Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ for OpenStack Administrator's Guide
  3. Deploying NetBackup for OpenStack
  4. Installing NetBackup for OpenStack Components
  5. Installing on RHOSP
  6. Providing the environment details in nbos_env.yaml
NetBackup™ for OpenStack Administrator's Guide

Providing the environment details in nbos_env.yaml

Provide backup target details and other necessary details in the provided environment file. This environment file is used in the overcloud deployment to configure NetBackup for OpenStack components. Container image names have already been populated in the preparation of the container images. Still it is recommended to verify the container URLs.

The following information is required additionally:

  • Network for the nbosdmapi

  • nbosdm password

  • Backup target type {nfs/s3}

  • In case of NFS

    • List of NFS Shares

    • NFS options

  • In case of S3

    • S3 type {amazon_s3/ceph_s3}

    • S3 Access key

    • S3 Secret key

    • S3 Region name

    • S3 Bucket

    • S3 Endpoint URL

    • S3 Signature Version

    • S3 Auth Version

    • S3 SSL Enabled {true/false}

    • S3 SSL Cert

Note:

Use ceph_s3 for any non-aws S3 backup targets.

resource_registry:
  OS::TripleO::Services::nbosdm: ../services/nbosdm.yaml
  OS::TripleO::Services::nbosdmapi: ../services/nbosdmapi.yaml
  # NOTE: If there are addition customizations to the endpoint map 
(e.g. for
  # other integratiosn), this will need to be regenerated.
  OS::TripleO::EndpointMap: endpoint_map.yaml

parameter_defaults:

   ## Enable NetBackup for OpenStack's quota functionality on horizon
   ExtraConfig:
     horizon::customization_module: 'dashboards.overrides'

   ## Define network map for NetBackup OpenStack Datamover API Service
   ServiceNetMap:
       nbosdmapiNetwork: internal_api

   ## NetBackup for OpenStack Datamover Password for keystone and database
   nbosdmPassword: "test1234"

   ## NetBackup for OpenStack container pull urls
   docker_nbosdm_image: nbos-undercloud:8787/nbosdm:9.0.1017-rhosp16.1
   docker_nbosdmapi_image: nbos-undercloud:8787/nbosdmapi:9.0.1017-rhosp16.1

   ## If you do not want NetBackup for OpenStack's horizon plugin 
   to replace your horizon container, just comment following line.
   ContainerHorizonImage: nbos-undercloud:8787/nbos-horizon-plugin:
   9.0.1017-rhosp16.1

   ## Backup target type nfs/s3, used to store snapshots taken by 
   NetBackup for OpenStack
   BackupTargetType: 'nfs'

   ## For backup target 'nfs'
   NfsShares: '192.168.122.101:/opt/nbos'
   NfsOptions: 'nolock,soft,timeo=180,intr,lookupcache=none'

   ## For backup target 's3'
   ## S3 type: amazon_s3/ceph_s3
   S3Type: 'amazon_s3'

   ## S3 access key
   S3AccessKey: ''

   ## S3 secret key
   S3SecretKey: ''

   ## S3 region, if your s3 does not have any region, just keep the 
   parameter as it is
   S3RegionName: ''

   ## S3 bucket name
   S3Bucket: ''

   ## S3 endpoint url, not required for Amazon S3, keep it as it is
   S3EndpointUrl: ''

   ## S3 signature version
   S3SignatureVersion: 'default'

   ## S3 Auth version
   S3AuthVersion: 'DEFAULT'

   ## If S3 backend is not Amazon S3 and SSL is enabled on S3 endpoint u
   rl then change it to 'True', otherwise keep it as 'False'
   S3SslEnabled: False

   ## If S3 backend is not Amazon S3 and SSL is enabled on S3 endpoint 
   URL and SSL certificates are self signed, then
   ## user need to set this parameter value to: 
  '/etc/nbosdm/s3-cert.pem', otherwise keep it's value 
   as empty string.
   S3SslCert: ''

   ## Don't edit following parameter
   EnablePackageInstall: True

Feedback

Was this page helpful?
Previous

Preparing the NetBackup for OpenStack container images

Next

Deploying the overcloud with NetBackup OpenStack environment

Feedback

Was this page helpful?