Chapter 9. Integrating with Google Cloud Storage
Chapter 9. Integrating with Google Cloud Storage You can integrate with Google Cloud Storage (GCS) to enable data backups. You can use these backups for data restoration in the case of an infrastructure disaster, or corrupt data. After you integrate with GCS, you can schedule daily or weekly backups and do manual on-demand backups. The backup includes the Red Hat Advanced Cluster Security for Kubernetes entire database, which includes all configurations, resources, events, and certificates. Make sure that backups are stored securely. Note If you are using Red Hat Advanced Cluster Security for Kubernetes version 3.0.53 or older, the backup does not include certificates. 9.1. Configuring Red Hat Advanced Cluster Security for Kubernetes To configure data backups on Google Cloud Storage (GCS), create an integration in Red Hat Advanced Cluster Security for Kubernetes. Prerequisites An existing bucket . To create a new bucket, see the official Google Cloud Storage documentation topic Creating storage buckets . A service account with the Storage Object Admin IAM role in the storage bucket you want to use. See Using Cloud IAM permissions for more information. Either a workload identity or a Service account key (JSON) for the service account. See Creating a service account and Creating service account keys for more information. Procedure In the RHACS portal, go to Platform Configuration Integrations . Scroll down to the External backups section and select Google Cloud Storage . Click New Integration ( add icon). Enter a name for Integration Name . Enter the number of backups to retain in the Backups To Retain box. For Schedule , select the backup frequency (daily or weekly) and the time to run the backup process. Enter the Bucket name in which you want to store the backup. When using a workload identity, check Use workload identity . Otherwise, enter the contents of your service account key file into the Service account key (JSON) field. Select Test to confirm that the integration with GCS is working. Select Create to generate the configuration. Once configured, Red Hat Advanced Cluster Security for Kubernetes automatically backs up all data according to the specified schedule. 9.1.1. Perform on-demand backups on Google Cloud Storage Uses the RHACS portal to trigger manual backups of Red Hat Advanced Cluster Security for Kubernetes on Google Cloud Storage. Prerequisites You must have already integrated Red Hat Advanced Cluster Security for Kubernetes with Google Cloud Storage. Procedure In the RHACS portal, go to Platform Configuration Integrations . Under the External backups section, click Google Cloud Storage . Select the integration name for the GCS bucket in which you want to do a backup. Click Trigger Backup . Note Currently, when you select the Trigger Backup option, there is no notification. However, Red Hat Advanced Cluster Security for Kubernetes begins the backup task in the background. 9.1.1.1. Additional resources Backing up Red Hat Advanced Cluster Security for Kubernetes Restoring from a backup