Manage the Kubernetes Backup Configuration

In Cohesity Data Cloud, a backup configuration includes an Object and a Protection Policy. You can modify the existing Object and the Protection Policy based on your requirements.

You cannot update the registered Kubernetes cluster and the assigned Storage Domain in the Object settings.

Enable or Disable Auto Protect

You can enable the Auto Protect option at the:

  • Kubernetes cluster level: Automatically protect the new namespaces that are added to the Kubernetes container.
  • Label level of the namespaces: Automatically protect the new namespaces that are tagged with the same label you selected while enabling the auto protect.

When the Auto Protect option is enabled:

  • All the namespaces that are added to the Kubernetes cluster or tagged with the same label in the future are automatically added to the Object and are protected from the next protection run.
  • All the namespaces that are removed from the Kubernetes cluster or untagged from the specified label in the future are automatically removed from the Object and are not protected from the next protection run. The existing backup for the namespace is preserved until the snapshot expires.

When the Auto Protect option is disabled, you need to manually:

  • Add newly added namespaces.
  • Remove existing namespaces that are deleted on Kubernetes. The existing backups of the namespaces are preserved until the snapshot expires.

Enable or Disable Auto Protect at Kubernetes cluster level

To enable or disable Auto Protect at the Kubernetes cluster level:

  1. In DataProtect as a Service, navigate to Sources.

  2. Select the cluster that you want to auto-protect.

  3. Click the icon in the cluster level to enable or disable Auto Protect and click Protect.
  4. Click Protect.

Enable or Disable Auto Protect at Label level

To enable or disable Auto Protect at the Kubernetes label level:

  1. In DataProtect as a Service, navigate to Sources.

  2. Select the cluster that you want to auto-protect.

  3. Select the label icon () available on the top-right of the Objects section.
  4. From the label drop-down list, select the label(s) for which you want to enable Auto Protect.
  5. Click the icon in the enable or disable Auto Protect and click Protect.
  6. Click Protect.

Attach New Protection Policy to the Object

A Protection Policy can be attached to multiple Objects, and any changes in the policy settings impact all the Objects that are associated with the Protection Policy. You can create and attach a new Protection Policy with the required policy settings to your Object. The new policy is applied to the Object from the next scheduled protection run.

To attach a new Protection Policy to the Object:

  1. In DataProtect as a Service, navigate to Sources, find the Kubernetes source name and then click Protect.

  2. In the Policy drop-down list, select the new Protection Policy for the Object.
  3. Click Protect.

Start an On-demand Protection Run

You can manually start a protection run of the Object that you have created to back up the namespaces of the Kubernetes cluster. It provides you with options to:

  • Back up all the Objects or only selected Objects.
  • Select an incremental or full backup.

To start a protection run:

  1. In DataProtect as a Service, navigate to Sources, find the Kubernetes source name and then click Protect.
  2. On the Sources page, select the Object that you have protected.
  3. Click Run Now.
  4. In the pop-up window, perform the following:
    1. In the Backup drop-down list, select any one of the following:
      • Backup all Objects
      • Backup only selected Objects
    2. In the Backup Type drop-down list, select the backup type. By default, an archival backup will be performed.
  5. Click Run Now.

Pause Future Runs

You can pause future runs for the Objects. However, if the Object is currently executing a protection run, the current run continues to execute and only future runs of the Object are paused.

To pause future run:

  1. In DataProtect as a Service, navigate to Sources, find the Kubernetes source name and then click Protect.
  2. On the Sources page, select the Object that you have protected.
  3. Click Pause Future Runs.

Resume Paused Protection Runs

You can resume a paused protection run. When you resume a protection run, if the backup snapshots are expired then a full backup is triggered.

To resume a paused protection run:

  1. In DataProtect as a Service, navigate to Sources, find the Kubernetes source name and then click Protect.
  2. On the Sources page, select the Object that you have protected.
  3. Click Resume.

Delete the Object

You can delete an Object if you:

  • Do not want to retain the backups and the local and archived snapshots that are generated by the Object.
  • Want to reclaim the storage space utilized by the Object.

Cohesity provides the following ways to delete an Object:

  • Delete Object Only: Allows you to delete the Object. All the backups generated by the Object are preserved till the snapshots expire.

  • Delete Object and Snapshots: Allows you to delete the Object and all the local and archived Snapshots generated by the Object.

    After deleting the Object and Snapshots, the reclaimed storage space details are not displayed immediately. It will take some time to reflect on the Cohesity Dashboard.

To delete the Object:

  1. In DataProtect as a Service, navigate to Sources.
  2. On the Sources page, select the Object that you have protected.
  3. Click Unprotect.
  4. In the Delete Protection Group? dialog box, select any one of the following options:
    • Delete Object Only
    • Delete Object and Snapshots