Retain reclaim policy, so helm uninstall doesn’t delete your backups.
Multi-zone clusters
The default repository is aReadWriteOnce volume in each database namespace. On zonal block storage (EBS, Persistent Disk, Azure Disk) that volume stays in the zone it is created in. Local storage (local-path, hostpath) is worse: its volume stays on one node. Storage that can attach a volume in any zone, such as Longhorn or an Azure Disk StorageClass with a zone-redundant SKU (skuName: Premium_ZRS or StandardSSD_ZRS), does not have this problem, and the installer does not flag it. A backup pod has to run next to the database it backs up, so the backup of a database whose volume is in another zone can never be scheduled: its pod stays Pending and the backup never finishes.
When the nodes span more than one zone and the repository would be on zonal block storage, a new install stops and asks for one of:
-
Object storage (recommended). Install with
--set backupRepository.enabled=false, then create an S3, GCS or Azure Blob repository and mark it as the default. -
A
ReadWriteManyStorageClasssuch as EFS, Azure Files, Filestore or NFS:In the terminal UI, the installer lists theReadWriteManyclasses it finds and sets these for you. -
--allow-zonal-backup-repo, to keep theReadWriteOncevolume and accept that backups only work for databases in the same zone as the repository.
StorageClass has to provide ReadWriteMany volumes itself: asking for ReadWriteMany on EBS, Persistent Disk or Azure Disk (including the fallback kb-default-sc there) is also refused, because the volume can never be created.
Repository volumes from an earlier install are kept, and keep their access mode when the repository’s settings change. If the installer reports zonal ReadWriteOnce volumes left from before, delete them (after saving any backups you need) so they are created again with the new settings.
Upgrades of an existing release only print a warning, judged by both the cluster’s current default repository and the settings the upgrade applies to it. So does an install whose account cannot list nodes, since the installer cannot tell how many zones there are.
Create a backup repository
- Open Backup Repositories.
- Select New Backup Repository.
- Enter a repository name.
- Choose a storage provider.
- Fill the required provider fields.
- Add credentials if the repository cannot use ambient credentials such as IAM role or workload identity.
- Optionally mark the repository as the default repository.
- Select Create Repository.
s3s3-compatiblegcs-s3compazureblobminionfspvccosobsossftp
Create an on-demand backup
- Open Deployments.
- Open the target deployment.
- Go to Backups.
- Select Create Backup.
- Choose a backup type allowed by the selected backup policy.
- Choose a backup policy.
- Select Start Backup.
Running, that the backup policy exists, and that the requested backup method is supported by the selected policy.
Create a backup schedule
- Open the target deployment.
- Go to Schedules.
- Select New Schedule.
- Enter schedule name, cron frequency, retention, backup policy, and backup method.
- Select Create Schedule.
The backend validates that the cluster exists, the cluster is
Running, the cron expression has five fields, the backup policy exists, and the backup method is supported by the policy.
Supported backup methods
The UI exposes these methods depending on the selected policy:datafileaofvolume-snapshot
datafile and volume-snapshot in the dialog. Schedules allow datafile, aof, and volume-snapshot when the selected backup policy supports them.
An aof schedule runs a continuous backup, which a deployment can be restored from to any second in its window. See Point-in-time restore.