How do I restore the CLM Kubernetes secrets?

Steps

Note: Ensure that you restore each backup file on the correct CLM cluster; a CLM secrets backup is specific to a CLM cluster.

Perform the following steps in each data center to restore the CLM Kubernetes secrets.

 

Log in as the root or CLM admin user on the CLM deployer host.


Open a console window.


Enter the following on the CLM deployer host:

cd /opt/nsp/NSP-CN-DEP-release-ID/bin ↵


Enter the following:

./nspdeployerctl secret -i backup_file restore ↵

where backup_file is the absolute path and filename of the secrets backup file to restore

The following prompt is displayed:

Please provide the encryption password for /opt/backupfile

enter aes-256-ctr decryption password:


Enter the password recorded during the backup creation.

As the secrets are restored, messages like the following are displayed for each Kubernetes namespace:

Restoring secrets from backup_file...

secret/ca-key-pair-external created

  Restored secret namespace:ca-key-pair-external

secret/ca-key-pair-internal created

  Restored secret namespace:ca-key-pair-internal

secret/nsp-tls-store-pass created

  Restored secret namespace:nsp-tls-store-pass

End of steps