Back up OpenShift to S3: create an S3 backup target | Trilio for Kubernetes
Connect Trilio for Kubernetes on OpenShift to an S3-compatible bucket: prove the bucket from inside the cluster first, then create the S3 backup target.
You will:
- List the bucket from a pod in the cluster, with the same keys and network path T4K will use
- Create an ObjectStore target in the T4K management console (Backup & Recovery, Targets)
- Choose the vendor, enter the bucket name and the endpoint URL
- Pick the Secret with the access and secret keys
- Create the target and wait for the validation job to show Available
Best practices covered: prove the bucket outside T4K before you create the target (a 403 there is a credential or bucket policy problem); give the keys every S3 action backups use, including ListBucket; keep in-cluster object storage for proofs of concept only; add a private certificate authority instead of skipping certificate verification; create the Secret from plain values so the keys are encoded only once; run one small backup and restore before production plans.
Chapters
0:00 What you build
0:07 Prove the bucket from a pod
0:41 Open the T4K console and Targets
0:59 Create an ObjectStore target
1:33 Certificates and credentials
2:00 Name, create and validate the target
2:17 Test before production
Trilio for Kubernetes documentation for OpenShift: https://docs.trilio.io/kubernetes/getting-started/red-hat-openshift
Compatibility matrix: https://docs.trilio.io/kubernetes/overview/compatibility-matrix
Recorded on Red Hat OpenShift 4.21 with Trilio for Kubernetes 5.4.1.
#OpenShift #Kubernetes #Backup