Backup and Restore
Palette supports backup and restore capabilities for Kubernetes clusters. Two kinds of backups are supported: cluster backups and etcd backups.
A cluster backup is a persistent state of Kubernetes resources, ranging from objects such as Pods, DaemonSets, and Services to persistent volumes. A backup allows you to save the current state of a cluster and restore it at a later point in time if needed. You can restore a backup to the same or a different cluster. You can schedule a backup of a specific cluster or an entire workspace. You can also maintain multiple backups of a cluster or workspace.
An etcd backup is a snapshot of the etcd key-value store used as the backend for all cluster information. etcd snapshots are required to remediate data corruption problems that can occur in Kubernetes clusters. etcd backups are usually used to restore the same cluster. etcd snapshots are usually small in size and automated backups are turned on by default.
Cluster Backup vs etcd Backup
The following table offers a overview of the differences between a cluster backup and an etcd backup.
| Aspect | etcd Backup | Cluster Backup |
|---|---|---|
| Scope | Only backs up etcd data, which includes cluster state, configuration, and resource definition data. | Backs up entire Kubernetes cluster resources, including pods, services, deployments, and associated data in persistent volumes. |
| Enabled by default? | Yes | No |
| Use case | Restoring etcd in case of data corruption or loss. | Migrating workloads between clusters. Restoring after accidental deletion or corruption of Kubernetes resources. |
| Restoration target | Typically used for restoring etcd on the same cluster | Can be used to restore on the same cluster or migrate to a different cluster |
| Operational overhead | Restoring is manual and requires technical expertise in etcd and command-line operations. Requires an SSH connection to the cluster. | Restore can be performed from the Palette user interface. Does not require an SSH connection to the cluster. |
| Source cluster availability | Not required. | Required. |
| Typical file size | Relatively small (megabytes to low gigabytes). | Usually larger, depending on the size of cluster and volume data. |
Cluster Backup
To get started with creating a backup, check out the Add a Backup Location using Static Credentials or Add a Backup Location using Dynamic Credentials guide.
If you are using a workspace, refer to the Manage Palette Workspace guide to learn more about backup and restore actions for a workspace.
Backup Locations
A backup location is an object storage, such as an AWS Simple Storage Service (S3) bucket, where you store and retrieve the backup files. Before you create a backup, the initial step is configuring a backup location. You can configure a backup location in a public cloud or a data center environment and add it in Palette. Palette supports the following object storage solutions as backup locations.
-
Amazon Web Services (AWS) S3 bucket
-
Google Cloud Platform (GCP) bucket
-
MinIO S3 bucket
-
Azure blob storage
Palette uses open-source Velero to provide backup and restore capabilities. You can learn more about Velero by checking out the Velero Restore Reference and Backup Reference.
You can add a backup location to the same cloud account you use to deploy Kubernetes clusters or use a different account. Both authentication methods require an Identity Access Management (IAM) entity in the cloud account and access credentials for the IAM entity.
Backup Locations and Credentials
Palette uses the access credentials to authenticate itself while accessing the storage bucket. Palette supports static credentials for all cloud service providers. You can also use dynamic credentials with the backup and restore workflow.
Review the table below to learn more about what cloud providers and credentials methods are supported.
| Service Provider | Static Credentials Support | Dynamic Credentials Support |
|---|---|---|
| AWS | ✅ | ✅ |
| GCP | ✅ | ❌ |
| MinIO | ✅ | ❌ |
| Azure | ✅ | ❌ |
To learn more about adding a backup location, check out the Add a Backup Location using Static Credentials or Add a Backup Location using Dynamic Credentials guide.
etcd Backups
etcd backups are enabled by default. You can edit the YAML file for a cluster's Kubernetes layer to configure its frequency, maximum number of copies to retain. Use the following resource to learn more about etcd backups: