Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deployment Guide for Kubernetes Clusters
  3. Section IV. Maintenance
  4. Upgrading
  5. Upgrading Cloud Scale Technology
  6. Upgrade the add-ons
NetBackup™ Deployment Guide for Kubernetes Clusters

Upgrade the add-ons

Upgrade the providers, cert-manager and trust-manager add-ons as follows:

Cert-Manager
  • If upgrading from 10.3.0.1 or earlier version of NetBackup and cert-manager was not deployed using helm charts, delete the cert-manager first and then deploy the cert-manager using helm charts.

    Following is an example for deleting the cert-manager v1.12.3:

    kubectl delete -f https://github.com/jetstack/cert-manager/releases/download/v1.12.3/cert-manager.yaml

  • Run the following commands to deploy the cert-manager using helm charts:

    • helm repo add jetstack https://charts.jetstack.io

    • helm repo update

    • helm upgrade --install -n cert-manager cert-manager jetstack/cert-manager \ --version 1.13.3 \ --set webhook.timeoutSeconds=30 \ --set installCRDs=true \ --wait --create-namespace

Trust-Manager
  1. Run the following command for deploying the trust manager:

    helm repo add jetstack https://charts.jetstack.io --force-update

    kubectl create namespace trust-manager

    helm upgrade --install -n trust-manager trust-manager jetstack/trust-manager --set app.trust.namespace=netbackup --version v0.7.0 --wait

  2. Run the following command to verify if the trust manager is installed:

    kubectl get pods -n trust-manager

    NAME                             READY   STATUS     RESTARTS    AGE 
    
    trust-manager-####545c9f-9z57r   1/1     Running 11 (19h ago)   170d 

Feedback

Was this page helpful?
Previous

Upgrade the cluster

Next

Upgrade the operators

Feedback

Was this page helpful?