the application group.

    You can use region-based storage with Kubernetes. If you use region-based storage, you must update the Workload region setting for the cluster.

Protecting an Air-Gapped Kubernetes Cluster