{"id":64230,"date":"2022-10-25T12:41:45","date_gmt":"2022-10-25T12:41:45","guid":{"rendered":"https:\/\/www.commvault.com\/?p=64230"},"modified":"2023-12-20T11:11:00","modified_gmt":"2023-12-20T16:11:00","slug":"enhanced-capabilities-for-complete-kubernetes-protection","status":"publish","type":"post","link":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection","title":{"rendered":"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault"},"content":{"rendered":"\n<p class=\"\">The cloud-native landscape is rapidly evolving, with 85% of global organizations expected to be running containers in production by 2025<sup>1<\/sup>. To continue to meet business goals while enhancing business agility and streamlining operations, you need a holistic, comprehensive data management solution for your entire data estate.<\/p>\n\n\n\n<p class=\"\">Commvault has always been at the forefront when protecting new technologies, with containers and Kubernetes no different. We have built broad support for protecting applications running on a Kubernetes cluster and their data. Every CNCF (Cloud Native Computing Foundation) certified Kubernetes distribution <a href=\"https:\/\/documentation.commvault.com\/11.24\/essential\/supported_configurations_for_kubernetes.html\" target=\"_blank\" rel=\"noreferrer noopener\">is supported<\/a>, and via <a href=\"https:\/\/kubernetes-csi.github.io\/docs\/\" target=\"_blank\" rel=\"noreferrer noopener\">the CSI (Container Storage Interface) framework<\/a>, we also support a wide range of <a href=\"https:\/\/kubernetes-csi.github.io\/docs\/drivers.html\" target=\"_blank\" rel=\"noreferrer noopener\">storage providers on Kubernetes<\/a>, ensuring you have complete cloud-native data protection, managed through the simplicity of a single data management solution.<\/p>\n\n\n\n<p class=\"\">In this new release we bring two new key capabilities to Kubernetes data protection:<\/p>\n\n\n\n<ul class=\"is-style-default wp-block-list\">\n<li class=\"\">Full Cluster &amp; namespace level protection.<\/li>\n\n\n\n<li class=\"\">Protecting the ETCD.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading is-style-heading-sans\" id=\"h-recap\">Recap<\/h2>\n\n\n\n<p class=\"\">Commvault allows users to easily onboard a Kubernetes cluster into the Commvault Command Center<sup>TM<\/sup> aka the single pane of glass for all your data protection, data management and data lifecycle needs.<\/p>\n\n\n\n<p class=\"\">Commvault defines a Kubernetes application as anything that is a pod or a collection of pods viz: Deployments, ReplicaSets, Statefulsets etc. and their associated components as inferred from their application yamls.<\/p>\n\n\n\n<p class=\"\">To break that down a bit, when we look at an application like a Deployment, we look at its config. spec. and discover any PVCs (Persistent Volume Claims), Secrets, ConfigMaps and other associated entities. All these together constitute an application.<\/p>\n\n\n\n<p class=\"\">A user can browse an onboarded cluster for applications, select and group them together into an \u201cApplication Group\u201d based on backup SLAs (Service Level Agreements), retention needs or any other criteria.<\/p>\n\n\n\n<p class=\"\">Users can add applications to Application Groups in a few diverse ways:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li class=\"\">Browse and pick all applications in a namespace or multiple namespaces.<\/li>\n\n\n\n<li class=\"\">Select specific applications.<\/li>\n\n\n\n<li class=\"\">Use dynamic discovery rules: e.g.: Select applications that match a particular label selector or name etc.<\/li>\n<\/ol>\n\n\n\n<p class=\"\">Dynamic discovery is especially useful where a backup administrator can have the devops teams set label selectors on their applications and be guaranteed specific protection SLAs (Service Level Agreements).<\/p>\n\n\n\n<p class=\"\">Backup jobs run at an Application Group level and use the content rules to discover existing and newly created applications and their resources on the cluster at run time and perform backups. PVCs are backed up using CSI when available or alternatively Commvault can attach to PVCs directly using ReadMany semantics if CSI is not available.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/how-backup-works.png\" alt=\"\" class=\"wp-image-55163\" style=\"width:439px;height:234px\"\/><\/figure><\/div>\n\n\n<p class=\"\">A diagram that illustrates how it all happens.<\/p>\n\n\n\n<p class=\"\">With Commvault, restoring an application or its data can be done at various granular levels:<\/p>\n\n\n\n<ul class=\"is-style-default wp-block-list\">\n<li class=\"\">Application level restore: An entire application along with its associated resources and data can be restored in one shot.<\/li>\n\n\n\n<li class=\"\">Application files: An application\u2019s data (or portions thereof) residing on PVCs can be restored piecemeal without having to restore the entire application.<\/li>\n\n\n\n<li class=\"\">Application configuration files: Configuration files constituting an application can be restored as files so that a user can manipulate them before applying them to the cluster.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading is-style-heading-sans\" id=\"h-enhancements\">Enhancements<\/h2>\n\n\n\n<p class=\"\">It is now time to talk about the exciting new enhancements, delivering complete Kubernetes protection, and included in<a href=\"https:\/\/www.commvault.com\/platform-release\"> Platform Release 2022E<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading is-style-heading-sans\" id=\"h-1-full-cluster-protection\">1. Full Cluster Protection<\/h3>\n\n\n\n<p class=\"\">With this feature we have added an easy button for the backup admin to press: Pick up everything on the cluster please. Thank you very much!<\/p>\n\n\n\n<p class=\"\">Everything in the cluster including <strong><em>cluster-scoped resources<\/em><\/strong> is picked up when configured in this manner.<\/p>\n\n\n\n<p class=\"\">Additionally, namespaces that are freshly discovered at backup time are also automagically included.<\/p>\n\n\n\n<p class=\"\">Backup admins must no longer select individual namespaces or applications within a namespace to be fully protected.<\/p>\n\n\n\n<h3 class=\"wp-block-heading is-style-heading-sans\" id=\"h-2-namespace-level-protection\">2. Namespace Level Protection<\/h3>\n\n\n\n<p class=\"\">In addition to an entire cluster, users can now choose to backup an entire namespace i.e., applications (and their resources) and any unreferenced resources within the namespace (we call them orphans).<\/p>\n\n\n\n<p class=\"\">Also, users are now able to restore namespaces in their entirety while still retaining the various granular restores explained above.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-image.png\" alt=\"\" class=\"wp-image-55162\" style=\"width:624px\"\/><\/figure><\/div>\n\n\n<h3 class=\"wp-block-heading is-style-heading-sans\" id=\"h-3-protecting-the-etcd\">3. Protecting the etcd.<\/h3>\n\n\n\n<p class=\"\">etcd is a distributed, replicated database that Kubernetes uses to store the cluster configuration. The image below illustrates the usage of etcd in a typical Kubernetes cluster.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/work-node-kuberbetes.png\" alt=\"\" class=\"wp-image-55161\" style=\"width:298px;height:300px\"\/><\/figure><\/div>\n\n\n<p class=\"\">Each control plane node has a replica\/copy of the etcd.<\/p>\n\n\n\n<p class=\"\">Losing\/corrupting these copies can wreak havoc on a Kubernetes administrator\u2019s day (or week).<\/p>\n\n\n\n<p class=\"\">Since etcd is replicated across the master nodes in a Kubernetes cluster, traditional solutions attempt to protect etcd by protecting the master nodes. This is often achieved by deploying solutions on those cluster nodes to protect the etcd locally<a>. <\/a>This is unwieldy and cumbersome at best because it separates protection for the applications running on the cluster and the protection for the cluster state into two very disparate mechanisms. Protecting application state and protecting cluster state go hand in hand and separating the two can lead to inconsistencies esp. when recovering from a disaster.<\/p>\n\n\n\n<p class=\"\">Commvault now seamlessly integrates etcd protection right alongside application and full cluster protection into the Command Center. A user simply needs to enable a toggle on the cluster to protect etcd and select an SLA. That is, it! Really! (See the snapshot below)<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"222\" src=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/etcd-image-1.jpg?quality=80\" alt=\"\" class=\"wp-image-64234\"\/><\/figure><\/div>\n\n\n<p class=\"\">With these enhancements we have developed a holistic comprehensive solution for your Kubernetes Data Protection needs and, integrated it into our Commvault Command Center so you can simplify management of your entire data estate from a single interface. No wonder Commvault continues to be an <a href=\"https:\/\/www.commvault.com\/commvault-an-outperformer-in-data-protection-for-kubernetes\">outperformer in this space.<\/a><\/p>\n\n\n\n<p class=\"\">To learn more about Commvault innovations and cloud native cloud data protection, join us at <a href=\"https:\/\/events.commvault.com\/connections\/2450170?ref=Organic+Social\" target=\"_blank\" rel=\"noreferrer noopener\">Connections 2022<\/a>, our virtual event which take place on November 2<sup>nd<\/sup> or November 3<sup>rd<\/sup>.<\/p>\n\n\n\n<p class=\"has-text-align-center mt-lg\"><strong>Reference<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center has-small-font-size\">1 &#8211; Forbes &#8211; <a href=\"https:\/\/www.forbes.com\/sites\/splunk\/2022\/03\/01\/a-cxos-guide-to-container-monitoring\/?sh=5f3c01225f32\">A CxO\u2019s<\/a><a href=\"https:\/\/www.forbes.com\/sites\/splunk\/2022\/03\/01\/a-cxos-guide-to-container-monitoring\/?sh=5f3c01225f32\" target=\"_blank\" rel=\"noreferrer noopener\"> Guide To Container Monitoring<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Commvault has always been at the forefront when protecting new technologies. Learn more about the two new key capabilities to Kubernetes data protection.<\/p>\n","protected":false},"author":85,"featured_media":64231,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_custom_css":"","_custom_js_footer":"","_page_background_color":"","_remove_from_search":false,"_dark_mode":false,"_light_footer_mode":false,"_sidebar_form":{"id":"","name":"","cta":"","redirect":""},"_alert_notification_bar":{"show":true,"bg_color":"","content":"","call_to_action_label":"","call_to_action_link":""},"_footer_cta":{"show":false,"title":"","subtitle":"","cta_text":"","cta_link":"","background":{"id":0,"url":""}},"_cmv_customer_logo":{"id":0,"url":""},"_jetpack_memberships_contains_paid_content":false,"i18n_hreflangs":"","footnotes":""},"categories":[984],"tags":[],"cmv_author":[993],"class_list":{"0":"post-64230","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-kubernetes","8":"cmv_author-amit-mitkar","9":"entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.0 (Yoast SEO v23.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault<\/title>\n<meta name=\"description\" content=\"Commvault has always been at the forefront when protecting new technologies. Learn more about the two new key capabilities to Kubernetes data protection.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault\" \/>\n<meta property=\"og:description\" content=\"Commvault has always been at the forefront when protecting new technologies. Learn more about the two new key capabilities to Kubernetes data protection.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection\" \/>\n<meta property=\"og:site_name\" content=\"Commvault - English - United States\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Commvault\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-10-25T12:41:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-20T16:11:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80\" \/>\n\t<meta property=\"og:image:width\" content=\"957\" \/>\n\t<meta property=\"og:image:height\" content=\"548\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"dpauciullo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@commvault\" \/>\n<meta name=\"twitter:site\" content=\"@commvault\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"dpauciullo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault","description":"Commvault has always been at the forefront when protecting new technologies. Learn more about the two new key capabilities to Kubernetes data protection.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection","og_locale":"en_US","og_type":"article","og_title":"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault","og_description":"Commvault has always been at the forefront when protecting new technologies. Learn more about the two new key capabilities to Kubernetes data protection.","og_url":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection","og_site_name":"Commvault - English - United States","article_publisher":"https:\/\/www.facebook.com\/Commvault\/","article_published_time":"2022-10-25T12:41:45+00:00","article_modified_time":"2023-12-20T16:11:00+00:00","og_image":[{"width":957,"height":548,"url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80","type":"image\/jpeg"}],"author":"dpauciullo","twitter_card":"summary_large_image","twitter_creator":"@commvault","twitter_site":"@commvault","twitter_misc":{"Written by":"dpauciullo","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#article","isPartOf":{"@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection"},"author":{"name":"dpauciullo","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/0d027e3bbfd09715cc267f372fdc4c7e"},"headline":"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault","datePublished":"2022-10-25T12:41:45+00:00","dateModified":"2023-12-20T16:11:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection"},"wordCount":941,"publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"image":{"@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80","articleSection":["Kubernetes"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection","url":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection","name":"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault","isPartOf":{"@id":"https:\/\/commvault-new.go-vip.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#primaryimage"},"image":{"@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#primaryimage"},"thumbnailUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80","datePublished":"2022-10-25T12:41:45+00:00","dateModified":"2023-12-20T16:11:00+00:00","description":"Commvault has always been at the forefront when protecting new technologies. Learn more about the two new key capabilities to Kubernetes data protection.","breadcrumb":{"@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#primaryimage","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80","width":957,"height":548},{"@type":"BreadcrumbList","@id":"https:\/\/www.commvault.com\/blogs\/enhanced-capabilities-for-complete-kubernetes-protection#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.commvault.com\/"},{"@type":"ListItem","position":2,"name":"Introducing Enhanced Capabilities for Complete Kubernetes Protection in Commvault"}]},{"@type":"WebSite","@id":"https:\/\/commvault-new.go-vip.net\/#website","url":"https:\/\/commvault-new.go-vip.net\/","name":"Commvault - English - United States","description":"","publisher":{"@id":"https:\/\/commvault-new.go-vip.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/commvault-new.go-vip.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/commvault-new.go-vip.net\/#organization","name":"Commvault","url":"https:\/\/commvault-new.go-vip.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/","url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","contentUrl":"https:\/\/www.commvault.com\/wp-content\/uploads\/2024\/03\/logo-commvault-horizontal.jpg?quality=80","width":1200,"height":628,"caption":"Commvault"},"image":{"@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Commvault\/","https:\/\/x.com\/commvault","https:\/\/www.instagram.com\/commvault\/","https:\/\/www.linkedin.com\/company\/commvault","https:\/\/www.youtube.com\/user\/commvault","https:\/\/en.wikipedia.org\/wiki\/Commvault"]},{"@type":"Person","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/0d027e3bbfd09715cc267f372fdc4c7e","name":"dpauciullo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/commvault-new.go-vip.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/26a1c2b1eb2dd35e14333ef22306348e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/26a1c2b1eb2dd35e14333ef22306348e?s=96&d=mm&r=g","caption":"dpauciullo"}}]}},"jetpack_featured_media_url":"https:\/\/www.commvault.com\/wp-content\/uploads\/2022\/10\/kubernetes-blog-1.jpg?quality=80","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/64230","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/users\/85"}],"replies":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/comments?post=64230"}],"version-history":[{"count":4,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/64230\/revisions"}],"predecessor-version":[{"id":505192,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/posts\/64230\/revisions\/505192"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media\/64231"}],"wp:attachment":[{"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/media?parent=64230"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/categories?post=64230"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/tags?post=64230"},{"taxonomy":"cmv_author","embeddable":true,"href":"https:\/\/www.commvault.com\/wp-json\/wp\/v2\/cmv_author?post=64230"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}