Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deployment Guide for Kubernetes Clusters
  3. Section IV. Maintenance
  4. Upgrading
  5. Upgrading Cloud Scale Technology
  6. Create db-cert bundle
NetBackup™ Deployment Guide for Kubernetes Clusters

Create db-cert bundle

Create db cert bundle if it does not exists as follows:

cat <<EOF | kubectl apply -f -
apiVersion: trust.cert-manager.io/v1alpha1
kind: Bundle
metadata:
  name: db-cert
spec:
  sources:
  - secret:
      name: "postgresql-netbackup-ca"
      key: "tls.crt"
  target:
    namespaceSelector:
      matchLabels:
        kubernetes.io/metadata.name: "$ENVIRONMENT_NAMESPACE"
    configMap:
      key: "dbcertpem"
EOF

After installing db-cert bundle, ensure that you have db-cert configMap present in netbackup namespace with size 1 as follows:

bash-5.1$ kubectl get configmap db-cert -n $ENVIRONMENT_NAMESPACE
NAME      DATA   AGE
db-cert   1      11h

Note:

If the configMap is showing the size as 0, then delete it and ensure that the trust-manager recreates it before proceeding further.

Feedback

Was this page helpful?
Previous

Upgrade PostgreSQL database

Next

Upgrade Cloud Scale

Feedback

Was this page helpful?