Excluding Kubernetes workloads or resources from an application group

You can exclude Kubernetes workloads (virtual machines and applications) or resources from an application group so that they are not backed up.

Excluding workloads is particularly useful when you use namespace-centric protection to back up the entire cluster. With namespace-centric protection, you can exclude applications and virtual machines that do not require protection, while still ensuring that new applications and data are discovered and protected.

Important

If you exclude a workload that is specifically selected or is the only content selected to back up, then the workload is still backed up. If you add content as namespace or label selector and exclude a single or multiple workloads, then the workload is excluded from back up.
The exclude Kubernetes resources and sub-resources by rule feature requires Commvault 11.38.24 or a more recent version.

Go to the application group

From the Command Center navigation pane, go to Protect > Kubernetes.
On the Application groups tab, click the application group.

Exclude resources

Exclude applications or resources from an application group so that they are not backed up. Resources are objects that can be listed, created, or re-created using the Kubernetes API server, while sub-resources are objects associated with those resources.

On the Content tab, in the Content section, click the edit button .

2.To exclude the resources, do the following:

By application

You can exclude the namespaces, Pods, DaemonSets, and other resources in the cluster.

Enable the Exclude resources toggle key.
From the Exclude list, select Applications.
From the Browse list, select All workloads, Virtual machines or Volumes.
Select the resources to exclude from back up, and then click Done.

By label

You can select labels and values to exclude resources/objects that have those labels and values.

Enable the Exclude resources toggle key.
From the Exclude list, select Label selectors.
From the Type list, select Application, Namespaces, or Volumes.
Enter the label value.

Supported format is key=value [-n <namespace> | --all-namespaces]. For example, usage=prod -n dev.
Click Add.

By rule

Enable the Exclude resources toggle key.
From the Exclude list, select Exclude by Rule.
From the list, select Kind, Group, Version, Namespace, Name, or Label, and then specify the rule.
Click Save.

Exclude sub-resources

You can exclude sub-resources of applications from backup such as ConfigMaps, Secrets, Services, PersistentVolumeClaims, etc by configuring a rule.

Note

Sub-resources associated with applications deployed via Helm charts cannot be excluded from backups.

Enable the Exclude sub-resources toggle key.
From the Exclude list, select Exclude by Rule.
From the list, select Kind, Group, Version, Namespace, Name, or Label, and then specify the rule.
Click Save.

Exclude PVCs

You can exclude workload PVCs from backup by selecting specific PVCs using Browse option or by defining filter criteria.

Use Browse option

Enable the Exclude PVCs toggle key.
Click Browse.
Browse and select PVCs associated with content in the VM group.
Click Ok.

Define filter criteria

Enable the Exclude PVCs toggle key.
Click Add.
For Volume filter type, select PVC name or pattern or Application label or VM label.
Supported wildcard patterns

For PVC name or pattern, the following wildcard patterns are supported:
- abc* – matches PVC names that start with abc.
- *abc – matches PVC names that end with abc.
- *abc* – matches PVC names that contain abc.
- * – matches all PVC names (excludes all PVCs).
Click Ok.