Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ for Kubernetes Administrator's Guide
  3. Deploying and configuring the NetBackup Kubernetes operator
  4. Customize Kubernetes workload
NetBackup™ for Kubernetes Administrator's Guide

Customize Kubernetes workload

To get the configuration values, run the following command:

kubectl get configmaps <namespace>-backup-operator-configuration -n <namespace> -o yaml > {local.file}.

To edit the configuration, run the following command:

kubectl edit cm<backup-operator-configmap> -n <kops-namespace>.

Set the VirtualMachine=false to disable the auto discovery of the assets.

Note:

NetBackup allows you to edit only the VirtualMachine parameter under the Resources section.

Note:

To get the configuration value, you can run the command: kubectl get configmaps <namespace>-backup-operator-configuration -n <namespace> -o yaml > {local.file}

Table: Kubernetes operators supported configuration parameters in <namespace>-backup-operator-configuration

Configuration

Description

Default value

Possible value

daemonsets

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

true

true, false

deployments

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

true

true, false

pods

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

true

true, false

replicasets

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

true

true, false

secrets

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

true

true, false

services

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

true

true, false

namespace

Kubernetes operator is deployed in the namespace.

If value is set to false this resource are discovered and backed up. But the resources will not be visible in the Resource section when you click on Kubernetes namespace in NetBackup web UI.

Any name given to a namespace.

NetBackup namespace.

cleanStaleCRDurationMinutes

Time duration after a CR job is invoked to clean stale CRs. The interval after which stale custom resource cleanup job is triggered.

For long running Backup from snapshot and Restore from backup jobs, you need to increase the cleanStaleCRDurationMinutes value.

1440 minutes

Any values in minutes

ttlCRDurationMinutes

TTL CR duration

30240 minutes

30240 minutes

fipsMode

Configuration to enable FIPS_MODE in Netbackup Kubernetes Operator and data mover.

DISABLE

ENABLE, DISABLE

livesnessProbeInitialDelay

Probe initial delay period.

60 seconds

60 minutes

livenessProbeTimeoutInSeconds

On loaded machine, liveness probe execution might take more than 1 second, User can increase this value in-order to stop failures due liveness probe timeout errors.

1 Second

1 to 5 Seconds.

livenessProbePeriodInSeconds

Probe period.

180 seconds

Any value in seconds

checkNbcertdaemonStatusDurationMinutes

NB certificate daemon status duration.

1440 minutes

1440 minutes

collectDataMoverLogs

Due to high memory usage in datamover logs collection, it is recommended to enable the logs only when you are debugging, troubleshooting, or restarting the pods.

Before enabling the logs for datamover, ensure to increase the memory limits for NetBackup Kubernetes pod to at least 2 GB or more. After the debugging or troubleshooting is done, you can reset to the previous or the default value.

Note:

Granular support is provided for collecting datamover logs only in case of failed jobs. It provides an additional level of granularity layer, All/FailedOnly/Off.

Failed

All, Failed, None

maxRetentionDataMoverLogsInHours

Maximum retention for datamover logs.

24 hours

72 hours

maxRetentionDataMoverInHours

It removes all the datamover resources that are older than the specified time.

24 hours

Any value in hours

cleanStaleCertFilesDurationMinutes

The interval after which stale certificate files cleanup job is triggered.

60 minutes

1440 minutes

maxRetentionInDiscoveryCacheHours

It is the time in hours that decides the time interval for keeping the discovery cache.

24 hours

48 hours

pollingTimeoutInMinutes

It is the timeout that keeps retrying till it expires and fails.

15 minutes

Any value in minutes

pollingFrequencyInSecs

Polling frequency.

5 seconds

Any value in seconds

nbcertPrerequisteDirectoryAndFiles

NBCA prerequisites.

Certificate name

Certificate name

Feedback

Was this page helpful?
Previous

Automated configuration of NetBackup protection for Kubernetes

Next

Prerequisites for backup from snapshot and restore from backup operations

Feedback

Was this page helpful?