Configuring Backups for Kubernetes Resources Using Commvault Hosted Infrastructure

You can back up your Azure Kubernetes Service (AKS) or Amazon Elastic Kubernetes Service (EKS) clusters directly to the cloud, without configuring or installing backup gateways, using the Commvault Cloud hosted infrastructure.

To configure backups, do the following:

1. From the Command Center navigation pane, go to Service catalog.

2. In the Kubernetes tile, click Configure.

3. For Service type, select Azure Kubernetes Service (AKS) or Amazon Elastic Kubernetes Service (EKS).

4. Select Use hosted infrastructure.

5. For Region, select the region where you want to store your backup. The regions associated with the workload resource pool are available for selection.

   Need help with creating a workload resource pool?

   1. From the Command Center navigation pane, go to Manage > Infrastructure.

   2. Click the Resource pools tile.

   3. Click Add > Workload.

   4. Enter a name, and then select a region for the workload resource pool.

   5. For Solution type, select Kubernetes AKS or Kubernetes EKS.

   6. Select the backup gateways to use for the resource pool, and then click Save.

6. Click Next.

7. Select an existing backup plan or create a new backup plan.

8. Click Next, and then add the cluster details.

9. Enter a name for the cluster, and then select or create service account credentials.

   Need help with creating credentials?

   1. Click the add button.

   2. Enter a name for the credential.

   3. For Kubernetes API server, enter the API server URL and port number in the https://servername:port format.

   4. (Optional) For CA Certificate, enter the Base64 encoded root certificate of the cluster.

   5. Enter a name of a service account, and then click Create Service Account.

      The Get Kubernetes service token script window appears

   6. Enter the details, and then run the script on your Kubernetes cluster to create the service account, ClusterRoleBinding, and service account secret.

   7. Copy the service account token that's generated, and then close the window.

   8. Enter the service account token, and then click Save.

10. Click Next.

11. If your Kubernetes cluster uses a self-signed certificate and you see a connection error, enable the Skip SSL/TLS Certificate Verification toggle key.

    For high-availability or cloud clusters with distributed or managed control planes, each kube-apiserver might have a different SSL thumbprint. In such cases, use the CA Certificate field when creating credentials to verify the Kubernetes API server's identity.

12. On the Add application group page, click Add, and then select Workloads.

13. Select only the cluster.

14. Click Submit.

15. Click Next, and then complete the configuration wizard.

16. To run a manual backup, go to the cluster, and then in the upper-right area of the page, click Backup.