How do I restore the CLM Kubernetes secrets?

Steps

Note: Ensure that you restore each backup file on the correct CLM cluster; a CLM secrets backup is specific to a CLM cluster.

Perform the following steps in each data center to restore the CLM Kubernetes secrets.

 
1 

Log in as the root or CLM admin user on the CLM deployer host.


2 

Open a console window.


3 

Enter the following on the CLM deployer host:

# cd /opt/nsp/NSP-CN-DEP-release-ID/bin ↵


4 

Enter the following:

./nspdeployerctl secret -i backup_file restore ↵

where backup_file is the absolute path and filename of the secrets backup file to restore

The following prompt is displayed:

Please provide the encryption password for /opt/backupfile

enter aes-256-ctr decryption password:


5 

Enter the password recorded during the backup creation.

As the secrets are restored, messages like the following are displayed for each Kubernetes namespace:

Restoring secrets from backup_file...

secret/ca-key-pair-external created

  Restored secret namespace:ca-key-pair-external

secret/ca-key-pair-internal created

  Restored secret namespace:ca-key-pair-internal

secret/nsp-tls-store-pass created

  Restored secret namespace:nsp-tls-store-pass

End of steps