- Deploy and Configure Ops Manager Resources >
- Configure Queryable Backups for Ops Manager Resources
Configure Queryable Backups for Ops Manager Resources¶
On this page
You can configure queryable backups for Ops Manager resources that you deploy in the Kubernetes Operator.
Note
In the Ops Manager documentation, queryable backups are also referred to as queryable snapshots, or queryable restores.
Queryable backups allow you to run queries on specific backup snapsnots from your Ops Manager resources. Querying Ops Manager backups helps you compare data from different snapshots and identify the best snapshot to use for restoring data.
In the following procedure you:
- Create the queryable.pem file that holds the certificates for accessing the backup snapshots that you intend to query.
- Create the secret containing the queryable.pem file.
- Configure an Ops Manager custom resource to use the secret for queryable backups.
- Save the Ops Manager custom resource configuration and apply it.
Once the Kubernetes Operator deploys the updated configuration for its custom
resource, Ops Manager can read the secret from the spec.backup.queryableBackupSecretRef.name
parameter. You can now access the backup snapshots and run queries on them.
Prerequisites¶
Before you configure queryable backups, complete the following tasks:
- Install the Kubernetes Operator.
- Deploy the Ops Manager application.
- Configure Backup Settings for the Ops Manager Resource. In the linked procedures, see the steps for configuring backups.
Procedure¶
Configure kubectl
to default to your namespace.¶
If you have not already, run the following command to execute all
kubectl
commands in the namespace you created.
Note
If you are deploying an Ops Manager resource in a multi-Kubernetes-cluster deployment:
- Set the
context
to the name of the central cluster, such as:kubectl config set context "$MDB_CENTRAL_CLUSTER_FULL_NAME"
. - Set the
--namespace
to the same scope that you used for your multi-Kubernetes-cluster deployment, such as:kubectl config --namespace "mongodb"
.
Create the PEM file for backups.¶
Create the Ops Manager queryable.pem file that you will use for accessing and querying backups based on your deployment’s TLS requirements. The PEM file contains a public key certificate and its associated private key that are needed to access and run queries on backup snapshots in Ops Manager.
To learn more about the PEM file’s requirements, see Authorization and Authentication Requirements in Ops Manager.
Create a secret containing the PEM file.¶
Run the following command to create a secret with the queryable.pem file that you created in the previous step:
If you’re using HashiCorp Vault as your secret storage tool, you can Create a Vault Secret instead.
To learn about your options for secret storage, see Configure Secret Storage.
Configure Ops Manager custom resource to use the secret.¶
Configure spec.backup.queryableBackupSecretRef.name
to
reference the queryable.pem
secret.
Save your Ops Manager config file.¶
Apply changes to your Ops Manager deployment.¶
Invoke the following kubectl
command on the filename of the
Ops Manager resource definition:
When you apply the changes to your Ops Manager resource definition, Kubernetes updates the Ops Manager StatefulSet, creates the volumes, and mounts the Secrets.
Track the status of the mounted volumes and Secrets.¶
Obtain the list of persistent volume claims:
Obtain the Secrets:
Check the status of your Ops Manager resources:
The
-w
flag means “watch”. With the “watch” flag set, the output refreshes immediately when the configuration changes until the status phase achieves theRunning
state.To learn more about the resource deployment statuses, see Troubleshoot the Kubernetes Operator.
After you configure queryable backups, you can query them to select the best backup snapshot to use for restoring data.